$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa File: f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa (raw, json) Hash identifier: 3OmtPgTV49VjrE/IvU7gzFZlI6OMrumEnQ1sRz85nFw= Subject key identifier: 79:5A:79:49:85:8D:34:CA:6F:84:38:3C:58:7A:C1:D6:18:3B:12:1B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F21943F456AF344D9150 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f2:19:43:f4:56:af:34:4d:91:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=c44b4e51-953e-4f64-a3e0-9a0439f82ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:79:71:8a:5a:aa:24:33:de:1d:38:b4:ef: 28:e5:72:79:37:04:e6:6d:b2:82:ff:9d:c1:6a:67: 9b:50:6e:d6:f5:38:9a:31:9e:15:50:b6:85:67:25: 7f:c1:f7:40:a8:af:a1:07:88:f3:10:4d:ac:c9:44: f5:b1:10:20:09:bd:bc:32:78:a9:09:6a:98:f7:c6: f0:27:ab:75:19:e4:e1:fa:5b:26:af:a7:8a:44:df: c1:83:84:f7:eb:5f:ca:ff:26:b9:57:5d:6c:bf:94: 1e:81:42:cf:ab:36:2e:e2:7a:05:e8:43:87:9b:27: 46:d1:1a:f6:4a:48:20:78:e9:7e:5b:d5:e7:2e:c8: 0d:f4:d3:22:5e:fd:b5:5e:27:10:65:58:f6:c7:2a: 55:0d:2e:f1:07:52:d0:38:64:95:3c:51:30:d0:7f: 0d:91:69:bf:e1:92:ec:a0:53:f6:5c:c9:57:0d:56: ef:77:2a:19:91:9d:8e:7d:23:71:1d:82:18:a2:1c: 1c:00:fc:a2:79:16:11:b5:e6:6b:89:99:69:1e:f5: 3e:b6:7a:74:af:82:76:e2:7d:41:c9:69:f2:e6:11: 9d:0b:e1:8c:61:d3:12:a5:46:77:45:77:1a:9d:07: 1d:5a:b5:78:d8:76:ca:ba:c5:fb:a7:c6:60:c4:cf: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5A:79:49:85:8D:34:CA:6F:84:38:3C:58:7A:C1:D6:18:3B:12:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:28:64:70:99:c1:1f:c6:96:96:ef:c3:7f:d1:d9:7b:b9:f6: 29:55:4a:e7:3b:fc:e8:6c:d6:7c:09:26:d5:d5:28:8e:e6:c4: 0d:23:39:69:0a:49:ff:36:bc:f7:83:66:32:a1:73:cb:9e:a1: f5:d7:6f:24:4b:e3:4a:ad:9d:24:86:f2:b1:1b:3b:f8:06:d7: 33:d1:d1:9d:fc:5a:bd:7d:55:d1:ed:bb:dc:a6:b5:46:79:6c: 21:db:e7:84:89:a4:bc:c8:22:b5:ec:38:9a:d3:a3:42:e2:e4: b2:ee:77:5e:ec:77:7b:c6:4e:b1:08:92:ea:62:58:57:02:e5: ad:cd:91:30:48:70:94:67:d9:60:09:b8:e3:bc:89:b0:39:7a: a7:27:11:fc:7e:67:71:fd:f4:8e:35:55:d3:30:f4:c1:04:f0: d8:99:f8:cc:74:20:29:f7:a2:66:97:b5:25:8a:7d:26:c6:cf: df:81:6f:5a:1d:1d:76:57:7b:cc:cb:fb:cb:49:7d:79:16:a7: 61:67:f8:35:68:91:e9:83:4d:b2:f4:5c:fc:95:54:54:68:78: 7f:f6:b9:d1:be:8e:d0:de:93:8a:cd:b7:d6:c9:9f:6f:55:c5: 26:cd:e7:1f:b0:50:5d:41:11:00:b7:ee:7c:a4:eb:c2:a9:fd: 07:25:72:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPIZQ/RWrzRNkVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YzQ0YjRlNTEtOTUzZS00ZjY0LWEzZTAtOWEwNDM5ZjgyYWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP55cYpaqiQz3h04tO8o5XJ5NwTmbbKC/53B amebUG7W9TiaMZ4VULaFZyV/wfdAqK+hB4jzEE2syUT1sRAgCb28MnipCWqY98bw J6t1GeTh+lsmr6eKRN/Bg4T361/K/ya5V11sv5QegULPqzYu4noF6EOHmydG0Rr2 SkggeOl+W9XnLsgN9NMiXv21XicQZVj2xypVDS7xB1LQOGSVPFEw0H8NkWm/4ZLs oFP2XMlXDVbvdyoZkZ2OfSNxHYIYohwcAPyieRYRteZriZlpHvU+tnp0r4J24n1B yWny5hGdC+GMYdMSpUZ3RXcanQcdWrV42HbKusX7p8ZgxM8RrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlaeUmFjTTKb4Q4PFh6wdYYOxIbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjBkYWE4ZTQtM2ZiOC0z ZWZhLWI5NTktOGFmMmNhN2E0NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsoZHCZwR/Glpbvw3/R2Xu59ilVSuc7/Ohs1nwJJtXVKI7mxA0jOWkK Sf82vPeDZjKhc8ueofXXbyRL40qtnSSG8rEbO/gG1zPR0Z38Wr19VdHtu9ymtUZ5 bCHb54SJpLzIIrXsOJrTo0Li5LLud17sd3vGTrEIkupiWFcC5a3NkTBIcJRn2WAJ uOO8ibA5eqcnEfx+Z3H99I41VdMw9MEE8NiZ+Mx0ICn3omaXtSWKfSbGz9+Bb1od HXZXe8zL+8tJfXkWp2Fn+DVokemDTbL0XPyVVFRoeH/2udG+jtDek4rNt9bJn29V xSbN5x+wUF1BEQC37nyk68Kp/Qclckw= -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:39 2026 by rpki-client