$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa File: c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa (raw, json) Hash identifier: 8OqAS5l9ejstGWilLTK7iYnRgSPnGhgQ459Wju0ZTQw= Subject key identifier: D8:58:2B:D9:61:4F:9B:96:8D:A2:4D:A3:9A:49:81:BA:CF:59:54:03 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EA79ACDE6FD7C168B255ACC80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54113 IP address blocks: 157.5.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:cd:e6:fd:7c:16:8b:25:5a:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a5ee956b-8000-403f-9d6b-07a293b4ce5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:01:e1:ca:ef:b1:6b:34:1a:d9:99:e1:ed: 63:c9:26:cf:21:fc:ee:83:cd:fe:3e:d5:0c:75:d6: b4:24:1c:ac:5f:56:70:6f:04:5b:6a:39:43:03:76: ed:b6:ca:0b:07:bd:d4:fc:b7:75:68:14:69:b0:ff: 89:71:46:e4:30:fb:16:06:b6:d6:2a:6e:57:5f:77: 64:3e:b0:01:69:7e:5d:8c:38:20:c4:20:11:7d:72: e9:55:f7:03:15:7b:76:03:74:23:9c:10:93:12:86: a8:74:0d:1e:50:7d:26:30:5e:f5:ba:46:c4:43:03: 7c:4f:cf:67:b5:14:2b:3e:c2:14:45:33:2f:01:9a: 3e:79:68:fd:ba:b9:9d:da:a3:28:42:35:f1:c3:a7: e3:b9:f6:15:20:14:60:4d:df:54:fa:22:97:2b:7a: f9:0d:d9:27:93:3a:9a:9c:43:b9:e5:90:59:dd:e3: 59:c0:8b:d2:a4:85:d7:26:23:49:1e:b1:21:94:c3: c1:ef:3c:21:5b:15:ed:0f:d2:77:9a:b4:5f:56:f0: 3b:e8:6f:a8:25:42:20:fd:9a:79:8b:8d:e2:54:7c: 33:07:c6:c8:a5:13:a4:94:26:0d:32:fc:5f:63:84: 71:cc:3d:b4:80:39:e7:fe:e7:6d:a4:55:ef:10:10: d0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:58:2B:D9:61:4F:9B:96:8D:A2:4D:A3:9A:49:81:BA:CF:59:54:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c7e543bb-6f66-3aa5-8d15-fbb50dd7a02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7e:b6:6c:10:44:2a:7a:79:0c:66:12:12:70:b4:d4:6d:ca: 5c:2e:ef:90:02:a7:39:2c:fb:2a:69:f0:80:9e:82:3f:47:ec: 80:c5:a4:37:9d:c8:20:0e:64:a1:2e:82:ed:46:5a:28:bd:17: 67:99:de:39:f2:43:b0:b9:fb:da:ad:74:cd:df:ce:19:5a:c1: c0:cd:73:11:ea:e5:6f:ef:19:33:7e:77:94:bb:f4:05:89:5e: f8:b0:76:4c:c7:44:d1:02:66:02:04:81:f5:ab:c0:e2:6e:a5: 8a:89:1d:69:d6:4a:6a:15:57:b8:94:5f:f5:91:2f:a1:e5:53: 3b:d9:7e:0f:27:84:74:ad:de:79:d4:45:27:e8:8f:d6:0d:61: 31:31:5b:12:8d:f6:b9:f5:00:d6:d2:61:a6:48:74:ea:2c:a6: 3c:cd:cd:21:ea:0c:be:46:7f:ec:34:58:ac:ef:58:2c:15:f1: fe:aa:a6:98:c1:e5:e8:d2:0b:c2:e7:6d:e8:e7:b9:13:37:06: 10:e7:fa:8a:27:43:72:91:62:fa:b0:7e:31:35:75:a3:84:c9: 9e:b3:2f:4f:69:06:35:07:50:b9:07:5e:c9:62:50:95:83:b8: 65:a9:35:f1:a7:de:3d:47:8d:2b:0b:4b:58:59:90:08:5c:f7: eb:b4:08:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nms3m/XwWiyVazIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTVlZTk1NmItODAwMC00MDNmLTlkNmItMDdhMjkzYjRjZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/IB4crvsWs0GtmZ4e1jySbPIfzug83+PtUM dda0JBysX1ZwbwRbajlDA3bttsoLB73U/Ld1aBRpsP+JcUbkMPsWBrbWKm5XX3dk PrABaX5djDggxCARfXLpVfcDFXt2A3QjnBCTEoaodA0eUH0mMF71ukbEQwN8T89n tRQrPsIURTMvAZo+eWj9urmd2qMoQjXxw6fjufYVIBRgTd9U+iKXK3r5Ddknkzqa nEO55ZBZ3eNZwIvSpIXXJiNJHrEhlMPB7zwhWxXtD9J3mrRfVvA76G+oJUIg/Zp5 i43iVHwzB8bIpROklCYNMvxfY4RxzD20gDnn/udtpFXvEBDQFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhYK9lhT5uWjaJNo5pJgbrPWVQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzdlNTQzYmItNmY2Ni0z YWE1LThkMTUtZmJiNTBkZDdhMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp+tmwQRCp6eQxmEhJwtNRtylwu75ACpzks+ypp8ICegj9H7IDFpDed yCAOZKEugu1GWii9F2eZ3jnyQ7C5+9qtdM3fzhlawcDNcxHq5W/vGTN+d5S79AWJ XviwdkzHRNECZgIEgfWrwOJupYqJHWnWSmoVV7iUX/WRL6HlUzvZfg8nhHSt3nnU RSfoj9YNYTExWxKN9rn1ANbSYaZIdOospjzNzSHqDL5Gf+w0WKzvWCwV8f6qppjB 5ejSC8LnbejnuRM3BhDn+oonQ3KRYvqwfjE1daOEyZ6zL09pBjUHULkHXsliUJWD uGWpNfGn3j1HjSsLS1hZkAhc9+u0CHQ= -----END CERTIFICATE-----Generated at Mon Sep 21 13:48:48 2026 by rpki-client