$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8668eb5-a38d-3049-97d9-607d35b84888.roa File: f8668eb5-a38d-3049-97d9-607d35b84888.roa (raw, json) Hash identifier: kGEMvl7oKxf/fEhZ6QpreMwvhwybZJQ/RMEEN70y5vE= Subject key identifier: 49:E1:1B:36:89:C6:19:B5:9F:CB:89:42:B4:94:75:0B:E0:43:0C:8A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F2E0C2A8836D85CC5620 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8668eb5-a38d-3049-97d9-607d35b84888.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f2:e0:c2:a8:83:6d:85:cc:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=c3a23be9-2e6c-48ed-973d-da1f0977dba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:4b:15:d9:2a:1d:17:32:f9:e6:73:a5:9d: ff:5d:d4:f1:67:e2:7e:4a:b1:0d:40:dd:56:27:54: 2e:dd:33:61:97:a8:b4:5b:ba:bd:e9:33:f5:07:28: 73:5c:51:65:bd:c9:4a:73:79:d7:3a:f6:95:10:a5: 64:b5:a4:d9:a6:84:1e:fc:89:7e:ce:c5:64:be:d1: 96:32:11:7b:92:d1:fc:c7:d8:6e:fb:7a:d0:f1:5a: ae:2f:e7:cb:d3:bd:09:87:66:18:8f:ef:03:0e:d1: 7a:7c:28:d8:ae:d3:74:af:b7:5d:d2:8d:94:18:d0: cd:b9:65:f0:7b:82:19:87:aa:89:6b:e6:d3:fb:94: ae:71:63:41:31:ff:ab:cf:7f:10:14:1e:f3:8e:a0: 32:6c:62:46:cf:0b:7f:09:9b:24:60:0a:0c:7e:c2: 44:95:99:ea:d1:59:16:9f:88:79:bf:28:13:ae:4f: ed:6b:f8:f3:32:8b:29:cb:97:5c:7e:18:5c:fc:da: bf:7d:14:53:07:32:d5:3d:08:e8:0d:d9:44:d8:03: 3c:70:6d:e5:58:00:49:af:e7:34:df:04:cc:d2:60: 91:55:a8:39:24:c8:7c:24:c6:8b:f5:fa:85:5e:e3: 2e:1d:5d:f5:5c:b7:e1:ff:20:c2:6f:6f:1f:0b:ee: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:1B:36:89:C6:19:B5:9F:CB:89:42:B4:94:75:0B:E0:43:0C:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f8668eb5-a38d-3049-97d9-607d35b84888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3a:9d:e4:3d:54:39:84:40:82:18:10:ca:13:5f:98:c7:05: cb:4f:d1:b8:f8:f2:54:8c:d3:e8:d5:d2:0a:3f:c4:41:e0:07: fc:4e:f1:7f:cc:af:94:49:b8:4b:d2:cf:06:87:d4:c1:c6:81: ae:d6:38:25:a6:02:a9:48:93:ee:67:aa:bd:ed:29:fc:15:dc: 63:63:2a:ce:3c:ba:27:ac:9e:ce:e2:57:3b:df:f7:b9:63:81: a0:0c:41:5d:c3:f7:42:ad:90:0c:d3:cb:6f:eb:eb:0a:bd:00: 54:f4:b0:7a:9b:a9:37:1c:8b:f0:52:db:5d:9b:64:26:92:34: 23:eb:40:97:30:ec:09:fb:b8:66:05:a4:0f:e9:dc:0d:88:e7: 9f:21:44:0d:9a:1a:c1:37:44:9d:ee:4c:9a:9c:a4:9f:93:fd: 31:75:16:e2:79:68:8f:68:b4:29:d4:dc:73:06:c3:15:a6:e9: b7:fe:da:c3:a6:55:80:2d:2f:f9:b9:cd:78:ad:0a:3e:74:10: c7:1c:3b:b8:03:55:6a:38:34:a5:af:b6:e4:41:93:6f:33:ed: bd:df:e9:87:88:92:28:57:4a:d3:53:23:d7:66:c7:17:ac:58: 03:59:b4:2c:ff:52:d0:cf:5e:93:1c:b6:b9:74:4d:ce:1a:31: f2:ff:e8:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPLgwqiDbYXMViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YzNhMjNiZTktMmU2Yy00OGVkLTk3M2QtZGExZjA5NzdkYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJtLFdkqHRcy+eZzpZ3/XdTxZ+J+SrENQN1W J1Qu3TNhl6i0W7q96TP1ByhzXFFlvclKc3nXOvaVEKVktaTZpoQe/Il+zsVkvtGW MhF7ktH8x9hu+3rQ8VquL+fL070Jh2YYj+8DDtF6fCjYrtN0r7dd0o2UGNDNuWXw e4IZh6qJa+bT+5SucWNBMf+rz38QFB7zjqAybGJGzwt/CZskYAoMfsJElZnq0VkW n4h5vygTrk/ta/jzMospy5dcfhhc/Nq/fRRTBzLVPQjoDdlE2AM8cG3lWABJr+c0 3wTM0mCRVag5JMh8JMaL9fqFXuMuHV31XLfh/yDCb28fC+5fHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnhGzaJxhm1n8uJQrSUdQvgQwyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjg2NjhlYjUtYTM4ZC0z MDQ5LTk3ZDktNjA3ZDM1Yjg0ODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljC3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA6neQ9VDmEQIIYEMoTX5jHBctP0bj48lSM0+jV0go/xEHgB/xO8X/M r5RJuEvSzwaH1MHGga7WOCWmAqlIk+5nqr3tKfwV3GNjKs48uiesns7iVzvf97lj gaAMQV3D90KtkAzTy2/r6wq9AFT0sHqbqTcci/BS212bZCaSNCPrQJcw7An7uGYF pA/p3A2I558hRA2aGsE3RJ3uTJqcpJ+T/TF1FuJ5aI9otCnU3HMGwxWm6bf+2sOm VYAtL/m5zXitCj50EMccO7gDVWo4NKWvtuRBk28z7b3f6YeIkihXStNTI9dmxxes WANZtCz/UtDPXpMctrl0Tc4aMfL/6No= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:28 2026 by rpki-client