$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a50c51aa-4bbd-36f5-905e-8de53fa3b7f0.roa File: a50c51aa-4bbd-36f5-905e-8de53fa3b7f0.roa (raw, json) Hash identifier: zW4c2DnfyuBaMRWI220fJmxyehUK2VljI25FtGkNwS0= Subject key identifier: A3:A2:34:E4:B3:A2:F6:2D:07:01:8D:B0:BC:C5:1C:1B:BC:3B:7D:32 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F0EAC7BFB8CCD06956A0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a50c51aa-4bbd-36f5-905e-8de53fa3b7f0.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f0:ea:c7:bf:b8:cc:d0:69:56:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=480d3b5e-90d9-48c2-818e-ff8f36346795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:1a:65:e1:ce:bb:ae:43:e3:75:91:03:37: 51:40:3b:86:6e:1d:ee:dd:93:58:dc:6a:ce:f0:27: d4:cb:fb:33:fc:f9:26:f4:7e:d1:a3:f3:cb:22:42: cf:07:15:07:ef:62:06:a5:51:65:77:f2:ab:2f:a4: a9:66:39:5e:88:e4:07:19:0e:4a:bf:67:e6:83:59: 5a:c0:c0:52:a0:85:0a:6b:3d:04:14:28:99:7e:d4: 90:85:e1:13:3f:e6:63:73:60:af:ff:8b:7b:8e:1f: ac:63:18:fc:69:e7:cd:95:15:2b:8c:39:71:51:73: 2b:69:0b:09:0a:58:88:af:81:cf:8e:f2:ee:b2:67: 6f:24:c8:4c:ed:04:32:42:e0:6f:39:55:cf:2f:ee: 35:0a:97:94:1c:0c:8c:0b:56:b5:ad:3d:7b:cb:85: fd:a1:c6:f2:84:eb:be:46:bd:63:3e:03:57:0b:ba: e5:1c:c5:96:19:54:f0:cf:44:88:25:8b:73:50:39: e3:2c:af:ce:3b:f1:ca:b4:08:a1:c1:c6:f7:e0:0b: f3:74:19:16:20:c7:38:3c:e8:07:d4:fb:27:cf:0f: 27:1a:d6:58:19:2f:85:f7:2d:c8:2e:5b:05:39:84: 00:1e:4d:8e:84:08:c8:6d:07:d3:42:cc:77:fb:ca: 98:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:34:E4:B3:A2:F6:2D:07:01:8D:B0:BC:C5:1C:1B:BC:3B:7D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a50c51aa-4bbd-36f5-905e-8de53fa3b7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e0:1c:49:45:cf:3a:be:d4:f2:1e:d0:bc:5b:2b:d9:3a:eb: a7:f9:57:72:af:5c:6e:99:0b:80:9b:9c:a6:f9:b9:43:73:59: ab:4d:9c:7a:ae:59:c7:21:98:72:5e:6e:e2:cf:f5:61:fa:e8: 15:ff:3f:dd:02:f2:5b:53:da:4e:61:a0:3f:1e:3c:0c:0b:73: 8e:9c:d6:8d:c8:7f:8f:4c:5c:9c:75:fe:60:b3:af:02:4a:0d: 7c:4d:47:27:76:46:4b:86:2d:08:e4:41:c6:48:87:aa:07:f4: 32:13:ec:66:36:68:f9:9f:8f:bd:08:37:0e:23:10:ca:1b:91: 8c:a8:36:7f:fa:30:35:20:ae:fb:9f:68:36:49:a4:85:8e:f1: c2:95:8d:a4:45:df:6c:5e:23:71:a2:26:d9:cb:dc:96:49:b4: ef:e6:96:2d:82:42:84:e6:57:af:ac:6e:5f:84:55:35:3b:1b: bb:24:08:81:e0:9e:ca:48:e7:a2:b1:6f:30:e0:9d:77:aa:c5: 2b:35:5f:2f:6e:08:9e:8a:20:22:dc:c5:12:13:13:41:8d:b6: ef:09:f4:d6:0c:00:06:0c:5c:d6:7c:e8:ca:3d:8e:0a:02:ed: 3a:c7:e0:5c:64:20:2f:bb:01:04:1c:71:c2:2f:3a:f3:ed:a0: 8a:76:d2:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPDqx7+4zNBpVqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDgwZDNiNWUtOTBkOS00OGMyLTgxOGUtZmY4ZjM2MzQ2Nzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw4aZeHOu65D43WRAzdRQDuGbh3u3ZNY3GrO 8CfUy/sz/Pkm9H7Ro/PLIkLPBxUH72IGpVFld/KrL6SpZjleiOQHGQ5Kv2fmg1la wMBSoIUKaz0EFCiZftSQheETP+Zjc2Cv/4t7jh+sYxj8aefNlRUrjDlxUXMraQsJ CliIr4HPjvLusmdvJMhM7QQyQuBvOVXPL+41CpeUHAyMC1a1rT17y4X9ocbyhOu+ Rr1jPgNXC7rlHMWWGVTwz0SIJYtzUDnjLK/OO/HKtAihwcb34AvzdBkWIMc4POgH 1Psnzw8nGtZYGS+F9y3ILlsFOYQAHk2OhAjIbQfTQsx3+8qYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOiNOSzovYtBwGNsLzFHBu8O30yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTUwYzUxYWEtNGJiZC0z NmY1LTkwNWUtOGRlNTNmYTNiN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzgHElFzzq+1PIe0LxbK9k666f5V3KvXG6ZC4CbnKb5uUNzWatNnHqu WcchmHJebuLP9WH66BX/P90C8ltT2k5hoD8ePAwLc46c1o3If49MXJx1/mCzrwJK DXxNRyd2RkuGLQjkQcZIh6oH9DIT7GY2aPmfj70INw4jEMobkYyoNn/6MDUgrvuf aDZJpIWO8cKVjaRF32xeI3GiJtnL3JZJtO/mli2CQoTmV6+sbl+EVTU7G7skCIHg nspI56KxbzDgnXeqxSs1Xy9uCJ6KICLcxRITE0GNtu8J9NYMAAYMXNZ86Mo9jgoC 7TrH4FxkIC+7AQQcccIvOvPtoIp20sY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:03 2026 by rpki-client