$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa File: 297a0a3a-3c07-379d-94e5-e4192d35bd92.roa (raw, json) Hash identifier: NilwNVYkinQZbumHEKmPJj6Fk5Jb3eJwrHRWhQKu1HU= Subject key identifier: 65:0E:FB:42:64:07:7B:91:5B:43:9A:5C:73:D9:89:59:A1:92:13:D9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A7E7B86FF432217CCB489F1E0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 54113 IP address blocks: 157.5.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:86:ff:43:22:17:cc:b4:89:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=07b01b72-1e7a-4535-a787-58f5828dacc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:fd:f8:5b:57:e0:bf:fc:5b:03:5d:33:db: f0:f5:5f:a6:5b:a5:b7:a2:ac:bf:45:0c:b9:f4:c7: c0:21:6f:44:eb:de:a9:bc:72:27:43:b4:47:be:d2: 32:05:35:5e:64:9a:fb:28:38:9d:23:ca:92:d9:74: 02:f8:16:d7:e8:df:9a:78:7b:88:c9:ad:eb:69:d6: 72:9a:73:a2:7e:ea:a7:a2:3a:59:5e:3b:11:1c:3f: cb:be:0a:d4:4f:5f:32:cb:0f:f9:23:de:80:a1:8a: ff:43:05:63:f5:60:5f:47:2e:80:e8:ed:a4:18:04: 5f:24:4b:9f:6a:c1:22:45:65:1e:50:ee:41:a5:74: 56:1c:15:5a:a2:50:0d:61:52:45:74:f5:ab:af:ae: 9d:81:33:06:25:cd:a2:75:77:2e:96:cc:82:ca:da: 21:0e:33:4f:4e:76:e3:57:b1:59:cb:5d:a7:b7:c3: 51:a1:19:5b:03:1f:2c:83:b5:79:ff:3d:e0:c0:95: 19:9e:3b:22:5d:f6:9a:04:b5:53:0f:e7:64:89:b3: ab:ec:65:ab:a2:50:19:ad:21:b8:4e:e5:ae:6b:db: 46:b7:57:da:72:03:01:74:2d:b8:67:49:e1:42:43: a4:59:e0:c4:a5:2b:44:d2:fb:4a:10:b3:d4:b1:41: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0E:FB:42:64:07:7B:91:5B:43:9A:5C:73:D9:89:59:A1:92:13:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/297a0a3a-3c07-379d-94e5-e4192d35bd92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:dd:2d:14:d1:23:d6:23:5c:2c:8a:9c:74:93:db:0a:6b:ae: 13:15:ad:52:88:27:15:d8:1a:32:24:da:d4:f4:9e:9f:4d:42: 95:7d:e1:04:34:7a:31:fb:ac:fa:2a:c1:7b:4a:36:d6:54:81: d3:b3:42:e7:34:3f:04:28:81:ae:48:62:74:b7:af:d9:5e:e0: f9:7d:e6:9a:af:d8:12:db:3d:67:07:ab:66:4d:2a:58:fb:77: c0:89:4c:24:fd:fb:e7:2c:17:22:87:db:00:65:bc:48:6e:ba: e8:53:ba:4a:32:38:38:b5:e0:66:c5:ef:7b:fe:9c:c1:6f:b6: 6c:12:f0:89:7f:de:0f:27:9d:04:9c:90:75:db:d2:a8:45:7d: 99:cf:d8:e5:cb:fa:85:87:ea:7a:8a:1a:12:b1:0b:5a:bd:0b: 2e:59:85:cd:38:71:62:5d:49:26:2a:21:f8:50:4a:80:66:93: 79:fe:49:21:90:c3:00:d5:cd:66:27:d7:68:ab:ed:9e:f1:62: a2:36:34:5e:ce:58:ed:80:bd:69:1e:35:61:19:a6:14:76:7e: 2a:ee:18:16:ff:c5:09:30:00:d5:a0:d9:3c:a2:6d:69:50:b9: 2c:a9:3a:91:a1:1d:79:10:6a:8d:45:5c:95:02:8e:ef:00:d8: b7:2d:94:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4b/QyIXzLSJ8eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MDdiMDFiNzItMWU3YS00NTM1LWE3ODctNThmNTgyOGRhY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0H9+FtX4L/8WwNdM9vw9V+mW6W3oqy/RQy5 9MfAIW9E696pvHInQ7RHvtIyBTVeZJr7KDidI8qS2XQC+BbX6N+aeHuIya3radZy mnOifuqnojpZXjsRHD/LvgrUT18yyw/5I96AoYr/QwVj9WBfRy6A6O2kGARfJEuf asEiRWUeUO5BpXRWHBVaolANYVJFdPWrr66dgTMGJc2idXculsyCytohDjNPTnbj V7FZy12nt8NRoRlbAx8sg7V5/z3gwJUZnjsiXfaaBLVTD+dkibOr7GWrolAZrSG4 TuWua9tGt1facgMBdC24Z0nhQkOkWeDEpStE0vtKELPUsUEa+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUO+0JkB3uRW0OaXHPZiVmhkhPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjk3YTBhM2EtM2MwNy0z NzlkLTk0ZTUtZTQxOTJkMzViZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7dLRTRI9YjXCyKnHST2wprrhMVrVKIJxXYGjIk2tT0np9NQpV94QQ0 ejH7rPoqwXtKNtZUgdOzQuc0PwQoga5IYnS3r9le4Pl95pqv2BLbPWcHq2ZNKlj7 d8CJTCT9++csFyKH2wBlvEhuuuhTukoyODi14GbF73v+nMFvtmwS8Il/3g8nnQSc kHXb0qhFfZnP2OXL+oWH6nqKGhKxC1q9Cy5Zhc04cWJdSSYqIfhQSoBmk3n+SSGQ wwDVzWYn12ir7Z7xYqI2NF7OWO2AvWkeNWEZphR2firuGBb/xQkwANWg2TyibWlQ uSypOpGhHXkQao1FXJUCju8A2LctlGs= -----END CERTIFICATE-----Generated at Mon Aug 4 07:46:56 2025 by rpki-client