$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ab8f4b27-13b3-39b0-940e-3363743e11b3.roa File: ab8f4b27-13b3-39b0-940e-3363743e11b3.roa (raw, json) Hash identifier: 81mCMgrnrvXyZYu1dwGeBheUDYWyU5W0njpfeC9VLHg= Subject key identifier: 4C:00:63:BD:14:2F:E2:26:BF:71:38:D3:27:CE:52:5C:82:16:15:CB Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A7E7B8787533DB5F9C65B42E8 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ab8f4b27-13b3-39b0-940e-3363743e11b3.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 54113 IP address blocks: 157.5.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:87:87:53:3d:b5:f9:c6:5b:42:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=b860de85-c3c0-4998-b08c-e988cda3d8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:fc:6b:38:8a:8c:97:b6:6f:bd:2b:4a:fe: 49:b3:e3:de:f5:11:51:5c:ec:be:b2:de:a7:2e:67: 8e:c8:21:4b:c6:ed:26:ec:a0:b4:9f:4a:a8:4a:1f: ff:bc:05:67:95:87:42:53:22:c0:71:ec:fd:46:e8: c7:e9:66:ae:b7:a7:2e:7f:d3:01:48:3e:f5:aa:ab: 26:70:1e:79:16:db:e6:40:96:42:b5:fb:40:34:73: 9b:36:39:d3:33:fc:1e:ec:e6:63:78:d2:2f:85:80: 58:ef:ce:3c:7c:46:cf:71:7e:7a:aa:fe:96:01:97: 75:8f:53:9d:0e:ad:51:64:f3:b5:21:7d:ca:1d:bb: 31:39:03:88:b5:9e:c4:c5:9c:79:b6:eb:a8:9e:9d: 3a:9e:0f:ad:f8:4d:d4:be:77:39:97:6c:06:5a:28: 86:db:93:39:85:e2:85:a9:a7:08:5a:7d:47:1d:d5: 5f:74:4f:60:09:ff:86:96:d1:59:91:15:01:b6:9f: 40:8d:5e:a5:93:ea:97:b1:d0:92:b5:21:df:49:2c: ba:65:83:a7:8f:00:d5:cb:0e:91:a7:6f:45:2a:af: 13:12:18:b5:8e:d8:aa:7d:84:d3:4b:df:aa:f5:d0: cb:eb:b2:4f:a9:26:6d:a6:84:46:40:33:a8:bd:ca: 58:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:00:63:BD:14:2F:E2:26:BF:71:38:D3:27:CE:52:5C:82:16:15:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ab8f4b27-13b3-39b0-940e-3363743e11b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:96:62:84:bd:e0:e5:8f:1b:3a:9e:fc:c0:c7:37:98:0a:47: 06:8a:8c:f3:c7:58:92:a8:3b:fe:dd:f0:15:cf:98:ff:c0:15: d1:2b:d6:2e:1f:b0:36:b5:b0:2a:c5:04:41:da:07:08:de:64: 16:a1:44:3a:e2:6e:96:10:c3:1c:c7:41:f2:67:3c:14:d0:30: 5a:76:a1:30:f4:c4:e3:5e:7b:74:cf:af:49:8c:af:f0:c9:f6: d5:ce:63:f9:2e:3e:67:da:a5:e8:be:3b:fc:63:68:ae:ac:3e: f9:10:1c:56:10:13:a3:7c:e5:d2:33:fc:68:06:0d:cd:b7:06: e4:3a:ad:a2:07:81:c3:e8:8b:1a:dc:04:30:90:13:48:f5:7e: d0:e4:a3:d5:24:1e:45:2c:9a:1f:55:2b:23:d1:91:44:61:3b: dc:67:d2:10:ed:a1:a0:ed:b3:68:f5:ef:6a:0e:ca:81:3b:37: 6e:e4:fd:ee:83:32:3c:4c:69:1f:d9:0e:4a:fe:0b:81:4c:80: 3e:52:04:cd:66:b3:7e:c5:bc:79:d3:cd:f1:37:86:cf:16:41: 41:7e:cc:be:ec:68:09:67:55:e7:f8:c3:b1:17:fa:4e:3d:24: e9:d9:00:bf:6e:67:03:b6:a0:a5:d2:a4:70:da:d0:30:ee:63: 2b:d0:64:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4eHUz21+cZbQugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk Yjg2MGRlODUtYzNjMC00OTk4LWIwOGMtZTk4OGNkYTNkOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3v8aziKjJe2b70rSv5Js+Pe9RFRXOy+st6n LmeOyCFLxu0m7KC0n0qoSh//vAVnlYdCUyLAcez9RujH6Waut6cuf9MBSD71qqsm cB55FtvmQJZCtftANHObNjnTM/we7OZjeNIvhYBY7848fEbPcX56qv6WAZd1j1Od Dq1RZPO1IX3KHbsxOQOItZ7ExZx5tuuonp06ng+t+E3Uvnc5l2wGWiiG25M5heKF qacIWn1HHdVfdE9gCf+GltFZkRUBtp9AjV6lk+qXsdCStSHfSSy6ZYOnjwDVyw6R p29FKq8TEhi1jtiqfYTTS9+q9dDL67JPqSZtpoRGQDOovcpYmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwAY70UL+Imv3E40yfOUlyCFhXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWI4ZjRiMjctMTNiMy0z OWIwLTk0MGUtMzM2Mzc0M2UxMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSWYoS94OWPGzqe/MDHN5gKRwaKjPPHWJKoO/7d8BXPmP/AFdEr1i4f sDa1sCrFBEHaBwjeZBahRDribpYQwxzHQfJnPBTQMFp2oTD0xONee3TPr0mMr/DJ 9tXOY/kuPmfapei+O/xjaK6sPvkQHFYQE6N85dIz/GgGDc23BuQ6raIHgcPoixrc BDCQE0j1ftDko9UkHkUsmh9VKyPRkURhO9xn0hDtoaDts2j172oOyoE7N27k/e6D MjxMaR/ZDkr+C4FMgD5SBM1ms37FvHnTzfE3hs8WQUF+zL7saAlnVef4w7EX+k49 JOnZAL9uZwO2oKXSpHDa0DDuYyvQZE4= -----END CERTIFICATE-----Generated at Mon Aug 4 11:19:23 2025 by rpki-client