$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8df737c6-98b9-37d9-8f54-eac86a54a274.roa File: 8df737c6-98b9-37d9-8f54-eac86a54a274.roa (raw, json) Hash identifier: RAzSE+DAdW8r0rDtCoB5mTTjdM5ynifwuJZwBD5NFUg= Subject key identifier: B9:D6:E3:04:92:87:0D:EA:22:B3:94:92:3E:2C:E8:7F:08:47:0A:A1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F26D4DDB76335FF69780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8df737c6-98b9-37d9-8f54-eac86a54a274.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f2:6d:4d:db:76:33:5f:f6:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=7a7fd355-f68c-4afa-9ec0-5eb5f3232e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:63:0c:18:ca:2d:cd:3f:a7:fb:b7:cb:50:b2: 3e:b4:49:37:91:2f:3d:72:fb:c3:60:32:28:53:f0: 5f:f4:e9:20:b6:3b:65:ae:2a:2c:6e:44:de:97:6c: 70:5f:89:68:23:16:60:2f:2b:a8:c1:0b:ae:ad:f9: 59:73:d2:42:dc:39:a0:5c:1c:07:5f:31:49:f8:85: e6:b3:4e:79:88:8f:6d:f4:46:21:fe:8d:fd:e6:65: 46:dc:25:4a:cb:a9:21:db:81:5a:4d:3c:3e:66:13: 82:07:ec:58:af:61:7d:3a:05:44:84:fb:a8:a8:20: a8:6d:ad:fb:c6:6e:03:17:9e:15:a8:b3:82:eb:a7: ea:03:56:f6:df:a7:3a:89:f5:28:95:c7:62:47:d6: 40:b9:8d:60:7c:ff:42:b6:46:37:76:61:52:db:5a: 79:94:c1:3f:ff:78:13:f0:26:21:d2:20:db:3a:ec: 6c:b7:e9:65:89:40:45:04:2f:63:cd:f3:93:7e:c2: f3:31:48:1e:24:50:3e:5f:30:4e:5b:ed:fe:3b:8b: dd:07:9b:ba:f6:9b:31:83:ec:bb:77:0b:a9:90:42: 2f:81:bc:20:76:90:8e:09:71:15:8a:b2:1c:b4:d6: b9:fd:40:6a:2d:53:32:05:f5:d7:8c:9c:d8:01:00: 8e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D6:E3:04:92:87:0D:EA:22:B3:94:92:3E:2C:E8:7F:08:47:0A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8df737c6-98b9-37d9-8f54-eac86a54a274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4c:2c:bc:e4:0b:4b:fd:30:39:3d:f3:79:bd:44:60:8e:20: 3f:a7:e9:44:67:e8:f2:9f:0d:26:0c:bd:11:7c:87:58:e6:92: e7:84:36:ec:fe:f2:94:d6:eb:ca:99:a6:ed:af:5c:5e:9b:59: 5e:24:1a:88:df:1a:59:79:a4:ec:a3:aa:b7:23:46:16:2d:71: 5d:7f:fd:80:3a:f9:94:36:95:92:3c:6f:3d:e7:73:f0:76:80: 96:6d:ec:a8:01:99:cc:c5:1e:03:fd:43:3c:26:4e:c2:46:93: d9:24:0c:06:df:62:16:79:33:d8:eb:a3:e5:bb:ef:98:a8:3f: b4:45:59:a3:41:50:f2:ba:16:c1:7b:90:5a:71:d8:93:f3:33: 38:e1:da:38:a2:0a:a4:70:fe:54:ba:d4:ca:6f:c8:c1:19:03: bb:e5:35:03:a9:b1:64:93:86:7d:e7:ae:7f:78:d4:f1:fc:b8: 6b:28:6d:ea:18:fd:b5:5e:1a:2e:ee:1f:ce:6a:2e:da:f1:41: e1:97:73:7a:d1:b4:38:9b:a4:ba:c1:b0:6d:e4:3c:7d:4b:76: d1:57:3e:dc:1f:f4:db:7f:3f:aa:06:80:fc:90:81:00:ea:43: 87:a2:cd:55:f2:9f:9f:b6:2a:2a:4c:e6:a7:ea:bf:71:b7:12: d7:05:43:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPJtTdt2M1/2l4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk N2E3ZmQzNTUtZjY4Yy00YWZhLTllYzAtNWViNWYzMjMyZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2MMGMotzT+n+7fLULI+tEk3kS89cvvDYDIo U/Bf9OkgtjtlriosbkTel2xwX4loIxZgLyuowQuurflZc9JC3DmgXBwHXzFJ+IXm s055iI9t9EYh/o395mVG3CVKy6kh24FaTTw+ZhOCB+xYr2F9OgVEhPuoqCCoba37 xm4DF54VqLOC66fqA1b236c6ifUolcdiR9ZAuY1gfP9CtkY3dmFS21p5lME//3gT 8CYh0iDbOuxst+lliUBFBC9jzfOTfsLzMUgeJFA+XzBOW+3+O4vdB5u69psxg+y7 dwupkEIvgbwgdpCOCXEVirIctNa5/UBqLVMyBfXXjJzYAQCOCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnW4wSShw3qIrOUkj4s6H8IRwqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGRmNzM3YzYtOThiOS0z N2Q5LThmNTQtZWFjODZhNTRhMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdMLLzkC0v9MDk983m9RGCOID+n6URn6PKfDSYMvRF8h1jmkueENuz+ 8pTW68qZpu2vXF6bWV4kGojfGll5pOyjqrcjRhYtcV1//YA6+ZQ2lZI8bz3nc/B2 gJZt7KgBmczFHgP9QzwmTsJGk9kkDAbfYhZ5M9jro+W775ioP7RFWaNBUPK6FsF7 kFpx2JPzMzjh2jiiCqRw/lS61MpvyMEZA7vlNQOpsWSThn3nrn941PH8uGsobeoY /bVeGi7uH85qLtrxQeGXc3rRtDibpLrBsG3kPH1LdtFXPtwf9Nt/P6oGgPyQgQDq Q4eizVXyn5+2KipM5qfqv3G3EtcFQ+o= -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:36 2026 by rpki-client