$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa File: 3f343bd9-680f-3702-b991-0e48f54f6f74.roa (raw, json) Hash identifier: sV3Xb3FsRDPlCmO05MyWENvSA6gvvSzD8GlzYCB2gQQ= Subject key identifier: 82:ED:03:4B:1B:51:B0:16:86:3D:C1:5A:2B:8A:DA:89:EA:1B:C2:50 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F183A4551308524B34C8 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f1:83:a4:55:13:08:52:4b:34:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=234b0e9e-1373-4a45-b99b-238ccc9f2535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:96:8f:bc:db:f8:57:fb:59:ed:6d:e6:69: 5d:2b:d8:e1:ca:05:38:9c:87:86:4c:0d:ab:6b:66: 4b:0d:95:85:e2:41:7d:6e:8e:a8:c0:0b:b5:fb:eb: 46:4c:b4:92:3f:bc:a7:c9:ca:b3:e9:da:b2:3b:26: 28:18:11:19:73:3b:88:5a:26:6a:3f:e3:01:ff:e2: c0:65:03:3e:6a:4b:a1:1c:ea:08:c1:6f:82:6f:99: dd:20:e4:39:69:d1:79:ef:c8:a3:c2:5d:fb:a8:49: 19:49:88:e8:f9:04:13:ef:0f:34:7e:5c:58:fb:1e: 03:11:5f:a0:84:ef:34:fb:2d:0d:1b:d5:63:2c:58: f5:9c:a5:bf:22:82:2a:c2:61:4d:17:66:d3:06:51: 76:f7:d6:3b:f9:9a:c4:d2:76:e6:b7:18:82:41:54: ae:5c:91:70:29:f5:8f:6f:57:71:48:d0:69:cb:95: 84:35:12:33:6e:90:06:26:fd:47:81:9a:fa:ca:50: 91:d4:4e:59:ea:1a:8c:c8:9a:5c:d2:fa:3b:c2:17: 4b:6c:71:f6:63:d8:26:76:d7:4c:8e:d8:d6:2f:26: 87:0d:dd:03:d7:77:8c:63:1f:0c:29:81:86:ae:71: bd:56:33:7c:89:73:69:8c:6e:9d:da:8e:5c:0e:0a: 6a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:ED:03:4B:1B:51:B0:16:86:3D:C1:5A:2B:8A:DA:89:EA:1B:C2:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c2:66:dc:df:b3:bd:c7:ab:6e:79:0c:04:13:2f:f7:ec:8a: b9:5c:a6:ba:60:20:7f:b9:6d:19:99:03:a0:2e:6a:d8:06:07: 62:5c:79:d5:53:ee:0d:f6:a6:7c:00:d4:55:76:20:87:a5:ca: 30:bd:03:1c:4b:6b:55:cc:91:c4:d0:04:22:0f:c5:20:cf:d1: 66:ed:7d:b8:dc:7f:c0:51:50:9c:2e:90:72:8d:16:63:6a:c2: f8:54:db:ef:74:23:8f:ce:3b:9d:ff:9a:f0:64:c5:c9:4b:8c: 10:9f:0c:50:82:c6:d6:8e:cd:f2:53:3a:e9:61:59:00:7e:ac: 9d:20:ca:66:d5:1e:5d:e1:66:98:0c:7a:8d:78:b1:1f:0e:fa: fc:5a:50:f4:ae:25:e7:63:84:a4:bc:f5:33:62:67:15:c8:41: 79:eb:3c:40:98:bc:41:03:81:ce:31:80:76:ff:0c:59:8b:48: 96:3c:e2:82:02:da:cf:53:e9:4c:61:0e:87:91:6f:63:29:b1: 7b:e7:56:6f:73:cc:8f:11:23:d3:3f:e1:48:d0:38:33:7b:04: 40:01:2a:d3:69:c2:d9:88:26:44:54:c8:45:f1:7d:61:45:3c: 89:ac:f1:9b:c9:83:86:73:7b:8a:67:f9:85:87:d3:46:21:35: 3a:05:8c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPGDpFUTCFJLNMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MjM0YjBlOWUtMTM3My00YTQ1LWI5OWItMjM4Y2NjOWYyNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVWWj7zb+Ff7We1t5mldK9jhygU4nIeGTA2r a2ZLDZWF4kF9bo6owAu1++tGTLSSP7ynycqz6dqyOyYoGBEZczuIWiZqP+MB/+LA ZQM+akuhHOoIwW+Cb5ndIOQ5adF578ijwl37qEkZSYjo+QQT7w80flxY+x4DEV+g hO80+y0NG9VjLFj1nKW/IoIqwmFNF2bTBlF299Y7+ZrE0nbmtxiCQVSuXJFwKfWP b1dxSNBpy5WENRIzbpAGJv1HgZr6ylCR1E5Z6hqMyJpc0vo7whdLbHH2Y9gmdtdM jtjWLyaHDd0D13eMYx8MKYGGrnG9VjN8iXNpjG6d2o5cDgpqNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILtA0sbUbAWhj3BWiuK2onqG8JQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2YzNDNiZDktNjgwZi0z NzAyLWI5OTEtMGU0OGY1NGY2Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITCZtzfs73Hq255DAQTL/fsirlcprpgIH+5bRmZA6AuatgGB2JcedVT 7g32pnwA1FV2IIelyjC9AxxLa1XMkcTQBCIPxSDP0Wbtfbjcf8BRUJwukHKNFmNq wvhU2+90I4/OO53/mvBkxclLjBCfDFCCxtaOzfJTOulhWQB+rJ0gymbVHl3hZpgM eo14sR8O+vxaUPSuJedjhKS89TNiZxXIQXnrPECYvEEDgc4xgHb/DFmLSJY84oIC 2s9T6UxhDoeRb2MpsXvnVm9zzI8RI9M/4UjQODN7BEABKtNpwtmIJkRUyEXxfWFF PIms8ZvJg4Zze4pn+YWH00YhNToFjDA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:16 2026 by rpki-client