$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/902a76fc-d7da-3384-a9ff-2d61791e46f9.roa File: 902a76fc-d7da-3384-a9ff-2d61791e46f9.roa (raw, json) Hash identifier: nZBVFwG1S5soGF/5n89i93Q5qaQIgZYZLnQJQXiJBiA= Subject key identifier: 7C:EE:71:21:82:2D:15:7E:2D:36:E8:91:1F:32:18:75:75:C6:D8:89 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B540C6BE8F9DAFEF7C0306980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/902a76fc-d7da-3384-a9ff-2d61791e46f9.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 157.5.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:6b:e8:f9:da:fe:f7:c0:30:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=2550ada3-4b5d-423f-9447-fabc01f1df89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:8a:b4:79:36:66:64:5f:e0:14:3f:94:15: d9:8c:20:6f:13:b7:65:84:ca:94:3e:3b:06:dc:09: db:a0:90:25:ee:fb:9e:f4:ec:08:d5:71:d4:c2:24: 04:7c:7d:7d:d2:c3:74:f4:3d:8e:5e:2d:94:e6:47: 83:d1:11:51:2a:bf:46:79:3f:a4:eb:1f:28:e6:85: 40:63:9a:12:6d:5e:a0:ff:de:96:c6:3e:f4:ba:3b: 6b:3c:c0:09:bc:3d:37:d5:4c:6b:d7:49:7c:48:39: 54:fb:1d:c9:77:db:22:34:07:b8:6c:3c:fb:55:cd: b2:cb:e8:59:9a:eb:cf:1f:11:da:e9:26:22:44:10: 18:10:8f:1b:6a:84:d6:d1:4b:0a:f0:62:2c:95:a7: cb:75:20:c8:7f:1e:a4:0c:0b:93:7e:75:d2:61:ee: 45:76:c6:1d:c7:77:f2:17:70:e9:f7:bc:e5:93:1d: bd:ea:5d:4c:76:62:36:7d:67:2d:da:ca:bf:3c:3a: 0d:ca:12:11:d1:24:70:59:9f:c4:f1:bb:3e:ca:be: c6:40:54:ec:dc:ff:37:02:65:e0:78:03:2c:95:a5: d3:1e:cd:9d:27:f5:c8:5a:ea:d8:cf:42:bb:d9:00: fb:02:c9:a1:cb:76:d9:a4:2a:6e:21:59:24:ba:c8: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EE:71:21:82:2D:15:7E:2D:36:E8:91:1F:32:18:75:75:C6:D8:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/902a76fc-d7da-3384-a9ff-2d61791e46f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:15:ee:30:91:54:16:75:b1:b0:c1:ec:96:71:0b:c7:b6:a3: 1d:98:2b:7b:ce:74:57:f1:a6:68:08:e2:a8:1f:f0:4b:fc:46: 03:60:3a:4d:f5:35:09:bf:0d:78:41:b8:bc:c3:fe:ad:30:a9: 2b:77:88:3a:3e:be:b3:fc:16:38:33:09:47:be:4d:c9:08:31: 8d:51:12:93:83:46:a0:2f:9f:57:1b:6c:7c:35:5f:50:b0:d4: 9b:54:7e:84:53:a2:1c:34:af:73:d9:27:e6:0a:7c:9c:cf:6e: 43:83:3d:49:a5:d8:f8:92:3a:17:71:42:4a:42:11:7d:f4:26: a6:b5:3d:ab:21:26:19:36:f9:79:a2:54:31:71:43:c5:7a:99: d8:85:a7:96:8e:ef:1c:2c:f0:27:de:ee:b7:32:59:cd:6c:4e: 2a:f5:10:3f:f7:c1:8e:d7:f7:98:19:30:ae:50:33:dc:6c:a1: 33:26:97:69:8c:37:2f:6f:8e:69:ed:70:66:8f:19:0f:d2:f2: da:30:5f:6d:4c:12:ad:51:fb:c5:6c:a6:f2:05:cd:01:f2:ba: 3a:8f:cf:d3:f9:1f:71:da:e3:01:71:2f:ad:1c:f1:3f:04:5c: d0:0f:df:08:33:bd:28:f1:4c:2c:66:bc:ed:d3:a6:88:59:a7: 14:2e:1d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGvo+dr+98AwaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MjU1MGFkYTMtNGI1ZC00MjNmLTk0NDctZmFiYzAxZjFkZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHmKtHk2ZmRf4BQ/lBXZjCBvE7dlhMqUPjsG 3AnboJAl7vue9OwI1XHUwiQEfH190sN09D2OXi2U5keD0RFRKr9GeT+k6x8o5oVA Y5oSbV6g/96Wxj70ujtrPMAJvD031Uxr10l8SDlU+x3Jd9siNAe4bDz7Vc2yy+hZ muvPHxHa6SYiRBAYEI8baoTW0UsK8GIslafLdSDIfx6kDAuTfnXSYe5FdsYdx3fy F3Dp97zlkx296l1MdmI2fWct2sq/PDoNyhIR0SRwWZ/E8bs+yr7GQFTs3P83AmXg eAMslaXTHs2dJ/XIWurYz0K72QD7Asmhy3bZpCpuIVkkushLEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzucSGCLRV+LTbokR8yGHV1xtiJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTAyYTc2ZmMtZDdkYS0z Mzg0LWE5ZmYtMmQ2MTc5MWU0NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQVqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYV7jCRVBZ1sbDB7JZxC8e2ox2YK3vOdFfxpmgI4qgf8Ev8RgNgOk31 NQm/DXhBuLzD/q0wqSt3iDo+vrP8FjgzCUe+TckIMY1REpODRqAvn1cbbHw1X1Cw 1JtUfoRTohw0r3PZJ+YKfJzPbkODPUml2PiSOhdxQkpCEX30Jqa1PashJhk2+Xmi VDFxQ8V6mdiFp5aO7xws8Cfe7rcyWc1sTir1ED/3wY7X95gZMK5QM9xsoTMml2mM Ny9vjmntcGaPGQ/S8towX21MEq1R+8VspvIFzQHyujqPz9P5H3Ha4wFxL60c8T8E XNAP3wgzvSjxTCxmvO3TpohZpxQuHZY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:41:05 2025 by rpki-client