$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7aac6e8a-121d-3e2f-8430-bff4c1458075.roa File: 7aac6e8a-121d-3e2f-8430-bff4c1458075.roa (raw, json) Hash identifier: WM8LT5Q3M6XKhcCbbLurfPbRRygMQ+6R13xuNZTd8jM= Subject key identifier: 8E:82:0D:35:CC:5B:1F:02:75:0F:C8:F4:30:BC:E3:BA:51:5B:31:A2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B5F3758E35E833B67C4A91380 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7aac6e8a-121d-3e2f-8430-bff4c1458075.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 54113 IP address blocks: 157.5.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:58:e3:5e:83:3b:67:c4:a9:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=63539f40-2a30-4ce4-b644-39db70f38962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:fa:65:c8:26:a1:6f:b0:ed:ee:53:30:0b: 32:f4:b6:f2:5c:91:6d:c1:de:c4:84:52:28:e4:57: 7e:9c:74:34:1d:db:bd:3d:55:9e:9f:df:f1:5d:05: ec:65:a6:98:98:11:9f:11:c6:d4:fa:f8:dd:cb:c9: bf:d0:c3:02:2e:87:e3:30:ce:93:9f:32:5d:15:22: 9b:aa:be:55:4e:89:0f:18:dc:56:1a:e1:81:b0:64: f3:b6:0d:54:b9:63:68:e3:54:f7:64:1f:49:ca:82: e6:6b:ae:90:39:c1:2b:d9:7b:ff:a9:42:2d:e4:9a: 44:21:3d:83:07:4f:91:a5:28:52:08:78:1b:94:32: 82:d0:fa:7f:32:25:c5:d9:2e:54:d4:ea:c7:97:34: f2:09:b8:31:2c:6d:66:5f:9c:7c:55:c8:06:a4:1a: ef:f7:4b:a2:57:00:8e:f3:3d:c5:08:41:9a:4a:50: 25:ca:64:84:b2:6c:ce:e9:9f:97:88:1f:49:c4:23: ef:34:0a:cd:7b:87:79:e8:9c:d8:7b:84:b0:d8:ab: d9:8f:64:3e:f6:24:31:b4:44:ff:d7:cb:e5:a8:e4: 28:14:3a:c4:36:d5:52:97:6a:44:70:62:0e:b5:36: f5:57:43:dd:dc:63:5a:79:09:de:39:a2:9e:4a:1c: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:82:0D:35:CC:5B:1F:02:75:0F:C8:F4:30:BC:E3:BA:51:5B:31:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7aac6e8a-121d-3e2f-8430-bff4c1458075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3c:32:16:5c:ad:fa:57:09:02:c9:45:ac:64:e5:b7:b5:8a: 90:8c:f6:5a:b4:18:63:a9:8b:21:ec:15:cd:1c:e5:68:63:a9: d0:4e:15:9f:0c:f6:f0:96:6d:5b:35:3c:f8:af:c9:00:d0:59: 21:3e:03:3c:bd:ff:15:bc:96:c2:0a:53:ab:86:2a:ae:1f:89: 67:86:67:8b:7b:99:62:71:9b:9b:e2:e6:47:a5:c0:30:15:0f: d1:bc:49:f8:2a:32:be:3d:be:63:ff:42:91:16:07:a7:ec:0d: b9:5e:e5:33:c2:39:06:f0:d9:55:05:c4:03:16:dc:5b:05:b6: a6:a6:36:81:fb:3f:45:bd:d3:41:0d:60:94:0e:39:ac:56:24: 46:83:3a:8b:d0:d5:66:57:16:03:24:bd:8c:e7:e5:df:45:d3: 3c:5f:cf:a0:5d:bf:d6:c8:ae:15:69:f3:30:26:9b:26:e6:c6: a9:88:da:85:2e:0e:49:fc:f6:c1:0f:84:65:67:e3:41:89:61: 73:23:a5:64:9c:dc:b0:e7:b3:c3:8c:77:35:34:23:0b:2e:ed: a5:36:f5:76:22:e2:4d:18:f1:6f:48:4e:57:32:6a:62:69:2d: f8:10:f3:04:9b:d7:ce:77:eb:98:9c:f1:7f:74:60:77:32:07: 9d:06:cc:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN1jjXoM7Z8SpE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NjM1MzlmNDAtMmEzMC00Y2U0LWI2NDQtMzlkYjcwZjM4OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyT6ZcgmoW+w7e5TMAsy9LbyXJFtwd7EhFIo 5Fd+nHQ0Hdu9PVWen9/xXQXsZaaYmBGfEcbU+vjdy8m/0MMCLofjMM6TnzJdFSKb qr5VTokPGNxWGuGBsGTztg1UuWNo41T3ZB9JyoLma66QOcEr2Xv/qUIt5JpEIT2D B0+RpShSCHgblDKC0Pp/MiXF2S5U1OrHlzTyCbgxLG1mX5x8VcgGpBrv90uiVwCO 8z3FCEGaSlAlymSEsmzO6Z+XiB9JxCPvNArNe4d56JzYe4Sw2KvZj2Q+9iQxtET/ 18vlqOQoFDrENtVSl2pEcGIOtTb1V0Pd3GNaeQneOaKeShw+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6CDTXMWx8CdQ/I9DC847pRWzGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2FhYzZlOGEtMTIxZC0z ZTJmLTg0MzAtYmZmNGMxNDU4MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs8MhZcrfpXCQLJRaxk5be1ipCM9lq0GGOpiyHsFc0c5WhjqdBOFZ8M 9vCWbVs1PPivyQDQWSE+Azy9/xW8lsIKU6uGKq4fiWeGZ4t7mWJxm5vi5kelwDAV D9G8SfgqMr49vmP/QpEWB6fsDble5TPCOQbw2VUFxAMW3FsFtqamNoH7P0W900EN YJQOOaxWJEaDOovQ1WZXFgMkvYzn5d9F0zxfz6Bdv9bIrhVp8zAmmybmxqmI2oUu Dkn89sEPhGVn40GJYXMjpWSc3LDns8OMdzU0Iwsu7aU29XYi4k0Y8W9ITlcyamJp LfgQ8wSb185365ic8X90YHcyB50GzBM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:42:36 2025 by rpki-client