$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/1023aea3-a570-3f9c-bc0d-87567a6621c6.roa File: 1023aea3-a570-3f9c-bc0d-87567a6621c6.roa (raw, json) Hash identifier: jz4+FeDDNCoFHQ6FtcEKXCT1gcf7MDbT+w22iopcJE4= Subject key identifier: 46:EC:86:A0:C3:42:7F:76:DA:D4:36:60:AE:F8:84:14:F3:71:1C:69 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F4328584D0BDD0446132D19AC01BE0F78 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/1023aea3-a570-3f9c-bc0d-87567a6621c6.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 150.9.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:04:46:13:2d:19:ac:01:be:0f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=350c41a0-fc72-4049-8689-dcbf7d87cd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:89:d8:95:4b:6c:53:db:41:82:d6:49:4d:7a: 60:68:2c:f8:aa:0c:76:27:25:93:a4:42:c2:27:01: 9c:b8:d8:1c:e8:ae:9e:22:4b:ab:e6:7e:47:a0:ea: 66:a0:b5:42:ee:d2:f6:85:b0:41:2c:a6:01:e7:05: ed:ce:19:da:86:84:41:7e:5d:11:30:31:be:22:a9: 2e:27:60:84:b2:56:46:92:25:75:9c:bb:af:64:c3: 10:42:4b:2d:3e:cd:ce:13:02:82:c1:a5:18:0f:15: a9:0a:5f:96:1c:b5:49:26:b0:07:a1:ab:c0:e3:dd: dd:60:91:47:9b:85:f7:98:2c:ee:2e:41:34:45:14: 88:04:84:2e:6b:eb:78:59:82:5f:d3:4d:f8:9a:30: 79:c6:56:0a:82:0e:e9:48:8d:63:6f:10:4e:c8:b5: 71:a4:ea:3b:d4:cf:28:36:a5:1f:3c:ac:c3:7d:e8: 1f:b4:b9:7e:5d:5b:a9:af:da:78:4c:3a:06:e4:a7: 1e:5a:b3:19:50:56:c0:c7:ca:f0:bb:5a:35:b5:41: 49:1d:cf:7c:2a:d2:ac:f1:55:48:17:5e:f1:97:d8: dc:d6:01:69:73:7f:c3:cc:57:ed:84:a6:c9:00:72: 27:18:f7:67:2a:63:cc:aa:a6:96:a6:ea:47:b2:28: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EC:86:A0:C3:42:7F:76:DA:D4:36:60:AE:F8:84:14:F3:71:1C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/1023aea3-a570-3f9c-bc0d-87567a6621c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:84:f9:5d:e2:c3:b8:a4:10:6b:07:d5:41:b5:05:67:5a:de: 6d:f1:fb:c9:7b:da:e8:85:71:0e:57:89:3e:37:72:bb:4c:06: 4b:01:ac:7b:7b:c5:72:8a:c6:f5:c4:b6:65:ac:6c:8d:be:a9: ba:4c:4d:0c:c4:c7:47:30:61:e4:81:8f:c8:65:35:bd:a5:c9: 05:74:61:6c:22:27:4b:a0:65:e9:ab:53:14:f7:90:ab:ac:b7: cd:f4:d1:b0:b6:27:d4:c7:a6:94:ba:29:57:4a:0b:9c:5a:f8: 4c:63:b9:7d:ce:70:29:4b:49:fc:4d:21:20:fc:fb:90:b7:00: 42:00:9b:34:03:a3:07:37:f3:f6:b7:a3:00:20:5a:3c:d6:5c: 4d:41:4a:55:ab:1d:a5:23:df:55:f4:f0:39:b2:8b:64:76:65: 8b:f8:f7:45:66:95:43:aa:74:36:4f:da:ba:2a:3f:bc:8c:e9: 9b:44:55:25:42:61:88:55:91:7c:5f:8c:db:70:97:66:17:e2: e4:90:56:64:c3:5e:b5:2f:e2:2c:c9:f5:26:39:62:ee:8c:8e: 1b:6e:e1:32:bb:db:72:71:3b:bd:cc:8e:72:18:13:35:6b:d8: cd:de:55:b0:9f:d1:bb:ce:37:49:ac:da:bd:6e:90:7f:9a:6b: 84:39:fc:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QRGEy0ZrAG+D3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MzUwYzQxYTAtZmM3Mi00MDQ5LTg2ODktZGNiZjdkODdjZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4nYlUtsU9tBgtZJTXpgaCz4qgx2JyWTpELC JwGcuNgc6K6eIkur5n5HoOpmoLVC7tL2hbBBLKYB5wXtzhnahoRBfl0RMDG+Iqku J2CEslZGkiV1nLuvZMMQQkstPs3OEwKCwaUYDxWpCl+WHLVJJrAHoavA493dYJFH m4X3mCzuLkE0RRSIBIQua+t4WYJf0034mjB5xlYKgg7pSI1jbxBOyLVxpOo71M8o NqUfPKzDfegftLl+XVupr9p4TDoG5KceWrMZUFbAx8rwu1o1tUFJHc98KtKs8VVI F17xl9jc1gFpc3/DzFfthKbJAHInGPdnKmPMqqaWpupHsii1dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbshqDDQn922tQ2YK74hBTzcRxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvMTAyM2FlYTMtYTU3MC0z ZjljLWJjMGQtODc1NjdhNjYyMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiE+V3iw7ikEGsH1UG1BWda3m3x+8l72uiFcQ5XiT43crtMBksBrHt7 xXKKxvXEtmWsbI2+qbpMTQzEx0cwYeSBj8hlNb2lyQV0YWwiJ0ugZemrUxT3kKus t8300bC2J9THppS6KVdKC5xa+ExjuX3OcClLSfxNISD8+5C3AEIAmzQDowc38/a3 owAgWjzWXE1BSlWrHaUj31X08Dmyi2R2ZYv490VmlUOqdDZP2roqP7yM6ZtEVSVC YYhVkXxfjNtwl2YX4uSQVmTDXrUv4izJ9SY5Yu6Mjhtu4TK723JxO73MjnIYEzVr 2M3eVbCf0bvON0ms2r1ukH+aa4Q5/IY= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:29 2026 by rpki-client