$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa File: 4f004cec-8ad5-311c-a400-22bfc882b03c.roa (raw, json) Hash identifier: pSRuieOSQj+RpgOv45UHp5DGoXdD9aSU+UV5V65PAFs= Subject key identifier: 73:5E:92:57:68:F6:28:16:80:92:12:CA:6A:96:8D:63:A8:84:42:A8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F4412006908AC9FEE730 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f4:41:20:06:90:8a:c9:fe:e7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=8c770ec3-bf1e-480c-9272-87d2164f89c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:e1:12:6e:79:b7:31:d1:c0:e7:34:2b:74: 45:cf:11:d9:3f:22:7e:91:91:69:69:b3:b5:bc:76: a1:b2:6e:04:af:02:6a:7b:de:f4:b7:68:ea:92:b7: 40:cb:4d:95:62:85:36:c7:a2:4c:08:ed:a8:87:e5: c0:b6:a3:89:58:fb:4d:11:7d:4b:d7:42:15:bb:ae: 03:6a:d2:52:4a:08:5d:8e:69:47:8f:4e:af:d4:f7: 46:a0:ef:20:60:3f:35:fc:87:85:6b:54:2f:82:03: 16:2f:41:00:db:51:96:ec:d5:f2:d8:0e:da:80:8c: a7:ba:eb:ae:b8:68:22:dd:70:eb:6b:4a:c0:c6:ed: 69:20:2b:fc:67:0e:2e:77:87:0f:cf:e3:3a:38:bb: 76:d2:2b:15:74:93:b9:28:d6:c1:ef:6b:f6:7a:14: 1b:45:72:ac:05:75:a5:57:cd:96:d2:34:38:59:ad: 7c:6d:1e:b4:e3:f8:31:7f:0e:a9:a6:f5:45:f7:3f: bf:84:01:ce:98:60:04:76:c9:df:07:fd:e7:5f:d1: a5:46:ad:20:20:83:3b:44:d8:37:15:ad:b7:bb:ed: 66:c3:7a:38:37:e4:17:a6:b7:bb:41:35:c3:e2:65: b4:94:cd:aa:d1:48:cd:e9:62:40:f1:04:42:10:c5: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5E:92:57:68:F6:28:16:80:92:12:CA:6A:96:8D:63:A8:84:42:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:01:56:80:6d:2a:fa:25:ad:3e:97:2e:17:66:d0:94:88:20: ea:f3:65:83:67:ea:19:60:bc:7f:d7:dd:be:cb:8a:34:a4:1f: 87:93:98:4b:83:f3:73:4f:81:bf:63:1b:7c:8d:f2:13:0c:71: 18:38:20:a5:57:ed:10:8b:64:f7:83:88:4a:7f:2e:0f:25:10: 28:b9:7b:9a:3a:b7:3f:87:f2:a0:6d:ad:ac:cd:21:e3:60:8d: 8e:a9:c4:ca:7c:0d:88:46:d3:86:72:63:a9:76:bb:c2:99:1a: 59:90:cc:79:78:e9:3e:a9:29:dd:c2:4d:f0:e4:e1:29:77:4f: 95:31:c7:a8:2b:91:b6:c9:e2:6f:8d:30:ea:9a:e1:bf:dc:0e: 6a:e6:51:72:42:43:f5:2b:7a:10:37:e5:74:4b:41:4a:0b:82: 3d:f3:dc:68:aa:23:2c:69:7e:03:e0:6b:0d:2f:bd:dd:b3:0e: 66:50:92:e8:f4:fe:97:8d:c6:ad:9d:fa:67:57:ad:09:6a:83: fb:de:ea:bf:52:2e:28:ea:1c:20:14:d5:fc:fa:b0:fa:1e:25: ad:f4:93:12:a4:3f:2c:1f:4b:d8:36:d1:8a:99:cf:4d:86:38: 45:12:8d:a8:e4:79:14:c9:cc:17:e1:80:f0:a0:cb:cf:dd:d3: 9b:5a:f9:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPRBIAaQisn+5zAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OGM3NzBlYzMtYmYxZS00ODBjLTkyNzItODdkMjE2NGY4OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/hEm55tzHRwOc0K3RFzxHZPyJ+kZFpabO1 vHahsm4ErwJqe970t2jqkrdAy02VYoU2x6JMCO2oh+XAtqOJWPtNEX1L10IVu64D atJSSghdjmlHj06v1PdGoO8gYD81/IeFa1QvggMWL0EA21GW7NXy2A7agIynuuuu uGgi3XDra0rAxu1pICv8Zw4ud4cPz+M6OLt20isVdJO5KNbB72v2ehQbRXKsBXWl V82W0jQ4Wa18bR604/gxfw6ppvVF9z+/hAHOmGAEdsnfB/3nX9GlRq0gIIM7RNg3 Fa23u+1mw3o4N+QXpre7QTXD4mW0lM2q0UjN6WJA8QRCEMVOiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNekldo9igWgJISymqWjWOohEKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGYwMDRjZWMtOGFkNS0z MTFjLWE0MDAtMjJiZmM4ODJiMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAABVoBtKvolrT6XLhdm0JSIIOrzZYNn6hlgvH/X3b7LijSkH4eTmEuD 83NPgb9jG3yN8hMMcRg4IKVX7RCLZPeDiEp/Lg8lECi5e5o6tz+H8qBtrazNIeNg jY6pxMp8DYhG04ZyY6l2u8KZGlmQzHl46T6pKd3CTfDk4Sl3T5Uxx6grkbbJ4m+N MOqa4b/cDmrmUXJCQ/UrehA35XRLQUoLgj3z3GiqIyxpfgPgaw0vvd2zDmZQkuj0 /peNxq2d+mdXrQlqg/ve6r9SLijqHCAU1fz6sPoeJa30kxKkPywfS9g20YqZz02G OEUSjajkeRTJzBfhgPCgy8/d05ta+T8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:16 2026 by rpki-client