$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa File: cc70bf40-8d8f-3723-a43b-f785998133e4.roa (raw, json) Hash identifier: y5SNhyjwMLgt0+qdxcoEj+4VrkUE01UQgPB9Lc3toYw= Subject key identifier: 55:3F:85:AA:08:67:07:C1:62:16:7C:7C:05:7E:C4:A1:4A:96:DE:69 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B5F375991EEE31DDCC6A25D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 54113 IP address blocks: 157.5.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:59:91:ee:e3:1d:dc:c6:a2:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=c68ced92-d2b5-4ad9-a33d-8e66cd121b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:ef:5d:cc:5b:67:28:92:8c:17:77:f6:54: af:15:45:93:a6:43:7e:47:6f:66:fc:48:f7:a1:f7: 7e:34:d9:46:9a:ad:b6:8d:b2:eb:ea:58:9b:c5:fe: 63:13:c8:0e:7e:54:07:25:21:68:1e:c9:f5:28:f4: 08:ca:88:bc:40:b1:22:f8:f2:f2:ea:bf:36:d6:07: 92:29:03:94:88:8f:b8:88:2d:35:65:d4:e1:2e:99: d5:a6:11:82:da:dd:5c:95:5d:86:be:7e:c5:85:d7: 6c:a5:9a:d2:c2:1d:93:00:68:07:cd:6c:32:8b:89: 5d:de:a7:05:8e:2b:45:31:8e:06:69:c6:50:94:7b: db:a5:42:04:3e:74:10:eb:ca:2e:9a:f2:6f:d0:e6: 6c:a2:ad:ee:10:36:13:62:93:04:2c:89:2f:21:eb: dd:a9:de:7d:e4:97:bd:6d:b4:a7:36:d9:7c:9a:d5: 7f:d7:b4:da:85:4d:8f:0e:57:0c:39:fa:88:26:70: f2:0a:6b:ab:cd:2e:90:3c:b7:f6:43:3d:3c:c5:d0: c4:45:58:49:4b:46:33:35:79:1d:b6:5d:b8:53:a5: f5:32:48:19:68:4d:67:ab:0a:d0:e4:68:2a:b6:5d: 9a:e3:15:1f:8b:59:a9:be:01:f6:c4:bf:a5:d5:75: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3F:85:AA:08:67:07:C1:62:16:7C:7C:05:7E:C4:A1:4A:96:DE:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc70bf40-8d8f-3723-a43b-f785998133e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 157.5.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:98:da:3a:49:ec:bb:0e:76:0d:78:3d:73:7e:b4:d1:86:93: 6c:f2:c8:1e:f5:0d:95:cb:33:99:1a:29:33:9f:1e:df:2f:98: 5a:83:4e:7f:68:50:06:68:20:8e:21:bf:8d:61:29:84:b3:b5: 71:5a:88:4d:16:b9:6b:2d:c8:d0:01:93:d5:6f:d3:c7:04:5a: 5e:ee:fc:cb:5f:be:c6:2a:ab:25:87:db:78:3f:48:c3:a9:73: e0:d7:5a:d8:be:aa:ec:bc:ce:00:69:14:c4:4f:d1:bd:c7:8f: fa:36:d4:fa:16:0c:78:e6:01:db:70:13:45:b7:9a:0d:0c:f0: 82:c5:74:6e:4d:d9:b2:8e:2b:20:6d:a0:e9:6c:d6:43:9f:d6: 52:87:a2:be:d5:3c:3f:06:3c:22:0a:a4:af:70:46:8b:f5:ca: 37:67:af:88:bd:67:6f:47:be:5f:59:05:e0:0f:b2:d9:b7:72: 4d:80:b8:51:fc:64:40:38:8e:83:92:ab:84:18:99:b2:35:1a: c3:12:f7:ac:f4:27:62:98:55:b4:03:ea:50:1e:8b:26:a3:db: 11:82:09:ea:dc:d6:ce:02:f4:6e:9a:e0:50:cd:75:24:63:70: 7c:45:ed:85:c6:53:82:e2:4b:42:d0:b4:2b:d2:e0:ad:8c:3d: 44:83:fe:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN1mR7uMd3MaiXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YzY4Y2VkOTItZDJiNS00YWQ5LWEzM2QtOGU2NmNkMTIxYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB/vXcxbZyiSjBd39lSvFUWTpkN+R29m/Ej3 ofd+NNlGmq22jbLr6libxf5jE8gOflQHJSFoHsn1KPQIyoi8QLEi+PLy6r821geS KQOUiI+4iC01ZdThLpnVphGC2t1clV2Gvn7FhddspZrSwh2TAGgHzWwyi4ld3qcF jitFMY4GacZQlHvbpUIEPnQQ68oumvJv0OZsoq3uEDYTYpMELIkvIevdqd595Je9 bbSnNtl8mtV/17TahU2PDlcMOfqIJnDyCmurzS6QPLf2Qz08xdDERVhJS0YzNXkd tl24U6X1MkgZaE1nqwrQ5Ggqtl2a4xUfi1mpvgH2xL+l1XWQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU/haoIZwfBYhZ8fAV+xKFKlt5pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2M3MGJmNDAtOGQ4Zi0z NzIzLWE0M2ItZjc4NTk5ODEzM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnQVcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOY2jpJ7LsOdg14PXN+tNGGk2zyyB71DZXLM5kaKTOfHt8vmFqDTn9o UAZoII4hv41hKYSztXFaiE0WuWstyNABk9Vv08cEWl7u/MtfvsYqqyWH23g/SMOp c+DXWti+quy8zgBpFMRP0b3Hj/o21PoWDHjmAdtwE0W3mg0M8ILFdG5N2bKOKyBt oOls1kOf1lKHor7VPD8GPCIKpK9wRov1yjdnr4i9Z29Hvl9ZBeAPstm3ck2AuFH8 ZEA4joOSq4QYmbI1GsMS96z0J2KYVbQD6lAeiyaj2xGCCerc1s4C9G6a4FDNdSRj cHxF7YXGU4LiS0LQtCvS4K2MPUSD/qc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:10 2025 by rpki-client