$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa File: d45a5249-bf9a-3fab-aef4-be6e656a9773.roa (raw, json) Hash identifier: SmbPh/cpZozkalcRO/sBwZ38Em5JXzSYlvbcyiBD3t0= Subject key identifier: 61:5D:B1:43:8E:6D:DC:19:42:40:C2:8E:43:06:34:2A:34:4F:90:11 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F41DEAF544B833B96D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f4:1d:ea:f5:44:b8:33:b9:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=c1d44a4f-d1c7-4f6d-b58f-686a8df45a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:6d:78:c5:8f:6d:8d:d5:07:37:c2:64:2b: 53:26:58:a5:2c:7b:ec:2c:ab:41:28:21:9c:a2:a1: eb:c1:7d:64:3d:39:89:84:38:bc:8e:5e:9f:56:e6: 39:5e:ec:3a:0e:16:bf:ba:ed:c1:bf:37:ea:44:d6: 7e:4f:71:d9:e8:61:8d:53:cc:a2:fc:41:ee:52:5c: e5:e8:42:4f:11:cf:c9:d8:d7:ec:de:99:44:04:9b: 56:b0:aa:07:fa:9a:33:58:95:e9:76:bc:ac:21:38: ba:e3:e1:5e:bd:fe:79:fb:51:ae:dc:7f:d7:27:c8: 7b:2b:8c:21:8a:7c:a5:fd:0b:20:13:74:9f:1e:ce: 9d:59:a7:cb:1d:37:41:a6:6f:cd:8c:15:81:83:ad: 65:83:96:34:07:5b:1d:92:3f:c1:cb:fa:3c:3a:8c: f1:4e:de:f3:e8:73:54:28:05:53:68:ce:24:1c:79: 86:4f:2a:6f:f4:4c:58:58:34:1c:d1:06:f4:a8:4e: e5:93:26:4c:39:c0:11:78:fe:23:d8:17:8d:28:50: 83:8a:0e:22:55:d4:20:9e:a5:c4:d9:58:2a:51:e5: 0f:88:42:4d:88:79:59:c3:b1:e4:6a:52:2a:28:63: a8:28:4b:79:be:69:ca:ad:7a:6b:db:1e:bf:ab:69: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5D:B1:43:8E:6D:DC:19:42:40:C2:8E:43:06:34:2A:34:4F:90:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b1:66:62:7d:2f:ac:86:95:b1:85:5a:b5:7c:47:02:30:dc: ce:db:fa:15:53:51:a7:d0:aa:c3:a7:8f:b8:d2:66:f4:52:f6: 87:49:97:fe:1e:15:b5:01:25:ca:c6:8c:00:ed:dd:fb:0d:be: 3c:35:c6:2f:a8:da:0d:5f:f5:92:ea:7e:ad:0d:3d:fa:e0:3d: 32:cb:a5:5b:29:59:18:90:44:00:f1:77:cd:7a:a6:20:38:6b: 41:b8:df:01:8d:16:1e:5d:33:6b:e9:eb:be:14:56:cd:08:ec: e4:26:3e:71:d6:b4:dd:53:19:34:3e:f7:0e:e9:a3:19:2b:29: fd:91:7f:79:7b:32:0e:64:79:e9:6a:5b:65:9a:1a:35:95:cf: 5b:8a:78:89:99:66:b2:85:5c:88:71:6e:04:9a:7e:78:be:71: 24:b0:43:e9:21:d8:1d:a2:69:c2:39:ce:52:97:a5:00:77:88: 56:4d:25:1d:76:3b:31:d8:fe:37:aa:3d:20:d1:74:b2:a1:31: 7b:c7:d4:98:b2:4e:36:39:93:08:8c:80:0b:76:a0:74:0c:8c: dc:ac:55:86:bf:f5:d6:8b:63:9b:e2:40:29:f0:5d:b9:3c:b4: 69:db:a4:e0:d6:28:db:e6:15:69:7e:77:f2:ce:d1:fa:b5:0d: e5:44:f7:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPQd6vVEuDO5bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YzFkNDRhNGYtZDFjNy00ZjZkLWI1OGYtNjg2YThkZjQ1YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtApteMWPbY3VBzfCZCtTJlilLHvsLKtBKCGc oqHrwX1kPTmJhDi8jl6fVuY5Xuw6Dha/uu3BvzfqRNZ+T3HZ6GGNU8yi/EHuUlzl 6EJPEc/J2Nfs3plEBJtWsKoH+pozWJXpdrysITi64+Fevf55+1Gu3H/XJ8h7K4wh inyl/QsgE3SfHs6dWafLHTdBpm/NjBWBg61lg5Y0B1sdkj/By/o8OozxTt7z6HNU KAVTaM4kHHmGTypv9ExYWDQc0Qb0qE7lkyZMOcAReP4j2BeNKFCDig4iVdQgnqXE 2VgqUeUPiEJNiHlZw7HkalIqKGOoKEt5vmnKrXpr2x6/q2kroQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFdsUOObdwZQkDCjkMGNCo0T5ARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDQ1YTUyNDktYmY5YS0z ZmFiLWFlZjQtYmU2ZTY1NmE5NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqxZmJ9L6yGlbGFWrV8RwIw3M7b+hVTUafQqsOnj7jSZvRS9odJl/4e FbUBJcrGjADt3fsNvjw1xi+o2g1f9ZLqfq0NPfrgPTLLpVspWRiQRADxd816piA4 a0G43wGNFh5dM2vp674UVs0I7OQmPnHWtN1TGTQ+9w7poxkrKf2Rf3l7Mg5keelq W2WaGjWVz1uKeImZZrKFXIhxbgSafni+cSSwQ+kh2B2iacI5zlKXpQB3iFZNJR12 OzHY/jeqPSDRdLKhMXvH1JiyTjY5kwiMgAt2oHQMjNysVYa/9daLY5viQCnwXbk8 tGnbpODWKNvmFWl+d/LO0fq1DeVE95E= -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:34 2026 by rpki-client