$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/b547a18a-0bdb-3f99-8715-962912d53d1c.roa File: b547a18a-0bdb-3f99-8715-962912d53d1c.roa (raw, json) Hash identifier: cmPE39W1ppHTDKrQDz8sifEjxqt8omh1q6cjnw7cq2A= Subject key identifier: 04:1A:9D:36:4B:91:32:DA:DB:64:D3:FF:B8:8D:E3:98:34:E1:AD:B8 Certificate issuer: /CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Certificate serial: 010D0C9F4328584D0BDD03EFE5978C603BB85880 Authority key identifier: E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/b547a18a-0bdb-3f99-8715-962912d53d1c.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 150.9.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:03:ef:e5:97:8c:60:3b:b8:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbf3fd-cf6e-4de7-8126-d6e41824d105 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=31192301-39e9-4b5e-ad6f-5c7a28b0d0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:f9:7a:a6:0d:eb:a1:7c:dd:a6:5b:72:c5: 24:3b:25:35:34:a7:4f:e9:d3:e3:55:a2:8d:92:82: 65:e2:43:d1:d8:d9:53:9d:c8:5e:91:73:e6:e9:05: b5:8a:fc:c7:e0:c4:7c:88:d4:44:d6:b7:e5:56:30: d5:2d:24:ef:bf:57:16:81:0c:95:df:e3:27:80:95: 61:e3:09:01:78:c7:fc:a2:a3:60:e0:62:b5:c0:40: 29:83:80:75:e7:82:5f:14:0c:65:33:25:5a:1b:ad: f0:d6:a5:be:f8:31:f5:a5:dd:00:15:a0:40:6e:4d: 08:df:79:87:13:03:a4:0a:84:f9:28:26:d0:7e:ad: 1b:ca:95:2f:74:7f:58:94:85:e3:db:1d:b3:09:47: 47:ac:68:b1:ea:39:8c:eb:10:e4:d2:1a:e5:0d:9b: c2:d8:bf:b2:99:bb:9f:b4:1f:fc:87:55:64:17:c7: 3a:c1:26:1e:b3:1f:b3:93:5b:15:c4:a0:e8:6e:c4: 54:cf:3c:7e:02:d1:69:14:72:99:ff:3e:99:99:36: aa:d2:eb:92:fd:c8:c7:5f:e8:be:42:50:1b:7b:2f: 7e:6e:98:4c:44:90:9b:05:67:f5:f5:5c:e1:35:e4: 2d:b2:d9:77:95:eb:36:10:1d:f6:f8:be:cd:33:72: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1A:9D:36:4B:91:32:DA:DB:64:D3:FF:B8:8D:E3:98:34:E1:AD:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/b547a18a-0bdb-3f99-8715-962912d53d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.crl X509v3 Authority Key Identifier: keyid:E8:A7:84:21:AC:67:CB:61:5B:12:37:63:55:E4:24:3A:7A:6C:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0dbbf3fd-cf6e-4de7-8126-d6e41824d105.cer sbgp-ipAddrBlock: critical IPv4: 150.9.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b7:bd:2c:63:3d:e0:91:26:c7:08:02:59:8a:f1:2f:08:10: 83:6c:b7:9e:a1:cc:c6:1e:cd:4f:60:11:a6:13:85:c1:fa:7d: 12:24:8b:39:7f:98:f8:0d:aa:0a:fa:cf:f7:a1:4f:63:87:44: 90:65:65:1a:ee:d9:f4:16:4a:7f:c8:f7:b0:43:1e:73:92:05: 92:e4:4c:7a:0a:1a:f8:08:1d:86:9c:4b:7f:1d:b9:64:d1:a2: 56:d7:fb:02:d1:1a:c6:c9:b4:29:59:1d:69:b4:8b:99:68:e7: e9:c8:0d:1d:88:72:e5:2a:dd:6c:9b:0e:a0:99:16:c1:c2:5d: 6a:37:1e:2b:41:6b:ab:ed:ff:3e:20:ec:62:f3:2b:39:f9:4d: 91:12:b1:89:31:bc:6c:77:bb:fa:f8:b9:30:c2:39:5c:d3:a7: d0:14:1f:30:24:73:f4:04:87:80:49:ee:d8:8a:a6:c3:61:73: 9d:25:fc:c4:1d:05:3f:9a:93:87:66:f9:57:3f:12:db:23:86: a9:52:cd:dd:33:cf:c2:c7:b4:00:9e:46:0b:37:5b:2b:af:35: 7e:e9:79:f3:7c:4f:a7:19:2f:2f:08:e8:85:b3:0d:3b:ec:b7: ef:84:25:a4:8d:1e:1a:32:cc:57:5d:89:f4:e2:08:ec:09:d6: 6f:2a:25:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QPv5ZeMYDu4WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmYzZmQtY2Y2ZS00ZGU3LTgxMjYtZDZlNDE4MjRk MTA1MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MzExOTIzMDEtMzllOS00YjVlLWFkNmYtNWM3YTI4YjBkMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqf5eqYN66F83aZbcsUkOyU1NKdP6dPjVaKN koJl4kPR2NlTnchekXPm6QW1ivzH4MR8iNRE1rflVjDVLSTvv1cWgQyV3+MngJVh 4wkBeMf8oqNg4GK1wEApg4B154JfFAxlMyVaG63w1qW++DH1pd0AFaBAbk0I33mH EwOkCoT5KCbQfq0bypUvdH9YlIXj2x2zCUdHrGix6jmM6xDk0hrlDZvC2L+ymbuf tB/8h1VkF8c6wSYesx+zk1sVxKDobsRUzzx+AtFpFHKZ/z6ZmTaq0uuS/cjHX+i+ QlAbey9+bphMRJCbBWf19VzhNeQtstl3les2EB32+L7NM3KtEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQanTZLkTLa22TT/7iN45g04a24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wZGJi ZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0MTgyNGQxMDUvYjU0N2ExOGEtMGJkYi0z Zjk5LTg3MTUtOTYyOTEyZDUzZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMGRiYmYzZmQtY2Y2ZS00ZGU3LTgx MjYtZDZlNDE4MjRkMTA1LzBkYmJmM2ZkLWNmNmUtNGRlNy04MTI2LWQ2ZTQxODI0 ZDEwNS5jcmwwHwYDVR0jBBgwFoAU6KeEIaxny2FbEjdjVeQkOnpskgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wZGJiZjNmZC1jZjZlLTRkZTctODEyNi1kNmU0 MTgyNGQxMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlgncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+3vSxjPeCRJscIAlmK8S8IEINst56hzMYezU9gEaYThcH6fRIkizl/ mPgNqgr6z/ehT2OHRJBlZRru2fQWSn/I97BDHnOSBZLkTHoKGvgIHYacS38duWTR olbX+wLRGsbJtClZHWm0i5lo5+nIDR2IcuUq3WybDqCZFsHCXWo3HitBa6vt/z4g 7GLzKzn5TZESsYkxvGx3u/r4uTDCOVzTp9AUHzAkc/QEh4BJ7tiKpsNhc50l/MQd BT+ak4dm+Vc/EtsjhqlSzd0zz8LHtACeRgs3WyuvNX7pefN8T6cZLy8I6IWzDTvs t++EJaSNHhoyzFddifTiCOwJ1m8qJXw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:51:00 2026 by rpki-client