$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/84c3ad9c-0d72-3098-96a7-d1c19b922882.roa File: 84c3ad9c-0d72-3098-96a7-d1c19b922882.roa (raw, json) Hash identifier: /EsDTa3hpgizLC3bUv7xr0lPZzauKTX47VcDeT4/FAo= Subject key identifier: DA:E1:75:29:3D:D6:14:E4:AB:47:C2:1E:C8:EA:30:23:20:A7:61:F0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F09C2E6B1EDD13486900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/84c3ad9c-0d72-3098-96a7-d1c19b922882.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f0:9c:2e:6b:1e:dd:13:48:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=209e1b53-61d0-41b8-9061-07c87ed3b209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fe:86:9b:67:4a:81:ff:95:ec:19:de:72:07: a3:e4:80:6b:89:27:2d:fb:35:dd:f9:7c:ab:08:cc: aa:c0:63:fa:ff:31:97:d5:4f:9d:c4:3c:20:ad:8e: 72:0d:ed:8c:02:dd:e0:66:0b:88:26:4f:3a:01:91: 40:52:a0:2d:9e:c8:e2:a0:7d:3b:55:ec:50:45:93: e2:4b:ef:14:ff:db:20:fa:66:91:16:da:1a:cb:46: 18:a7:89:d0:a0:c7:82:7d:58:9a:ce:ef:a7:a4:17: db:b4:1d:d8:5d:2b:ba:0d:dc:ba:7a:8d:a1:2c:e8: b6:47:21:d7:fa:7e:a9:96:60:bb:30:91:74:20:04: 49:bd:b8:99:dc:bb:ca:99:e3:90:da:0e:41:a9:93: 85:b6:53:8b:ac:d8:4d:d9:ff:99:43:b6:5c:f3:44: 01:30:be:db:46:bb:df:92:99:ba:bd:b3:1f:a2:d3: e4:5d:5c:18:42:08:f3:83:c3:06:69:d0:fb:5a:db: a9:ea:d6:e0:d2:c6:cf:d0:4f:97:5c:ee:a4:5c:6b: 27:28:90:03:39:24:96:f5:03:9d:af:b8:6a:97:d4: 8b:45:cc:79:bb:90:4a:a7:f9:9f:54:73:6b:9b:66: d7:57:63:86:f7:68:83:ca:c3:89:16:1c:7b:a8:f9: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E1:75:29:3D:D6:14:E4:AB:47:C2:1E:C8:EA:30:23:20:A7:61:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/84c3ad9c-0d72-3098-96a7-d1c19b922882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:dc:78:66:e4:e7:79:df:fe:63:32:ed:f7:95:ac:b3:2b:73: 08:a8:d8:9d:a6:24:fa:03:09:f3:e7:16:f9:33:52:a0:9a:15: 4e:cf:01:48:e1:52:80:97:cb:7e:ed:12:64:37:4d:86:49:31: 60:bc:e7:c3:17:6d:d3:5e:b2:89:7c:c2:8e:36:93:fe:e9:fd: 6f:77:37:a8:7b:75:72:83:1e:69:c7:59:22:fb:2b:17:bb:fb: d9:c8:39:e9:6e:c7:94:a0:73:42:6d:c7:fb:64:03:1d:3d:92: f8:14:bd:c7:ee:b9:c0:6d:84:12:2b:7e:94:be:ae:5f:7f:f1: a1:35:cb:e2:8c:a0:90:f0:ad:09:70:74:e2:67:5d:68:12:b0: b8:9a:1d:18:47:a9:70:37:2b:38:e7:9e:ac:fd:4d:0b:62:db: ce:e8:cc:16:87:ee:b8:66:65:2f:06:e7:56:aa:b9:f7:f9:46: 3b:69:3f:28:a0:8a:42:f0:44:e1:d9:17:e9:fa:79:f1:63:d2: 4a:34:c2:26:ec:25:69:05:d9:82:d3:d5:a7:b5:fe:6d:ff:ed: 93:be:08:09:ae:cc:80:4e:70:2f:87:37:3e:1a:35:3a:a1:fd: 12:41:79:0c:93:90:57:69:c8:f8:d9:1b:2b:ca:44:6a:20:db: 35:aa:96:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPCcLmse3RNIaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MjA5ZTFiNTMtNjFkMC00MWI4LTkwNjEtMDdjODdlZDNiMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/6Gm2dKgf+V7Bnecgej5IBriSct+zXd+Xyr CMyqwGP6/zGX1U+dxDwgrY5yDe2MAt3gZguIJk86AZFAUqAtnsjioH07VexQRZPi S+8U/9sg+maRFtoay0YYp4nQoMeCfViazu+npBfbtB3YXSu6Ddy6eo2hLOi2RyHX +n6plmC7MJF0IARJvbiZ3LvKmeOQ2g5BqZOFtlOLrNhN2f+ZQ7Zc80QBML7bRrvf kpm6vbMfotPkXVwYQgjzg8MGadD7Wtup6tbg0sbP0E+XXO6kXGsnKJADOSSW9QOd r7hql9SLRcx5u5BKp/mfVHNrm2bXV2OG92iDysOJFhx7qPnRzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrhdSk91hTkq0fCHsjqMCMgp2HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODRjM2FkOWMtMGQ3Mi0z MDk4LTk2YTctZDFjMTliOTIyODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILceGbk53nf/mMy7feVrLMrcwio2J2mJPoDCfPnFvkzUqCaFU7PAUjh UoCXy37tEmQ3TYZJMWC858MXbdNesol8wo42k/7p/W93N6h7dXKDHmnHWSL7Kxe7 +9nIOelux5Sgc0Jtx/tkAx09kvgUvcfuucBthBIrfpS+rl9/8aE1y+KMoJDwrQlw dOJnXWgSsLiaHRhHqXA3Kzjnnqz9TQti287ozBaH7rhmZS8G51aquff5RjtpPyig ikLwROHZF+n6efFj0ko0wibsJWkF2YLT1ae1/m3/7ZO+CAmuzIBOcC+HNz4aNTqh /RJBeQyTkFdpyPjZGyvKRGog2zWqlug= -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:49 2026 by rpki-client