$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa File: 0a38b74a-85f6-3a52-87a5-368b3dfce939.roa (raw, json) Hash identifier: Zwf3JqRPZq29mcTi6JHaLOWm8pJCmGRum0qX83PZ0bU= Subject key identifier: 5C:B8:D6:C5:62:21:C8:5B:62:3A:A1:2A:B7:88:EE:0A:46:6F:28:7C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F637B3C7F43234B50900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f6:37:b3:c7:f4:32:34:b5:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=e01b6f97-4e18-4027-aefa-c569811844da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:8f:4e:18:ca:12:72:de:99:f8:88:87:04: 97:97:10:1a:ce:13:de:bb:55:91:ec:ac:80:5f:f3: eb:35:c2:ea:a7:b9:24:1a:15:4a:de:ba:94:d6:08: 36:72:42:74:a1:51:b4:75:e5:c1:5d:df:0f:42:eb: 47:ee:0a:7c:c6:b1:a0:be:64:77:7e:2a:03:d3:1b: 3c:9c:55:f8:24:04:db:c0:93:4e:bc:b7:69:46:8e: 4d:60:c1:1a:4f:31:02:45:7b:cc:f9:f6:7c:5e:20: 18:fc:f5:38:4d:e2:91:a2:97:4b:78:6c:11:34:0d: de:f0:3f:b6:f5:b9:51:4e:0e:52:40:63:f1:a5:87: 69:08:5a:23:b3:3d:e6:08:6b:57:b0:a4:19:93:02: 1a:88:f3:c5:cf:df:c5:e4:b0:85:49:d5:4f:4f:e0: de:e5:7f:f1:8f:f4:8a:eb:72:0d:a4:ac:47:36:59: 9f:3e:1d:54:b5:4f:f8:01:ed:59:2e:56:0a:96:ce: d1:99:ab:7f:d3:6b:f5:bc:63:18:00:ee:c3:73:95: 58:45:c7:73:e5:0b:0e:5f:27:56:34:b1:58:ff:b9: d3:f5:05:d4:d5:cd:f1:f1:cc:d0:0f:be:37:95:dc: a0:d1:60:79:9c:29:f1:84:83:bb:6d:d2:8e:54:b6: e4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B8:D6:C5:62:21:C8:5B:62:3A:A1:2A:B7:88:EE:0A:46:6F:28:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0a38b74a-85f6-3a52-87a5-368b3dfce939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bb:bc:01:91:06:7e:6d:eb:d8:29:0d:2e:c2:cf:3a:5c:9a: 54:c6:10:f1:f4:9a:69:56:fe:05:63:57:2a:a0:b4:69:02:08: db:20:b1:b3:da:2f:96:5e:1f:8d:ce:98:0a:02:4d:da:60:45: 89:b8:20:3a:32:6a:55:e7:d6:68:be:0c:9a:8f:ae:61:0e:8e: 87:98:84:87:c6:01:73:52:2d:79:94:9d:0a:6c:76:c8:34:37: 44:ca:fd:6d:20:f2:b4:50:8e:a2:ac:69:e1:1c:1e:58:80:20: 85:47:0b:c7:78:d7:d1:ae:9b:2e:66:ec:de:ce:80:e9:7a:75: 72:84:59:c6:87:c2:aa:d5:c7:b7:7e:f5:c9:96:7c:bf:c2:9f: 94:f5:b0:a3:7b:87:fa:45:72:0c:db:59:37:b5:f7:6b:6d:e6: 95:3f:2c:40:5d:d1:82:2a:6b:31:11:56:ad:8b:2c:5f:20:5f: fb:86:ee:ae:fa:27:53:ad:c6:bf:19:fd:78:02:a4:ed:5c:f4: b1:b1:a8:ad:1c:40:21:d9:36:c5:cd:c8:62:8f:5b:f4:f5:d7: fd:a6:a9:3c:95:54:92:7b:b9:52:b8:c0:34:00:50:b4:70:7d: 33:55:69:4f:ae:81:4f:1e:9e:5a:1e:d3:b4:bc:c7:62:2e:b7: 8a:69:ba:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPY3s8f0MjS1CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZTAxYjZmOTctNGUxOC00MDI3LWFlZmEtYzU2OTgxMTg0NGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApySPThjKEnLemfiIhwSXlxAazhPeu1WR7KyA X/PrNcLqp7kkGhVK3rqU1gg2ckJ0oVG0deXBXd8PQutH7gp8xrGgvmR3fioD0xs8 nFX4JATbwJNOvLdpRo5NYMEaTzECRXvM+fZ8XiAY/PU4TeKRopdLeGwRNA3e8D+2 9blRTg5SQGPxpYdpCFojsz3mCGtXsKQZkwIaiPPFz9/F5LCFSdVPT+De5X/xj/SK 63INpKxHNlmfPh1UtU/4Ae1ZLlYKls7Rmat/02v1vGMYAO7Dc5VYRcdz5QsOXydW NLFY/7nT9QXU1c3x8czQD743ldyg0WB5nCnxhIO7bdKOVLbkpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy41sViIchbYjqhKreI7gpGbyh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGEzOGI3NGEtODVmNi0z YTUyLTg3YTUtMzY4YjNkZmNlOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe7vAGRBn5t69gpDS7CzzpcmlTGEPH0mmlW/gVjVyqgtGkCCNsgsbPa L5ZeH43OmAoCTdpgRYm4IDoyalXn1mi+DJqPrmEOjoeYhIfGAXNSLXmUnQpsdsg0 N0TK/W0g8rRQjqKsaeEcHliAIIVHC8d419Gumy5m7N7OgOl6dXKEWcaHwqrVx7d+ 9cmWfL/Cn5T1sKN7h/pFcgzbWTe192tt5pU/LEBd0YIqazERVq2LLF8gX/uG7q76 J1Otxr8Z/XgCpO1c9LGxqK0cQCHZNsXNyGKPW/T11/2mqTyVVJJ7uVK4wDQAULRw fTNVaU+ugU8enloe07S8x2Iut4ppujc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:24 2026 by rpki-client