$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6af4f65-e6dd-3390-ab48-8a71e2c16f17.roa File: a6af4f65-e6dd-3390-ab48-8a71e2c16f17.roa (raw, json) Hash identifier: pzMna6i8YC4DtZ3JkFmy5Oxhh0DEB2fljk/I/0DGvBo= Subject key identifier: 87:1A:2F:A8:93:11:94:EE:5B:0D:2E:D8:8B:15:14:27:75:7F:AE:00 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F229887ED3FAFD632FA0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6af4f65-e6dd-3390-ab48-8a71e2c16f17.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f2:29:88:7e:d3:fa:fd:63:2f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=4468e9cd-8b43-4551-9dd2-35233c63da7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f0:fe:77:7b:42:69:1a:8c:09:89:9e:f2:bb: 21:35:18:f7:6e:d0:dd:bc:04:fb:ce:67:34:78:92: ba:41:d4:0f:a7:2f:7b:d5:50:5c:13:ac:24:fb:13: 54:30:21:99:93:10:53:96:d9:4f:8a:8e:cf:d1:ce: 2e:22:e5:71:c9:37:0c:f0:5b:b4:f0:4e:98:97:a0: 33:25:d1:ea:8d:d6:58:9e:8d:83:b9:42:86:30:bb: 3d:01:42:fc:dd:9f:e4:8c:16:c8:13:d9:55:99:48: 57:7d:17:63:f6:35:19:92:07:74:16:3f:bc:21:c9: 77:20:1d:e0:e3:fa:d6:39:52:c8:a8:3a:66:0a:61: d9:71:92:2e:57:c1:62:06:61:14:59:b6:16:f8:2b: 0e:cb:a3:fe:ca:28:e3:d2:55:18:ba:b0:47:e9:aa: 46:04:ba:e6:3c:06:3b:db:24:75:d7:85:c3:d4:21: d7:2a:eb:fd:af:57:8c:f8:61:62:85:d0:bb:19:92: 97:f1:5b:84:b3:2e:a0:7f:14:06:76:e6:f5:fd:9b: 55:d1:50:f7:99:1e:b5:5a:ca:4a:f9:f1:bb:6e:bd: 4e:2a:fb:c2:78:b1:9b:b3:c3:81:42:4b:7d:b2:13: 2b:25:73:d2:ec:10:60:38:82:95:77:7f:29:48:e0: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1A:2F:A8:93:11:94:EE:5B:0D:2E:D8:8B:15:14:27:75:7F:AE:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a6af4f65-e6dd-3390-ab48-8a71e2c16f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:63:e8:8d:fe:b7:cd:ab:3e:21:3e:a4:bb:69:55:29:72:b7: 8f:78:d2:ab:14:f6:b6:0c:b5:51:ae:37:ee:aa:57:0b:09:0b: 14:1d:33:8e:f1:ca:ef:91:d4:cc:00:77:19:40:c6:0c:85:23: 0f:52:88:f6:43:1e:2e:0c:01:84:ed:23:f9:e1:e2:a2:78:9f: 8c:10:ab:9d:f0:d7:1f:b8:c1:02:e0:98:84:13:47:2d:ba:fc: a3:4a:5e:ad:5c:05:27:fb:3f:20:69:fe:d1:83:eb:ed:df:21: b5:29:29:e7:41:be:3b:3f:e5:d6:e7:07:24:8f:29:f2:9d:4e: 7a:cf:18:a6:a3:4d:0f:78:60:3a:73:a5:af:60:e3:89:8d:90: 54:52:57:a4:c8:25:2d:16:76:0e:f3:92:4e:08:90:7e:dc:ed: ec:fd:4d:51:e2:10:5d:db:fd:24:f9:87:c1:36:98:50:19:d1: 76:7d:9c:74:04:9f:6c:00:75:94:25:d5:c1:dc:ee:2c:d4:36: 58:c6:66:56:74:62:2a:da:16:07:e6:db:f0:6d:bb:ba:8d:23: 8c:84:5e:12:b2:21:a0:35:26:f6:fe:ec:0c:70:92:f3:24:1e: 4a:90:f4:2d:6e:c4:50:46:76:2a:68:1d:63:28:02:64:03:a5: 18:d4:2d:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPIpiH7T+v1jL6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDQ2OGU5Y2QtOGI0My00NTUxLTlkZDItMzUyMzNjNjNkYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfD+d3tCaRqMCYme8rshNRj3btDdvAT7zmc0 eJK6QdQPpy971VBcE6wk+xNUMCGZkxBTltlPio7P0c4uIuVxyTcM8Fu08E6Yl6Az JdHqjdZYno2DuUKGMLs9AUL83Z/kjBbIE9lVmUhXfRdj9jUZkgd0Fj+8Icl3IB3g 4/rWOVLIqDpmCmHZcZIuV8FiBmEUWbYW+CsOy6P+yijj0lUYurBH6apGBLrmPAY7 2yR114XD1CHXKuv9r1eM+GFihdC7GZKX8VuEsy6gfxQGdub1/ZtV0VD3mR61WspK +fG7br1OKvvCeLGbs8OBQkt9shMrJXPS7BBgOIKVd38pSOCGJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcaL6iTEZTuWw0u2IsVFCd1f64AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTZhZjRmNjUtZTZkZC0z MzkwLWFiNDgtOGE3MWUyYzE2ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlj6I3+t82rPiE+pLtpVSlyt4940qsU9rYMtVGuN+6qVwsJCxQdM47x yu+R1MwAdxlAxgyFIw9SiPZDHi4MAYTtI/nh4qJ4n4wQq53w1x+4wQLgmIQTRy26 /KNKXq1cBSf7PyBp/tGD6+3fIbUpKedBvjs/5dbnBySPKfKdTnrPGKajTQ94YDpz pa9g44mNkFRSV6TIJS0Wdg7zkk4IkH7c7ez9TVHiEF3b/ST5h8E2mFAZ0XZ9nHQE n2wAdZQl1cHc7izUNljGZlZ0YiraFgfm2/Btu7qNI4yEXhKyIaA1Jvb+7AxwkvMk HkqQ9C1uxFBGdipoHWMoAmQDpRjULS8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:12 2026 by rpki-client