$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa File: 9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa (raw, json) Hash identifier: N323oti+yP2PKAl2pco7Cx7MgqzB+IEtJ/0dn3s8GLs= Subject key identifier: D6:1C:D8:7D:F5:DF:AA:C2:47:2A:63:7B:93:90:41:9D:6D:87:2E:E9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A7E7B8893B144A708CBE5EC40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 54113 IP address blocks: 157.5.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:88:93:b1:44:a7:08:cb:e5:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=901d2345-d9b0-4522-8526-67865dfcb587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7b:e1:f8:8b:60:f2:3d:5a:bb:e3:e4:e7:f2: dd:7a:53:14:0a:de:30:a9:e9:a7:ee:55:d9:e9:09: 28:37:d3:d9:31:6f:57:95:96:0a:dd:7e:86:ab:73: c0:24:db:7f:e0:f5:1b:48:67:4f:0f:8c:a3:a6:98: 8b:91:ad:28:a2:aa:6a:c6:94:66:ed:ce:35:6b:5b: 84:5a:fc:53:b6:54:ff:cb:f4:c9:e4:20:2c:69:29: 34:70:01:39:47:91:a9:ea:5b:d5:ac:3c:c9:bc:3f: d0:3e:eb:15:b4:af:41:45:69:64:36:6b:ab:93:ee: 2c:bd:f8:6c:7d:c4:8f:52:4f:e3:19:4f:9c:b6:17: 69:76:df:68:f2:fc:36:25:72:c4:27:9a:06:d4:03: 8c:ee:0e:69:8e:73:b2:e6:43:c6:74:d9:68:24:22: ab:67:00:03:4f:ea:03:b3:44:7a:b0:0b:4b:2c:1e: b2:49:e0:cd:23:0c:f4:c3:14:58:99:b5:f9:2a:b7: 57:aa:ea:99:7a:7a:32:92:3a:3b:f6:f0:99:bc:23: 7f:0a:b7:c1:7e:75:5f:15:e9:02:4f:7a:8a:68:ea: e9:c4:06:b5:8f:9f:c3:f1:e9:f0:f5:59:5e:81:43: 3b:ec:c5:d4:3b:0f:47:b6:76:8d:27:a6:77:04:44: 87:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1C:D8:7D:F5:DF:AA:C2:47:2A:63:7B:93:90:41:9D:6D:87:2E:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:db:f3:65:6f:6d:c3:f7:67:b7:c1:74:cf:31:84:23:a4:b5: 3f:e3:94:7b:6e:c4:f0:de:a5:37:1a:7b:b1:c1:c2:4c:87:1a: be:d4:67:f1:06:3d:2e:56:ef:bf:fb:bd:95:e9:96:9e:74:b0: 8b:96:63:61:8b:83:47:68:2b:2b:ca:21:23:f5:32:7c:e2:8b: 50:b6:b7:25:1b:f7:86:e7:9d:a8:4d:97:da:09:7e:b1:cb:d0: 53:ab:58:47:c0:a7:ec:d7:29:2f:33:ed:de:d5:bb:7c:4f:2d: d6:dd:63:10:f6:ad:cc:27:2d:c5:6e:ac:17:52:17:d4:4b:51: c2:cd:4f:79:57:54:2a:2a:2b:d4:7b:f3:f8:f0:1e:63:6b:4b: 59:00:d2:29:74:81:2d:e8:79:de:bc:e4:71:7b:7a:f6:ec:91: f4:5a:44:f7:b5:af:49:74:d7:c3:16:c2:98:a6:0b:7f:5c:8d: 66:c7:6b:0b:71:8b:ad:9e:e6:65:02:e1:47:3a:3d:9e:59:33: 41:8f:f3:eb:e7:7a:fd:ce:3b:2a:75:30:d9:62:8a:dd:b0:ec: b3:12:0e:43:b2:a6:51:6c:46:1e:d1:52:7f:3a:ea:47:b1:8f: c7:b9:a0:39:7b:13:6b:35:8c:aa:b2:ed:8f:1f:c8:b6:4d:56: 1c:df:58:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4iTsUSnCMvl7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OTAxZDIzNDUtZDliMC00NTIyLTg1MjYtNjc4NjVkZmNiNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHvh+Itg8j1au+Pk5/LdelMUCt4wqemn7lXZ 6QkoN9PZMW9XlZYK3X6Gq3PAJNt/4PUbSGdPD4yjppiLka0ooqpqxpRm7c41a1uE WvxTtlT/y/TJ5CAsaSk0cAE5R5Gp6lvVrDzJvD/QPusVtK9BRWlkNmurk+4svfhs fcSPUk/jGU+cthdpdt9o8vw2JXLEJ5oG1AOM7g5pjnOy5kPGdNloJCKrZwADT+oD s0R6sAtLLB6ySeDNIwz0wxRYmbX5KrdXquqZenoykjo79vCZvCN/CrfBfnVfFekC T3qKaOrpxAa1j5/D8enw9VlegUM77MXUOw9HtnaNJ6Z3BESHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYc2H3136rCRypje5OQQZ1thy7pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWVkNjY2ZDktZDZkNy0z MTAyLTgwZWEtYTRmNjQzYWQ4NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnb82VvbcP3Z7fBdM8xhCOktT/jlHtuxPDepTcae7HBwkyHGr7UZ/EG PS5W77/7vZXplp50sIuWY2GLg0doKyvKISP1Mnzii1C2tyUb94bnnahNl9oJfrHL 0FOrWEfAp+zXKS8z7d7Vu3xPLdbdYxD2rcwnLcVurBdSF9RLUcLNT3lXVCoqK9R7 8/jwHmNrS1kA0il0gS3oed685HF7evbskfRaRPe1r0l018MWwpimC39cjWbHawtx i62e5mUC4Uc6PZ5ZM0GP8+vnev3OOyp1MNliit2w7LMSDkOyplFsRh7RUn866kex j8e5oDl7E2s1jKqy7Y8fyLZNVhzfWIg= -----END CERTIFICATE-----Generated at Mon Aug 4 07:44:39 2025 by rpki-client