$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa File: 6c80e3d5-346d-3567-9003-79a6e213a98d.roa (raw, json) Hash identifier: uRvzJHCdZO22a6XpnP6pY9nKyd8HrmXvAow343rAiSY= Subject key identifier: E5:D1:2F:FC:FA:4B:41:9D:64:B7:05:AA:38:48:77:A7:7E:A8:1D:3B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F28DD458F08EE24EEE80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f2:8d:d4:58:f0:8e:e2:4e:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=a8286198-f279-4770-9a99-03983e4f1b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:01:e0:ba:0b:6a:8b:05:90:cd:85:e1:f5: 14:e5:f0:94:28:03:8b:9a:63:45:28:cd:9d:43:82: de:7b:8c:32:a0:78:02:60:5d:d8:0f:50:f6:25:6f: 6d:5e:3a:24:97:12:59:11:6d:61:0a:62:40:34:33: ca:e6:bc:dc:e0:2c:0e:ef:1a:f4:29:04:ce:20:a4: 0c:04:ec:5e:87:8c:05:c7:93:3a:d7:33:80:7b:a1: 50:d0:da:ca:e6:12:bd:06:65:d5:ce:43:65:17:40: 87:98:84:3c:18:0c:9e:bd:05:21:8f:c9:36:ec:87: 3b:c0:de:91:50:11:d6:96:1b:54:55:94:59:e4:5c: ca:96:5d:65:34:19:e0:34:5b:96:50:fa:c5:db:13: b9:be:e5:53:ca:41:53:7c:d7:89:7a:d1:a6:5f:d2: f6:d2:3c:47:c1:df:f8:e4:94:cb:b5:dd:c7:83:90: b4:4f:2d:d8:5d:5a:d1:7d:cb:11:47:fa:5c:e6:d9: 4c:c7:27:58:8a:79:d2:c6:62:b3:ba:1d:36:8f:ab: 26:bb:bc:7d:0b:f3:04:a9:8f:37:30:3c:b6:cb:03: 9f:35:d2:82:c6:3b:a8:bf:03:3f:3a:a0:70:38:08: e7:af:4f:ad:3a:0c:3a:28:51:92:39:09:12:5b:7c: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D1:2F:FC:FA:4B:41:9D:64:B7:05:AA:38:48:77:A7:7E:A8:1D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b9:0f:21:e7:bf:ef:82:de:d3:38:e9:cc:e2:ac:3f:8f:56: bf:b5:bc:43:6e:f1:c9:07:f2:dd:6c:10:76:a8:42:45:b1:c2: e5:97:09:50:53:50:4c:49:ad:47:e1:b8:cb:4f:13:49:4f:0a: de:cb:56:3a:ed:9d:0a:cf:e2:ec:68:9c:90:8b:5a:4f:6b:bf: a5:3d:6e:8e:b5:88:ad:62:ae:92:37:ab:ef:2d:95:1b:3a:1f: 00:22:47:a1:6e:f6:6a:48:7a:58:cf:bc:ec:02:d5:d5:c0:52: bf:ce:d9:b5:27:c4:36:5c:c5:97:5c:ad:59:27:03:2c:90:50: bf:65:1d:d7:95:f6:9e:af:31:82:5a:b5:e0:85:d0:27:94:fc: 7b:ce:42:2d:37:1e:08:8e:43:9a:1d:70:79:df:01:f7:c9:5f: c3:80:66:b7:e1:2a:f3:f9:e3:75:41:dc:42:a3:f4:f6:c1:53: f7:56:25:2f:6a:66:6c:f7:d9:1f:32:38:7a:db:9e:17:42:c4: 9c:a0:4b:68:a1:5e:86:95:2c:45:ad:44:97:7f:f2:92:d6:eb: 46:eb:5e:5a:97:15:11:84:53:33:59:aa:d0:2c:0e:71:88:1a: 33:89:79:e0:1b:a6:ee:e8:99:ce:62:76:53:05:b6:4c:57:10: 0e:f3:91:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPKN1FjwjuJO7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YTgyODYxOTgtZjI3OS00NzcwLTlhOTktMDM5ODNlNGYxYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTcB4LoLaosFkM2F4fUU5fCUKAOLmmNFKM2d Q4Lee4wyoHgCYF3YD1D2JW9tXjoklxJZEW1hCmJANDPK5rzc4CwO7xr0KQTOIKQM BOxeh4wFx5M61zOAe6FQ0NrK5hK9BmXVzkNlF0CHmIQ8GAyevQUhj8k27Ic7wN6R UBHWlhtUVZRZ5FzKll1lNBngNFuWUPrF2xO5vuVTykFTfNeJetGmX9L20jxHwd/4 5JTLtd3Hg5C0Ty3YXVrRfcsRR/pc5tlMxydYinnSxmKzuh02j6smu7x9C/MEqY83 MDy2ywOfNdKCxjuovwM/OqBwOAjnr0+tOgw6KFGSOQkSW3w/OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXRL/z6S0GdZLcFqjhId6d+qB07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNmM4MGUzZDUtMzQ2ZC0z NTY3LTkwMDMtNzlhNmUyMTNhOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW5DyHnv++C3tM46czirD+PVr+1vENu8ckH8t1sEHaoQkWxwuWXCVBT UExJrUfhuMtPE0lPCt7LVjrtnQrP4uxonJCLWk9rv6U9bo61iK1irpI3q+8tlRs6 HwAiR6Fu9mpIeljPvOwC1dXAUr/O2bUnxDZcxZdcrVknAyyQUL9lHdeV9p6vMYJa teCF0CeU/HvOQi03HgiOQ5odcHnfAffJX8OAZrfhKvP543VB3EKj9PbBU/dWJS9q Zmz32R8yOHrbnhdCxJygS2ihXoaVLEWtRJd/8pLW60brXlqXFRGEUzNZqtAsDnGI GjOJeeAbpu7omc5idlMFtkxXEA7zkcs= -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:22 2026 by rpki-client