$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa File: 11da83fa-df64-3eb4-9184-9c8813fb3578.roa (raw, json) Hash identifier: UjDXXri+ciqgKAwDLyBKP1lR/1VojtmdDfoy3z+1vbw= Subject key identifier: 24:B9:46:B3:5C:26:1D:63:A0:27:4A:28:E1:F5:C7:38:D0:CB:F2:04 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74EF67B582904BE9960511 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ef:67:b5:82:90:4b:e9:96:05:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=ba5cbd32-b897-4f86-b3ad-2d741f9a79ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:74:2a:ed:77:5a:4f:eb:bf:e8:ff:96:09:60: 5b:c9:89:f1:4a:ac:65:41:5e:ca:20:cf:a3:de:f7: 12:85:1b:3f:d9:a3:27:e6:b2:90:d3:53:85:51:e5: d6:c6:10:57:ce:2d:d9:8e:8a:02:47:1a:fc:14:b3: 86:5f:67:0a:8f:8c:d5:0d:0d:24:9c:64:d8:4f:9a: 2d:7c:e3:a7:bc:1f:f5:99:29:f8:d5:1e:bc:9f:94: 42:1b:21:a9:99:14:58:0c:dd:70:d4:19:81:06:be: 03:56:05:a2:ed:d9:f5:c2:ca:48:3c:e0:46:d1:d2: b6:01:e7:42:2d:4b:05:ee:8b:a5:89:f2:2f:93:59: cd:10:b4:9b:38:c3:ec:8f:ff:24:58:2d:c3:b4:20: 39:08:ac:0d:cb:c4:09:9a:34:05:27:c5:78:00:14: 1e:5b:ae:b0:c5:fe:a3:52:81:ea:ac:0c:34:63:e2: ed:df:65:d4:e8:51:dd:01:9a:8a:ec:ea:b8:1d:c8: ca:94:fe:4a:2a:5c:f5:a7:ff:c0:26:c7:11:0f:1b: d8:50:fd:ea:d8:99:2b:18:53:e2:24:11:35:a8:73: 6d:6d:59:fa:cf:9c:d3:d6:c4:4f:a6:a3:1f:85:2f: e7:3a:9e:17:87:90:b5:33:d5:f8:e8:56:fa:63:fa: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B9:46:B3:5C:26:1D:63:A0:27:4A:28:E1:F5:C7:38:D0:CB:F2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/11da83fa-df64-3eb4-9184-9c8813fb3578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ac:a7:de:c0:33:35:77:62:40:bd:1d:45:88:58:f7:e0:1f: 15:de:fe:3a:cd:00:f2:ea:51:a1:db:52:66:88:42:76:fe:24: 29:ca:fb:93:f6:dd:bd:82:e2:21:a4:74:71:da:3c:2d:70:b2: 39:9d:b5:82:4b:73:c9:9b:78:29:0e:69:c5:06:57:45:74:a5: 3d:c5:27:89:bb:85:88:1a:53:4f:1b:77:76:f5:80:8b:b9:f1: a3:31:07:e9:d8:cb:79:6f:e1:49:66:f4:20:d4:b4:43:3b:00: 42:cc:4d:d1:d2:3c:01:26:48:07:3e:aa:48:09:78:23:a5:9e: aa:4b:64:c2:c1:11:0d:cd:42:56:ca:ff:83:64:df:9e:bb:0b: ef:b5:3e:f2:fb:22:64:44:60:dc:f2:7f:28:fc:c0:4f:f2:28: 04:b2:cd:56:e0:eb:f9:bb:2a:f5:66:6a:f6:15:83:90:fb:a6: d4:91:89:64:88:33:21:17:d4:2d:bd:75:aa:a8:fb:b0:3e:4a: c7:1c:84:94:d6:6a:e0:a5:bc:2f:45:8f:a8:d5:3b:a7:3b:0d: e0:cb:f6:81:ff:a0:90:96:89:04:9d:ab:3f:44:ed:88:c3:1d: 85:df:f3:44:e1:35:cd:4c:b5:a6:9c:a2:38:fa:48:c3:48:24: b8:10:fd:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO9ntYKQS+mWBREwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YmE1Y2JkMzItYjg5Ny00Zjg2LWIzYWQtMmQ3NDFmOWE3OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXQq7XdaT+u/6P+WCWBbyYnxSqxlQV7KIM+j 3vcShRs/2aMn5rKQ01OFUeXWxhBXzi3ZjooCRxr8FLOGX2cKj4zVDQ0knGTYT5ot fOOnvB/1mSn41R68n5RCGyGpmRRYDN1w1BmBBr4DVgWi7dn1wspIPOBG0dK2AedC LUsF7oulifIvk1nNELSbOMPsj/8kWC3DtCA5CKwNy8QJmjQFJ8V4ABQeW66wxf6j UoHqrAw0Y+Lt32XU6FHdAZqK7Oq4HcjKlP5KKlz1p//AJscRDxvYUP3q2JkrGFPi JBE1qHNtbVn6z5zT1sRPpqMfhS/nOp4Xh5C1M9X46Fb6Y/r6hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS5RrNcJh1joCdKKOH1xzjQy/IEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTFkYTgzZmEtZGY2NC0z ZWI0LTkxODQtOWM4ODEzZmIzNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADisp97AMzV3YkC9HUWIWPfgHxXe/jrNAPLqUaHbUmaIQnb+JCnK+5P2 3b2C4iGkdHHaPC1wsjmdtYJLc8mbeCkOacUGV0V0pT3FJ4m7hYgaU08bd3b1gIu5 8aMxB+nYy3lv4Ulm9CDUtEM7AELMTdHSPAEmSAc+qkgJeCOlnqpLZMLBEQ3NQlbK /4Nk3567C++1PvL7ImREYNzyfyj8wE/yKASyzVbg6/m7KvVmavYVg5D7ptSRiWSI MyEX1C29daqo+7A+SscchJTWauClvC9Fj6jVO6c7DeDL9oH/oJCWiQSdqz9E7YjD HYXf80ThNc1Mtaacojj6SMNIJLgQ/Q8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:04 2026 by rpki-client