$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb9a081f-0797-3598-b411-8b95ee3779c9.roa File: fb9a081f-0797-3598-b411-8b95ee3779c9.roa (raw, json) Hash identifier: /Q02KLD23d6a8BrY6OHa3JESkdQfctq8f3jdPWoo6zA= Subject key identifier: A7:BA:5C:59:10:3C:42:BF:C9:8F:DA:61:DB:0F:5B:32:A8:6F:F4:2A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D2A74F0327F4061E135E15080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb9a081f-0797-3598-b411-8b95ee3779c9.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 150.48.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f0:32:7f:40:61:e1:35:e1:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=ca65bd5a-f16a-44c9-9273-0c84f4dc87a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:7f:d9:29:67:8a:f1:db:7b:4f:64:b0:2c: f4:3d:a9:a3:dd:ba:23:e0:37:0e:81:70:5f:df:44: 69:a9:6c:e1:4f:f5:e5:a2:71:77:40:0c:b8:0a:f9: ac:28:9b:ce:70:a7:50:54:5f:8a:8e:f4:b4:8d:d7: 78:88:3d:a6:8d:94:97:43:99:ff:ac:a5:13:90:ac: a7:36:49:5d:77:fb:2b:f1:72:79:43:4b:ee:19:12: 46:e5:ea:41:aa:f7:b0:44:5f:87:31:88:cc:7a:2b: 06:d2:48:bd:ec:92:5c:b6:0a:92:0b:26:81:71:6f: 31:5d:5c:3b:4c:fa:12:d7:7b:54:2a:bb:42:9c:6f: 43:4d:df:c7:e4:31:89:10:5d:f6:80:18:9a:3f:e5: 17:92:85:a8:2e:e0:e9:a7:9e:0a:f4:99:43:3a:e2: ed:07:9b:e1:80:dd:eb:7c:f9:38:86:87:57:2d:99: b9:b4:dd:af:79:52:7a:64:0f:48:90:5a:6e:9f:4c: e2:74:1a:c3:dd:84:14:27:e2:19:7f:47:18:d7:77: 8d:d5:81:54:29:49:de:d8:64:12:be:af:1b:6a:bf: de:f0:fe:29:4f:80:5f:f9:9c:ec:5a:c0:23:63:d9: f1:db:c9:2e:26:5c:8f:d8:dc:e1:36:03:23:bf:c7: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BA:5C:59:10:3C:42:BF:C9:8F:DA:61:DB:0F:5B:32:A8:6F:F4:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fb9a081f-0797-3598-b411-8b95ee3779c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:91:00:5f:15:e9:92:15:f1:e5:09:f2:a8:a1:10:8c:88:3c: ba:51:0c:1d:c1:02:8e:64:57:57:ba:73:2d:a3:5b:d8:3c:27: 65:7a:10:7f:80:7b:5b:a9:06:2f:83:2d:69:21:21:f5:b1:d2: 9c:41:72:55:26:e6:1e:30:56:ec:96:19:fc:e6:44:11:76:f9: 01:af:4b:1b:b3:aa:3f:85:c8:99:51:65:0e:a5:a4:09:c4:86: 54:cd:11:5d:c1:9e:eb:c7:61:f1:29:18:7d:8a:53:9f:2c:20: 3f:37:f5:9d:fb:76:49:88:0b:6f:8c:81:1e:3c:da:da:a9:f2: 30:97:1d:26:71:21:15:88:d9:ed:2f:ac:d7:2c:08:7e:76:8a: 3f:4e:67:8b:54:5b:5f:3a:a0:e8:52:a8:05:fb:ac:57:41:45: 87:99:03:8e:ab:ff:a1:61:f0:08:f7:07:82:8f:16:b9:68:9a: 8c:35:dd:af:07:f0:de:b9:bd:c4:b0:b9:1e:4c:5d:64:e2:64: 59:da:20:d3:45:11:da:f3:f8:e1:b1:97:bb:bd:05:22:f5:0d: ee:00:f4:88:19:38:e9:53:65:01:81:e4:70:08:9d:29:4a:39: 27:41:1b:ad:e9:7d:e5:f5:40:8f:db:6d:b3:7b:9a:a9:30:32: 49:5e:ec:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPAyf0Bh4TXhUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk Y2E2NWJkNWEtZjE2YS00NGM5LTkyNzMtMGM4NGY0ZGM4N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMJ/2SlnivHbe09ksCz0Pamj3boj4DcOgXBf 30RpqWzhT/XlonF3QAy4CvmsKJvOcKdQVF+KjvS0jdd4iD2mjZSXQ5n/rKUTkKyn Nkldd/sr8XJ5Q0vuGRJG5epBqvewRF+HMYjMeisG0ki97JJctgqSCyaBcW8xXVw7 TPoS13tUKrtCnG9DTd/H5DGJEF32gBiaP+UXkoWoLuDpp54K9JlDOuLtB5vhgN3r fPk4hodXLZm5tN2veVJ6ZA9IkFpun0zidBrD3YQUJ+IZf0cY13eN1YFUKUne2GQS vq8bar/e8P4pT4Bf+ZzsWsAjY9nx28kuJlyP2NzhNgMjv8eJcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKe6XFkQPEK/yY/aYdsPWzKob/QqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmI5YTA4MWYtMDc5Ny0z NTk4LWI0MTEtOGI5NWVlMzc3OWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEORAF8V6ZIV8eUJ8qihEIyIPLpRDB3BAo5kV1e6cy2jW9g8J2V6EH+A e1upBi+DLWkhIfWx0pxBclUm5h4wVuyWGfzmRBF2+QGvSxuzqj+FyJlRZQ6lpAnE hlTNEV3BnuvHYfEpGH2KU58sID839Z37dkmIC2+MgR482tqp8jCXHSZxIRWI2e0v rNcsCH52ij9OZ4tUW186oOhSqAX7rFdBRYeZA46r/6Fh8Aj3B4KPFrlomow13a8H 8N65vcSwuR5MXWTiZFnaINNFEdrz+OGxl7u9BSL1De4A9IgZOOlTZQGB5HAInSlK OSdBG63pfeX1QI/bbbN7mqkwMkle7P4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:38:10 2026 by rpki-client