$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/abe3f2bc-fbd2-3123-ad30-61c1e4ebc025.roa File: abe3f2bc-fbd2-3123-ad30-61c1e4ebc025.roa (raw, json) Hash identifier: hx38NGhb/Sg/WhmEcMB7ARw+4bsvXLGlkA0MmLQ1DpA= Subject key identifier: 09:51:BE:66:13:24:A4:2E:50:5F:BA:93:73:8B:84:72:65:C3:C8:8F Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F12C64AC183483B55F80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/abe3f2bc-fbd2-3123-ad30-61c1e4ebc025.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f1:2c:64:ac:18:34:83:b5:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=55903ac1-a229-4eba-9da8-71804ae019cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:43:51:85:83:94:b9:9e:c9:58:21:92:8f:86: 3b:60:79:31:58:be:6d:b0:4b:2c:07:c3:1b:0b:bd: b3:53:4d:43:f0:1d:13:39:62:7d:24:89:c2:56:94: d2:89:d9:f2:3e:4b:0b:6e:e6:81:2a:99:f9:b9:22: e7:0a:d4:54:fa:e5:94:41:95:59:84:9e:0b:40:c5: 98:28:88:28:7b:49:be:63:24:81:1b:84:d5:2d:c1: 20:99:c6:3f:1c:8b:72:39:3a:44:11:5c:c5:c2:d8: 65:5a:af:20:ea:a1:3a:67:5d:e9:a4:59:09:c9:e0: a1:5a:d8:43:ed:43:71:5f:04:c7:54:31:f8:c4:81: 6e:66:39:30:13:25:ba:fa:18:b9:8f:3d:5e:ac:be: 52:5f:0e:85:d0:45:ce:06:ae:99:39:c1:cc:c6:2d: e5:80:d7:d4:74:9f:a5:f4:2e:12:c1:10:3f:80:c5: 37:d0:02:5c:dc:a3:0d:24:17:b2:15:81:20:ba:7b: ed:be:23:ae:24:36:20:72:3d:42:f6:34:35:41:0c: f2:fa:43:df:aa:d3:14:c5:1c:ad:90:7f:c4:30:ae: 97:81:8c:81:4c:46:f8:e9:91:5d:1d:15:70:30:7f: 1c:6c:c7:2b:ea:35:63:1a:f1:00:cd:ec:82:75:66: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:51:BE:66:13:24:A4:2E:50:5F:BA:93:73:8B:84:72:65:C3:C8:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/abe3f2bc-fbd2-3123-ad30-61c1e4ebc025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3c:52:9f:71:0e:77:24:c4:8b:2e:ca:44:51:c8:f2:e7:45: 06:e0:5b:95:28:f6:cb:29:77:95:02:13:8a:62:c2:a5:03:d5: 18:8d:91:41:fc:86:c8:69:03:f0:6c:b7:99:de:a0:2b:df:da: cf:4a:49:8e:8a:46:f2:3f:c6:74:95:99:12:4d:07:2e:bb:61: a8:cc:38:b0:a6:54:38:a4:55:5e:d5:10:77:34:45:a7:ad:19: df:60:a3:84:f7:1e:a6:dc:27:6e:08:3b:de:96:14:ab:c1:2d: c7:2e:89:43:67:75:29:71:ec:a1:d2:22:1a:8f:4c:da:a3:c4: 76:cc:7b:fd:c2:db:e9:2f:6c:40:08:29:f5:4c:71:04:2b:a2: 90:10:98:41:2b:a6:30:25:e0:98:46:68:9c:5e:05:b5:54:b2: 7b:89:72:2a:5e:68:00:8a:90:eb:1c:89:46:70:41:68:93:4b: 84:ed:89:72:9c:46:62:35:3f:61:20:76:cd:14:59:35:c2:98: 40:a7:5d:c6:43:e3:7f:60:2c:76:e8:85:50:29:84:b6:84:3f: 8d:17:ea:b9:dc:47:60:3e:17:56:d8:5a:55:f1:bc:07:52:9b: 96:a3:29:f9:b5:99:0f:92:9d:52:d4:52:0e:57:20:f5:1a:2b: cd:7c:bd:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPEsZKwYNIO1X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NTU5MDNhYzEtYTIyOS00ZWJhLTlkYTgtNzE4MDRhZTAxOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUNRhYOUuZ7JWCGSj4Y7YHkxWL5tsEssB8Mb C72zU01D8B0TOWJ9JInCVpTSidnyPksLbuaBKpn5uSLnCtRU+uWUQZVZhJ4LQMWY KIgoe0m+YySBG4TVLcEgmcY/HItyOTpEEVzFwthlWq8g6qE6Z13ppFkJyeChWthD 7UNxXwTHVDH4xIFuZjkwEyW6+hi5jz1erL5SXw6F0EXOBq6ZOcHMxi3lgNfUdJ+l 9C4SwRA/gMU30AJc3KMNJBeyFYEgunvtviOuJDYgcj1C9jQ1QQzy+kPfqtMUxRyt kH/EMK6XgYyBTEb46ZFdHRVwMH8cbMcr6jVjGvEAzeyCdWY08wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlRvmYTJKQuUF+6k3OLhHJlw8iPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWJlM2YyYmMtZmJkMi0z MTIzLWFkMzAtNjFjMWU0ZWJjMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCljCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw8Up9xDnckxIsuykRRyPLnRQbgW5Uo9sspd5UCE4piwqUD1RiNkUH8 hshpA/Bst5neoCvf2s9KSY6KRvI/xnSVmRJNBy67YajMOLCmVDikVV7VEHc0Raet Gd9go4T3HqbcJ24IO96WFKvBLccuiUNndSlx7KHSIhqPTNqjxHbMe/3C2+kvbEAI KfVMcQQropAQmEErpjAl4JhGaJxeBbVUsnuJcipeaACKkOsciUZwQWiTS4TtiXKc RmI1P2Egds0UWTXCmECnXcZD439gLHbohVAphLaEP40X6rncR2A+F1bYWlXxvAdS m5ajKfm1mQ+SnVLUUg5XIPUaK818vTQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:12 2026 by rpki-client