$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a039632-c784-3e34-b373-492762ccb06a.roa File: 2a039632-c784-3e34-b373-492762ccb06a.roa (raw, json) Hash identifier: XDOkQkVNsDNSqJdBdZ1+e0LFrVGoN9C5HigCbV1RwDQ= Subject key identifier: AF:56:17:00:EE:E2:37:2E:23:D4:62:CB:9C:EF:FD:EA:12:BF:28:D6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E0A700853AB9AD2AFF034ACC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a039632-c784-3e34-b373-492762ccb06a.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 13335 IP address blocks: 150.48.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:08:53:ab:9a:d2:af:f0:34:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=8f6bc887-45f0-4812-8358-c0428cb0eba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dd:71:77:8a:2b:6c:86:fc:98:68:68:6a:fa: 75:cc:86:b7:99:c8:6e:44:43:d3:fa:9d:ed:b7:5f: fa:54:a0:85:df:53:fb:e1:38:5c:84:79:1c:bc:40: fc:61:71:2c:3d:ec:fd:0e:97:98:7f:da:ec:a4:fe: 77:84:98:52:73:4b:c1:71:be:ea:1c:fd:14:3a:c0: b2:b9:b3:a8:40:70:87:ea:03:05:7b:6f:d2:5d:0f: 16:49:74:39:5f:be:18:72:d5:b9:c6:b6:b2:be:81: a3:20:49:e0:98:66:a8:10:9d:2f:2d:41:8e:69:5e: 1d:f9:74:f0:b1:ad:3e:c5:8f:2e:5b:a1:61:9f:95: 1b:ed:1c:84:90:70:45:65:26:90:b0:69:50:fa:17: 51:de:7d:db:a2:6c:d9:91:ed:00:95:a5:4a:b1:b0: 12:69:83:9a:95:c5:91:d6:f8:c6:37:f2:d5:09:79: 4c:4b:44:b7:3c:09:79:96:19:dd:bc:f3:f8:1e:ca: 90:4a:50:05:72:f0:de:53:9b:b3:56:0d:b7:3b:8b: e7:3d:89:95:5b:04:06:d6:db:45:ad:0d:52:30:a3: b2:a8:a9:a5:dc:dc:4b:2e:d7:f4:3e:85:bf:92:9e: 1e:4c:81:93:3b:33:07:fa:57:33:83:e0:30:c7:d6: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:56:17:00:EE:E2:37:2E:23:D4:62:CB:9C:EF:FD:EA:12:BF:28:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a039632-c784-3e34-b373-492762ccb06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:05:41:be:97:fa:e8:f0:4b:dd:54:bd:04:55:0c:4b:a9:dc: c5:64:0b:0a:1e:48:02:10:5c:3c:b1:13:fe:30:5c:3b:75:63: e3:32:38:e4:6b:1e:7b:63:30:23:5c:de:76:fb:0c:c2:e5:3b: c3:5d:e8:55:8f:1b:21:b3:70:c8:04:33:93:96:6d:63:ef:f6: 90:29:81:12:9b:c6:50:ab:0f:f1:11:ed:e1:7f:3d:7d:dc:25: 57:f6:8e:b8:0c:95:35:6c:9d:d5:7a:fd:0e:3e:98:1e:44:5c: 02:98:9b:49:45:22:e7:22:b8:5b:5f:6f:43:c3:e7:05:31:b4: 01:4c:21:b3:37:d6:e9:d4:47:14:76:93:ff:24:a8:d3:47:c2: 78:3a:a1:d5:d6:5d:f8:bf:d6:a6:a1:de:46:65:1e:9f:4c:ac: 31:2d:53:60:06:a8:3d:b7:29:85:f7:49:c1:a3:f4:f4:93:e9: 8b:d9:29:09:bd:12:13:a6:ef:1f:1d:47:d3:fc:f4:45:c5:7a: 7e:54:99:51:50:1e:af:c7:99:c1:5f:23:70:ee:12:79:d1:d7: 8f:a1:e4:5f:08:92:88:07:d2:d3:76:b6:0f:6e:4a:76:cd:85: 59:fa:82:e2:70:4a:ce:ea:c5:6a:ab:b2:90:c5:10:a0:15:3e: ca:32:84:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAhTq5rSr/A0rMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk OGY2YmM4ODctNDVmMC00ODEyLTgzNTgtYzA0MjhjYjBlYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid1xd4orbIb8mGhoavp1zIa3mchuREPT+p3t t1/6VKCF31P74ThchHkcvED8YXEsPez9DpeYf9rspP53hJhSc0vBcb7qHP0UOsCy ubOoQHCH6gMFe2/SXQ8WSXQ5X74YctW5xrayvoGjIEngmGaoEJ0vLUGOaV4d+XTw sa0+xY8uW6Fhn5Ub7RyEkHBFZSaQsGlQ+hdR3n3bomzZke0AlaVKsbASaYOalcWR 1vjGN/LVCXlMS0S3PAl5lhndvPP4HsqQSlAFcvDeU5uzVg23O4vnPYmVWwQG1ttF rQ1SMKOyqKml3NxLLtf0PoW/kp4eTIGTOzMH+lczg+Awx9bnXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9WFwDu4jcuI9Riy5zv/eoSvyjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmEwMzk2MzItYzc4NC0z ZTM0LWIzNzMtNDkyNzYyY2NiMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEFQb6X+ujwS91UvQRVDEup3MVkCwoeSAIQXDyxE/4wXDt1Y+MyOORr HntjMCNc3nb7DMLlO8Nd6FWPGyGzcMgEM5OWbWPv9pApgRKbxlCrD/ER7eF/PX3c JVf2jrgMlTVsndV6/Q4+mB5EXAKYm0lFIuciuFtfb0PD5wUxtAFMIbM31unURxR2 k/8kqNNHwng6odXWXfi/1qah3kZlHp9MrDEtU2AGqD23KYX3ScGj9PST6YvZKQm9 EhOm7x8dR9P89EXFen5UmVFQHq/HmcFfI3DuEnnR14+h5F8IkogH0tN2tg9uSnbN hVn6guJwSs7qxWqrspDFEKAVPsoyhL4= -----END CERTIFICATE-----Generated at Tue Jun 2 21:44:04 2026 by rpki-client