$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386e41f7-16ef-3079-81c3-a8fad0c934d2.roa File: 386e41f7-16ef-3079-81c3-a8fad0c934d2.roa (raw, json) Hash identifier: ZTIc62787iZSslJ048uFW4VlC6Ct5Io9cvwYEzT0xN4= Subject key identifier: 8C:E3:0C:8F:FE:28:EA:08:B3:AA:34:F1:B5:8B:7B:71:92:CD:6C:AB Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F477E5F120F2459D6100 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386e41f7-16ef-3079-81c3-a8fad0c934d2.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f4:77:e5:f1:20:f2:45:9d:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=627af62d-c302-4000-9113-e876417debe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6f:26:0c:8d:5b:8c:74:5f:fd:18:d8:df:3c: 3d:23:29:71:98:63:2f:b0:e9:f6:f0:1a:92:99:09: 6d:76:98:ae:60:61:a8:84:d5:d5:4b:c6:99:e5:5b: c9:db:51:fc:2e:33:15:55:0e:76:10:fa:3c:8b:36: 6d:4d:dc:1a:06:f4:12:55:02:4c:23:4b:33:fd:01: 6b:07:50:d3:c8:e6:ba:0e:0b:8e:a8:58:6b:f1:27: 50:c0:cd:1f:de:aa:88:82:66:b7:3d:94:03:e1:ee: 3d:86:0b:7e:87:e3:fc:0e:02:28:c1:34:cf:79:62: 76:23:b5:8b:89:76:87:66:87:bd:bf:b1:8f:1e:39: ac:87:26:8c:16:5e:c5:bd:88:de:6f:ff:8b:ca:f7: 47:8c:47:da:6f:dc:5e:f1:57:1f:83:29:f7:4b:64: fb:b2:7a:c4:4c:22:db:a5:a6:79:11:0d:22:c6:47: 64:52:27:2c:b7:75:3a:e3:59:8a:0a:ea:a4:86:e7: bf:f3:27:75:7c:bd:41:eb:c8:42:11:38:0d:79:31: 10:f1:a0:b6:c9:8c:46:66:4a:73:a6:f4:84:09:21: 3f:23:59:99:28:98:80:25:b7:de:1a:41:ad:76:22: b2:14:8a:62:08:d4:dd:7b:3b:87:bc:f5:9f:f5:23: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E3:0C:8F:FE:28:EA:08:B3:AA:34:F1:B5:8B:7B:71:92:CD:6C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386e41f7-16ef-3079-81c3-a8fad0c934d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c3:46:c2:20:5e:79:f6:c0:3a:80:72:2c:d0:56:02:49:ec: 26:50:d7:d6:18:86:c8:36:76:43:fc:68:23:6b:39:22:46:2a: b0:bb:64:b7:71:86:06:ce:6c:b7:3f:d0:f5:e7:3d:2f:b5:41: 12:a4:23:bb:39:4d:fb:e8:de:0e:9e:a5:a5:e0:75:ed:84:c7: cf:45:bd:fe:89:98:fe:a6:c8:73:86:d0:b6:dd:c8:82:66:8d: a5:1a:08:00:8c:1e:f5:5d:28:d3:5e:20:2b:20:43:5d:28:af: ad:da:4f:70:8c:fe:90:4f:38:00:4a:cf:52:f7:b3:f8:0c:7e: ff:0b:98:47:ab:7a:2b:0f:a1:e6:75:c7:1c:e0:2e:8c:a1:e9: de:d3:e3:a3:f2:4e:77:21:5d:2c:c6:3f:17:71:ad:60:2e:2e: 9e:3e:b7:0e:cd:30:27:8a:40:38:fa:f1:40:a7:aa:e3:96:7b: 42:49:d6:86:56:43:78:87:d1:4d:67:09:8e:6c:d7:c8:33:ae: 5f:95:71:87:49:ce:0e:2d:3c:0a:1f:7e:c7:6f:72:14:b0:95: 3c:c8:25:d3:5b:bb:d6:e8:b0:aa:36:87:69:98:71:ea:4b:ad: 3b:41:f9:f7:6e:d6:dc:13:a2:05:5b:b5:11:27:f8:36:85:36: f1:07:e8:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPR35fEg8kWdYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NjI3YWY2MmQtYzMwMi00MDAwLTkxMTMtZTg3NjQxN2RlYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG8mDI1bjHRf/RjY3zw9IylxmGMvsOn28BqS mQltdpiuYGGohNXVS8aZ5VvJ21H8LjMVVQ52EPo8izZtTdwaBvQSVQJMI0sz/QFr B1DTyOa6DguOqFhr8SdQwM0f3qqIgma3PZQD4e49hgt+h+P8DgIowTTPeWJ2I7WL iXaHZoe9v7GPHjmshyaMFl7FvYjeb/+LyvdHjEfab9xe8Vcfgyn3S2T7snrETCLb paZ5EQ0ixkdkUicst3U641mKCuqkhue/8yd1fL1B68hCETgNeTEQ8aC2yYxGZkpz pvSECSE/I1mZKJiAJbfeGkGtdiKyFIpiCNTdezuHvPWf9SPy0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzjDI/+KOoIs6o08bWLe3GSzWyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzg2ZTQxZjctMTZlZi0z MDc5LTgxYzMtYThmYWQwYzkzNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/DRsIgXnn2wDqAcizQVgJJ7CZQ19YYhsg2dkP8aCNrOSJGKrC7ZLdx hgbObLc/0PXnPS+1QRKkI7s5Tfvo3g6epaXgde2Ex89Fvf6JmP6myHOG0LbdyIJm jaUaCACMHvVdKNNeICsgQ10or63aT3CM/pBPOABKz1L3s/gMfv8LmEereisPoeZ1 xxzgLoyh6d7T46PyTnchXSzGPxdxrWAuLp4+tw7NMCeKQDj68UCnquOWe0JJ1oZW Q3iH0U1nCY5s18gzrl+VcYdJzg4tPAoffsdvchSwlTzIJdNbu9bosKo2h2mYcepL rTtB+fdu1twTogVbtREn+DaFNvEH6LI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:49 2026 by rpki-client