$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b67294c7-af63-3714-9d84-31229374d8bd.roa File: b67294c7-af63-3714-9d84-31229374d8bd.roa (raw, json) Hash identifier: iFpjheN7a5wFUPr8F9EOrgVxPayxRcrL+j0ULa041+M= Subject key identifier: 8D:6D:C4:ED:3C:BE:01:F8:BC:92:36:4E:6D:22:45:E0:3D:75:C4:81 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F0C93116FB272EED6600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b67294c7-af63-3714-9d84-31229374d8bd.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f0:c9:31:16:fb:27:2e:ed:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=c79906b4-9f14-41ca-9a2c-12c3d4ff48e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:11:47:9e:aa:b3:e9:42:6a:24:d0:9a:50: 3b:a2:a6:2c:f9:6e:a2:02:33:58:34:8a:4f:93:f7: 11:59:82:31:ac:43:54:b5:7d:c1:ab:10:f4:4d:d1: 4e:60:ac:1f:aa:33:a2:02:39:2b:47:09:5b:08:c6: 29:64:60:0b:57:bb:90:a3:cd:c9:52:48:c8:32:ec: 4b:10:af:13:32:5b:f2:10:61:0e:8e:a0:02:f0:cd: 2f:d6:02:d6:20:e2:b8:2a:40:ca:9c:1e:48:70:dc: ec:ee:b3:4e:10:3f:ba:d8:a0:ee:b3:51:77:39:00: 9d:7f:55:79:35:5d:fe:f8:0a:b3:c8:96:91:54:e1: 24:d4:e1:31:c1:44:4a:43:6d:96:fb:ca:6d:04:c9: 7a:08:37:ff:c5:28:c2:49:12:1e:e2:b2:6e:a5:65: 9a:86:9c:f9:16:7f:72:ca:ce:ff:98:41:ef:fd:06: c4:03:fb:f3:92:e2:21:af:5e:b0:b0:ae:40:ec:50: 2f:c8:bc:19:e9:f7:57:12:c4:c9:df:22:cb:7b:02: c1:10:96:3e:96:7b:bd:9f:41:85:ac:83:16:81:65: 03:e1:58:0c:82:ee:2f:9f:3e:55:0d:c6:a7:ca:99: 22:b0:47:a6:9e:d7:90:3d:0c:61:bc:a2:60:df:59: 94:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6D:C4:ED:3C:BE:01:F8:BC:92:36:4E:6D:22:45:E0:3D:75:C4:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b67294c7-af63-3714-9d84-31229374d8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8a:fa:48:2e:da:a2:84:70:56:84:16:40:72:25:a3:e7:59: e9:7b:ea:c0:61:4b:1b:15:c9:1b:11:87:13:9e:0c:6f:db:0d: d8:cc:31:94:40:06:2f:74:16:d0:41:0a:aa:c3:22:0f:17:5d: 31:5a:84:d0:59:21:3f:7c:de:f4:72:5a:f7:b0:6a:cd:07:69: 93:54:c1:db:48:fa:a6:60:78:19:b2:e4:7f:19:29:db:7b:07: d8:99:d7:21:4e:9a:1f:06:ff:91:31:b0:ad:6b:bd:4e:27:95: 65:55:f7:42:45:15:6f:98:74:12:ce:ea:8c:f6:ea:1f:38:07: 4d:49:a3:aa:69:e1:fc:39:0c:01:8b:f5:f4:56:35:3b:72:c1: f6:c3:4f:0b:50:96:c7:5d:92:58:23:64:9f:45:af:7a:0c:cd: 1e:7a:ef:9e:82:21:7e:c5:7f:f2:10:ab:ec:7c:45:01:01:28: 34:86:2a:17:d0:72:f1:26:f7:1e:84:92:da:91:64:37:9b:b2: f1:3d:71:3f:42:57:09:04:f6:b8:81:e0:d8:4b:ae:bc:fe:71: d0:50:a7:ca:c2:37:a8:4d:a7:99:9a:d6:30:19:ba:f5:b1:ca: 80:63:2d:de:22:ee:1c:e4:3a:43:c1:6b:6f:a1:93:79:c3:03: 6c:94:8f:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPDJMRb7Jy7tZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk Yzc5OTA2YjQtOWYxNC00MWNhLTlhMmMtMTJjM2Q0ZmY0OGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupARR56qs+lCaiTQmlA7oqYs+W6iAjNYNIpP k/cRWYIxrENUtX3BqxD0TdFOYKwfqjOiAjkrRwlbCMYpZGALV7uQo83JUkjIMuxL EK8TMlvyEGEOjqAC8M0v1gLWIOK4KkDKnB5IcNzs7rNOED+62KDus1F3OQCdf1V5 NV3++AqzyJaRVOEk1OExwURKQ22W+8ptBMl6CDf/xSjCSRIe4rJupWWahpz5Fn9y ys7/mEHv/QbEA/vzkuIhr16wsK5A7FAvyLwZ6fdXEsTJ3yLLewLBEJY+lnu9n0GF rIMWgWUD4VgMgu4vnz5VDcanypkisEemnteQPQxhvKJg31mUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1txO08vgH4vJI2Tm0iReA9dcSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjY3Mjk0YzctYWY2My0z NzE0LTlkODQtMzEyMjkzNzRkOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiK+kgu2qKEcFaEFkByJaPnWel76sBhSxsVyRsRhxOeDG/bDdjMMZRA Bi90FtBBCqrDIg8XXTFahNBZIT983vRyWvewas0HaZNUwdtI+qZgeBmy5H8ZKdt7 B9iZ1yFOmh8G/5ExsK1rvU4nlWVV90JFFW+YdBLO6oz26h84B01Jo6pp4fw5DAGL 9fRWNTtywfbDTwtQlsddklgjZJ9Fr3oMzR56756CIX7Ff/IQq+x8RQEBKDSGKhfQ cvEm9x6EktqRZDebsvE9cT9CVwkE9riB4NhLrrz+cdBQp8rCN6hNp5ma1jAZuvWx yoBjLd4i7hzkOkPBa2+hk3nDA2yUj6E= -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:02 2026 by rpki-client