$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ecee9728-8182-32b6-8596-99d9b40053ce.roa File: ecee9728-8182-32b6-8596-99d9b40053ce.roa (raw, json) Hash identifier: oa2Wdtb22bZg9xc/1DIjljYYMH/QbZxeYMsn7dlibZ0= Subject key identifier: DA:AE:2A:7C:A9:3A:84:63:15:91:35:5B:22:C7:56:76:0D:78:AA:E2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74EF1D7BBDCB7D42BC0E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ecee9728-8182-32b6-8596-99d9b40053ce.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ef:1d:7b:bd:cb:7d:42:bc:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=dc4869ba-6894-4e6c-b2c1-4b37ded288ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:50:4f:ca:61:b2:99:61:91:db:ad:7e:42: 07:40:d8:8d:67:3d:18:fc:93:ed:70:cd:c8:33:1c: cf:ee:ef:70:ee:6e:fb:2a:d7:ff:78:69:06:83:67: 11:38:4f:35:8c:f4:1d:25:e2:75:f2:aa:e5:01:6f: 86:4c:c5:df:e9:38:15:74:25:71:31:ec:d5:95:56: 1e:d7:aa:6f:a2:93:fe:24:c6:73:15:23:fe:7d:18: b8:29:e2:43:57:c1:be:35:62:ae:ea:32:85:94:0f: 28:f3:96:58:65:2f:fc:1e:29:2c:64:75:3d:56:44: 9b:2e:f9:4d:80:3c:41:02:bb:39:49:21:90:6c:4c: 98:63:2a:2f:13:4e:00:03:01:ac:38:5e:31:5a:fc: 50:fe:44:9c:5c:e5:f0:a5:b0:6b:3a:e2:b4:12:c9: 17:11:b3:20:48:e0:41:c7:4f:3f:1e:78:d0:56:66: b2:db:f6:cc:eb:c6:5d:ee:c6:25:7c:76:90:af:57: a7:10:af:d2:bd:40:b9:75:88:32:a3:66:04:62:e3: be:eb:f4:33:9b:88:90:72:fb:16:28:79:c0:f1:72: d3:fb:dd:87:2c:8b:85:91:95:60:67:44:d3:f7:d9: 7f:59:58:d0:3f:11:58:fd:9d:c6:bc:52:c3:41:f2: a4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:2A:7C:A9:3A:84:63:15:91:35:5B:22:C7:56:76:0D:78:AA:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ecee9728-8182-32b6-8596-99d9b40053ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:49:a3:e1:c1:c5:87:c0:7c:e1:f6:70:4d:95:ea:91:6d:96: f7:47:4a:b3:d5:4c:8d:0d:61:3e:14:cc:07:e0:20:21:71:ad: dd:f1:7d:57:d0:85:94:96:95:09:95:cf:ae:15:cb:74:5d:8b: c3:09:18:0f:60:7e:0d:5f:f2:cd:e0:03:02:a4:9c:1d:d0:32: a3:2e:b1:8b:67:d6:b0:c0:a9:56:d8:e0:1b:fc:86:68:cd:6d: 15:9c:1e:26:2c:a2:59:f0:15:11:63:ef:30:8e:5f:5e:0f:cc: 18:be:18:36:49:40:65:97:cd:9f:b2:ac:cf:7c:a5:83:ad:00: 8e:21:d8:4d:73:b7:28:c0:b6:14:6c:b2:57:1c:2b:e3:67:da: b2:c4:c4:dc:86:b1:81:38:2f:fd:f7:5a:4c:2c:f9:fe:5d:1a: 51:63:f6:fc:c9:bc:6b:40:ee:40:94:40:29:f9:9d:f4:7a:15: 3c:89:86:17:5d:0f:a2:20:24:02:39:24:36:ab:05:c8:b5:ad: 79:7c:89:09:60:85:5e:72:50:5a:58:cb:0b:5d:a4:8a:e1:b9: a9:78:0c:ac:7c:ec:5b:c0:50:2c:28:21:7a:47:5a:e1:70:bf: 55:39:a7:d9:d6:f0:01:e8:51:97:91:a9:d5:de:ff:7e:45:cd: 89:5f:45:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO8de73LfUK8DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZGM0ODY5YmEtNjg5NC00ZTZjLWIyYzEtNGIzN2RlZDI4OGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PFQT8phsplhkdutfkIHQNiNZz0Y/JPtcM3I MxzP7u9w7m77Ktf/eGkGg2cROE81jPQdJeJ18qrlAW+GTMXf6TgVdCVxMezVlVYe 16pvopP+JMZzFSP+fRi4KeJDV8G+NWKu6jKFlA8o85ZYZS/8HiksZHU9VkSbLvlN gDxBArs5SSGQbEyYYyovE04AAwGsOF4xWvxQ/kScXOXwpbBrOuK0EskXEbMgSOBB x08/HnjQVmay2/bM68Zd7sYlfHaQr1enEK/SvUC5dYgyo2YEYuO+6/Qzm4iQcvsW KHnA8XLT+92HLIuFkZVgZ0TT99l/WVjQPxFY/Z3GvFLDQfKkUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNquKnypOoRjFZE1WyLHVnYNeKriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZWNlZTk3MjgtODE4Mi0z MmI2LTg1OTYtOTlkOWI0MDA1M2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1Jo+HBxYfAfOH2cE2V6pFtlvdHSrPVTI0NYT4UzAfgICFxrd3xfVfQ hZSWlQmVz64Vy3Rdi8MJGA9gfg1f8s3gAwKknB3QMqMusYtn1rDAqVbY4Bv8hmjN bRWcHiYsolnwFRFj7zCOX14PzBi+GDZJQGWXzZ+yrM98pYOtAI4h2E1ztyjAthRs slccK+Nn2rLExNyGsYE4L/33Wkws+f5dGlFj9vzJvGtA7kCUQCn5nfR6FTyJhhdd D6IgJAI5JDarBci1rXl8iQlghV5yUFpYywtdpIrhual4DKx87FvAUCwoIXpHWuFw v1U5p9nW8AHoUZeRqdXe/35FzYlfRdI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:41:10 2026 by rpki-client