$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa File: 0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa (raw, json) Hash identifier: XyIyYUr3IPORPl97ImQ46wNLEdXTgJSFI6BGglC0Lrg= Subject key identifier: 6D:E0:D8:DB:6F:AF:30:46:1F:06:F5:C9:0A:EF:D9:99:D8:FA:CC:2A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F00D9791D51DBA0A5F80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f0:0d:97:91:d5:1d:ba:0a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=d006bc10-c85e-442b-aa11-73b189b3d9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:79:15:95:97:1f:ec:6e:78:a5:87:96:1c: 5a:81:25:58:71:db:13:1e:e8:6e:ee:e1:55:2d:84: 47:f5:6a:90:72:50:bf:aa:ef:a6:19:67:3e:d4:1f: 0e:be:17:81:74:80:6d:b7:1a:13:2e:5b:b1:7a:ba: 73:4c:aa:1c:af:23:36:0b:00:80:a8:b9:74:ac:b8: 5a:a0:7f:6a:45:5c:88:03:ef:83:91:7e:d1:97:dc: 16:74:97:52:be:b0:b5:ea:53:68:a5:24:19:79:86: 19:33:d9:e1:1e:07:70:6e:1d:f8:28:94:58:3c:a3: 3d:ae:f4:0a:da:6c:f4:3b:80:42:e4:b2:33:c4:d0: 88:63:28:80:24:e3:58:03:05:3d:8e:71:cd:7d:d0: c5:d8:ce:27:d5:a0:b7:7c:66:93:19:28:0e:77:59: 8b:3b:cf:3f:e2:da:52:ce:e4:8a:d5:75:0b:cb:37: f4:88:88:14:df:63:46:c5:db:ae:86:69:38:2f:fa: 84:e8:de:2f:57:c3:91:18:27:79:cc:e6:7b:ee:49: 90:db:42:d0:10:c8:27:13:a6:9e:62:31:b5:cd:e9: b2:dc:62:87:21:27:3e:06:2a:0a:5f:6a:6b:c3:8d: b9:c7:94:f6:0e:99:1f:c7:07:1b:63:97:49:6d:88: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E0:D8:DB:6F:AF:30:46:1F:06:F5:C9:0A:EF:D9:99:D8:FA:CC:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0989b0f9-acba-3cf6-b3e7-6c4c8473418e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c8:73:df:25:c9:f7:ab:65:f8:c1:6d:0b:37:44:2e:00:99: 13:74:77:8f:b1:ef:3b:af:8c:b7:10:e9:15:77:de:73:bd:c8: 2f:cc:5a:da:c0:df:51:ea:f5:3e:e3:5f:6f:38:0b:7a:d2:98: 12:38:d0:25:a6:f4:8f:a1:37:5a:b2:e8:80:2b:74:82:37:05: 7d:4b:e3:37:cf:08:7c:01:86:9a:f6:d2:9d:5a:68:5c:7d:26: b2:f6:ce:08:67:e7:31:fd:11:6c:c7:35:8c:d4:d2:7d:b0:81: 00:49:1e:cf:f8:c4:84:61:e6:f0:31:4d:51:a5:56:18:9f:f4: e8:9d:bb:ce:d3:e7:ba:05:fd:01:51:e1:ca:50:5a:4f:c6:78: f4:fc:2d:47:e4:2e:9b:0d:4d:5d:cc:62:b9:ba:67:33:8e:b4: 0d:60:21:44:39:20:2c:22:39:53:7a:0a:ca:be:35:a5:f8:7c: 5a:5f:90:73:6a:eb:27:74:e1:94:c7:53:83:05:e4:4a:f1:ec: ce:6f:d9:ed:1e:d8:2a:09:49:cf:95:2e:0a:c8:9d:d6:69:45: a0:3c:d2:49:d7:ec:e3:1e:0d:9f:17:cb:49:f8:82:65:e7:d0: c3:6f:ab:b3:4f:0e:e7:b1:a8:7d:ba:1b:7f:3a:d6:4f:1d:ae: bf:47:90:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPANl5HVHboKX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDAwNmJjMTAtYzg1ZS00NDJiLWFhMTEtNzNiMTg5YjNkOWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQR5FZWXH+xueKWHlhxagSVYcdsTHuhu7uFV LYRH9WqQclC/qu+mGWc+1B8OvheBdIBttxoTLluxerpzTKocryM2CwCAqLl0rLha oH9qRVyIA++DkX7Rl9wWdJdSvrC16lNopSQZeYYZM9nhHgdwbh34KJRYPKM9rvQK 2mz0O4BC5LIzxNCIYyiAJONYAwU9jnHNfdDF2M4n1aC3fGaTGSgOd1mLO88/4tpS zuSK1XULyzf0iIgU32NGxduuhmk4L/qE6N4vV8ORGCd5zOZ77kmQ20LQEMgnE6ae YjG1zemy3GKHISc+BioKX2prw425x5T2DpkfxwcbY5dJbYh2swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3g2NtvrzBGHwb1yQrv2ZnY+swqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDk4OWIwZjktYWNiYS0z Y2Y2LWIzZTctNmM0Yzg0NzM0MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnIc98lyferZfjBbQs3RC4AmRN0d4+x7zuvjLcQ6RV33nO9yC/MWtrA 31Hq9T7jX284C3rSmBI40CWm9I+hN1qy6IArdII3BX1L4zfPCHwBhpr20p1aaFx9 JrL2zghn5zH9EWzHNYzU0n2wgQBJHs/4xIRh5vAxTVGlVhif9Oidu87T57oF/QFR 4cpQWk/GePT8LUfkLpsNTV3MYrm6ZzOOtA1gIUQ5ICwiOVN6Csq+NaX4fFpfkHNq 6yd04ZTHU4MF5Erx7M5v2e0e2CoJSc+VLgrIndZpRaA80knX7OMeDZ8Xy0n4gmXn 0MNvq7NPDuexqH26G3861k8drr9HkB0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:13 2026 by rpki-client