$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa File: bb11aac2-ed06-3bf1-af98-854fefea4da6.roa (raw, json) Hash identifier: 6crsoZqn0TGg6P7GmTgSm3SjQvEZLVl5Mb+inEIyIF0= Subject key identifier: 8A:63:F8:00:68:B9:04:02:C4:39:18:EC:FC:A7:CE:FC:1A:80:C0:0C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F2BFB29D3998AC723DA0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f2:bf:b2:9d:39:98:ac:72:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=be23eb2c-72c7-40a6-88ba-56a41093db37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:4b:a8:69:e8:b7:be:93:ac:ab:d3:8e:48: 5e:00:ca:03:f0:47:72:20:52:03:e5:0d:49:5c:97: 35:f9:26:70:34:97:cd:af:9d:37:74:8b:d4:f0:b3: 46:7b:79:8d:2a:ac:a4:34:a2:52:35:03:e7:24:0b: df:97:72:1c:14:fc:4d:36:42:bc:02:75:8e:59:ba: 2e:9f:c2:8d:50:86:99:29:9d:05:b5:15:3f:e5:71: db:63:09:fc:90:b9:8d:c3:46:2f:44:ba:a6:60:88: 2e:d1:6a:3e:2f:d6:b8:77:00:ed:4b:8f:75:c4:dc: 8d:57:26:b5:a1:76:d9:4f:3c:33:e5:40:b4:ba:02: a5:3a:cf:2e:52:c6:22:78:20:99:d6:f7:56:de:4f: c8:cd:d4:67:f0:b5:4b:c1:d4:63:d3:b6:d9:45:e5: 0d:e3:21:45:00:9b:5b:a3:bb:18:f3:b9:4c:94:2e: 5e:76:4c:bc:6a:14:df:3c:c5:be:d6:e6:1f:08:6e: 12:e2:9c:d2:67:2a:77:0d:fc:90:c0:65:3e:8d:6e: 86:a4:dd:e4:02:d2:25:75:63:40:9b:fb:b6:50:fe: 00:a3:48:f9:d3:fb:b3:34:4c:51:ee:66:83:c9:b2: 87:33:9e:80:17:01:b8:29:7c:c7:a4:fc:7d:d1:77: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:63:F8:00:68:B9:04:02:C4:39:18:EC:FC:A7:CE:FC:1A:80:C0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb11aac2-ed06-3bf1-af98-854fefea4da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f2:67:f3:21:61:57:9f:97:97:33:5d:7d:d0:1c:46:64:25: 08:aa:3f:62:67:a5:66:9c:6b:b2:37:d4:0e:db:e5:98:5a:23: 02:f1:29:6e:26:60:7f:d7:52:54:49:28:04:93:90:5e:a3:1e: 92:a7:09:37:26:39:8d:6b:2e:79:ca:70:8a:5e:d6:e0:8e:ea: 22:6c:ed:12:7a:b6:03:a2:a6:e5:39:68:40:78:df:1a:75:ae: 3d:f7:5b:4b:bf:9b:73:48:81:11:f2:15:2f:ae:db:c9:3f:e4: 54:d6:cb:72:0e:dd:7b:53:fc:e6:9d:43:8d:68:1b:08:f4:06: 45:2f:1d:10:e9:51:5e:39:ca:45:b7:ee:3a:a1:c9:16:16:1f: 17:76:28:4f:ba:96:af:47:55:93:6e:59:40:ee:65:fe:a2:da: 67:c4:ec:48:7e:a4:bb:bd:b4:67:06:da:6c:a4:19:ac:cc:7f: 12:eb:20:cf:f2:a5:3a:ef:27:00:29:51:6d:05:1e:0e:0d:a6: 93:04:f3:47:7e:50:d3:b2:c2:d7:f2:97:14:89:1f:e1:b4:16: 9f:42:c1:9c:91:48:22:9f:7e:77:83:30:00:23:e5:f1:68:a0: 48:d9:56:00:27:cc:2c:17:86:13:11:a8:3e:f9:a7:4c:47:7c: 90:3f:57:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPK/sp05mKxyPaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YmUyM2ViMmMtNzJjNy00MGE2LTg4YmEtNTZhNDEwOTNkYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOZLqGnot76TrKvTjkheAMoD8EdyIFID5Q1J XJc1+SZwNJfNr503dIvU8LNGe3mNKqykNKJSNQPnJAvfl3IcFPxNNkK8AnWOWbou n8KNUIaZKZ0FtRU/5XHbYwn8kLmNw0YvRLqmYIgu0Wo+L9a4dwDtS491xNyNVya1 oXbZTzwz5UC0ugKlOs8uUsYieCCZ1vdW3k/IzdRn8LVLwdRj07bZReUN4yFFAJtb o7sY87lMlC5edky8ahTfPMW+1uYfCG4S4pzSZyp3DfyQwGU+jW6GpN3kAtIldWNA m/u2UP4Ao0j50/uzNExR7maDybKHM56AFwG4KXzHpPx90XeCVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpj+ABouQQCxDkY7PynzvwagMAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmIxMWFhYzItZWQwNi0z YmYxLWFmOTgtODU0ZmVmZWE0ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljC0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDyZ/MhYVefl5czXX3QHEZkJQiqP2JnpWaca7I31A7b5ZhaIwLxKW4m YH/XUlRJKASTkF6jHpKnCTcmOY1rLnnKcIpe1uCO6iJs7RJ6tgOipuU5aEB43xp1 rj33W0u/m3NIgRHyFS+u28k/5FTWy3IO3XtT/OadQ41oGwj0BkUvHRDpUV45ykW3 7jqhyRYWHxd2KE+6lq9HVZNuWUDuZf6i2mfE7Eh+pLu9tGcG2mykGazMfxLrIM/y pTrvJwApUW0FHg4NppME80d+UNOywtfylxSJH+G0Fp9CwZyRSCKffneDMAAj5fFo oEjZVgAnzCwXhhMRqD75p0xHfJA/V/s= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:19 2026 by rpki-client