$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a29e3e0-690c-3577-801a-2ef87a2601f9.roa File: 2a29e3e0-690c-3577-801a-2ef87a2601f9.roa (raw, json) Hash identifier: rCxgxY3VX1YnsRLdrwsXdAV2/+Yis3xQa+qIYGQqog8= Subject key identifier: 4D:9A:71:A6:36:87:25:DD:90:5C:BD:4A:22:E6:7B:B0:4F:65:B4:35 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EAD1C5C20B19EED7CFA148780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a29e3e0-690c-3577-801a-2ef87a2601f9.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 13335 IP address blocks: 150.48.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:5c:20:b1:9e:ed:7c:fa:14:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=e4f97167-c8df-423a-8942-649df3b12f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:20:6f:ab:ec:97:3d:88:55:e7:20:47:4e: 5c:52:dd:5c:9b:d2:a4:81:76:d4:e3:5a:2b:ef:14: 26:8c:79:ad:95:ad:71:52:08:31:c8:ec:ad:ad:93: b3:58:a7:ba:52:10:63:cc:0f:61:eb:5d:c4:3f:71: a4:8f:21:5a:70:fb:8a:21:19:7c:cb:66:3b:f6:db: 16:0f:92:49:38:dd:f4:78:2d:d6:45:a4:ed:f4:e9: cf:9a:af:97:d4:87:f2:82:17:1c:bd:9b:ca:71:92: 4a:ad:9f:8c:35:98:12:b6:37:37:fc:f3:b2:8f:f4: 5a:a4:72:c9:e3:68:f0:c4:1e:a8:54:d6:b0:63:03: 27:38:27:c4:e0:ab:69:7f:30:91:d9:03:ff:e5:36: 64:e4:65:2e:48:f9:bd:ac:fa:15:62:20:6d:c6:ff: 60:8f:31:14:1b:89:dc:b1:e7:65:79:9b:64:bf:0f: 42:9c:3e:fa:f5:e0:c4:06:83:3e:73:2e:ce:c8:ce: 1e:ff:10:34:23:7e:af:1b:9f:c1:a9:a3:6b:a8:53: db:ea:81:2c:63:66:65:7f:fd:23:f3:50:9e:1e:98: ef:58:3f:48:d4:1e:ea:9d:04:6e:e1:49:3b:99:01: 13:85:1c:f1:a7:55:4f:02:13:45:ad:cb:f3:42:fc: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9A:71:A6:36:87:25:DD:90:5C:BD:4A:22:E6:7B:B0:4F:65:B4:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a29e3e0-690c-3577-801a-2ef87a2601f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0e:73:78:89:61:0e:7d:e8:05:35:95:e2:28:ea:c0:53:d5: f1:f9:45:37:ee:b7:60:9b:7a:4f:1e:d2:66:ce:55:01:dd:9a: 27:e6:94:37:0a:4c:af:4e:1c:34:9c:30:2b:9a:2f:85:52:a4: fd:db:ae:8e:36:51:e6:cd:e4:bd:95:ba:ef:9b:ac:b5:44:11: 84:7a:9f:9d:27:ce:11:ad:45:69:87:a2:0f:46:9c:c9:53:da: 4c:bc:08:6c:2b:b2:2b:a1:e5:27:b4:c2:4f:9c:ac:8e:5f:bf: 5c:7d:1c:6c:fd:3f:29:dc:cc:b9:f8:61:33:a0:fb:ea:81:a7: 15:3c:f0:bb:fe:66:94:1e:82:b8:4f:21:74:13:b0:d7:3b:c4: 57:9b:5e:db:da:aa:4a:f5:8f:2d:5b:16:66:06:7a:2f:2a:5a: 29:07:9a:b3:cb:47:a4:95:d3:4d:6e:48:e4:95:79:41:f2:6a: 10:ee:dd:9f:21:1f:6f:d2:6f:30:23:c5:1e:78:64:7a:13:4e: 9e:a5:87:e8:0d:ef:39:52:d1:df:d2:72:7e:b8:9d:e7:a6:b6: 41:0e:14:da:43:f5:04:4f:f9:88:81:ca:40:75:a2:c4:16:cc: 2a:89:de:4b:ed:78:ce:d9:d8:22:ce:08:9f:7c:e5:d0:1e:7d: 13:b8:41:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFwgsZ7tfPoUh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk ZTRmOTcxNjctYzhkZi00MjNhLTg5NDItNjQ5ZGYzYjEyZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpUgb6vslz2IVecgR05cUt1cm9KkgXbU41or 7xQmjHmtla1xUggxyOytrZOzWKe6UhBjzA9h613EP3GkjyFacPuKIRl8y2Y79tsW D5JJON30eC3WRaTt9OnPmq+X1IfyghccvZvKcZJKrZ+MNZgStjc3/POyj/RapHLJ 42jwxB6oVNawYwMnOCfE4KtpfzCR2QP/5TZk5GUuSPm9rPoVYiBtxv9gjzEUG4nc sedleZtkvw9CnD769eDEBoM+cy7OyM4e/xA0I36vG5/BqaNrqFPb6oEsY2Zlf/0j 81CeHpjvWD9I1B7qnQRu4Uk7mQEThRzxp1VPAhNFrcvzQvxcWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2acaY2hyXdkFy9SiLme7BPZbQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmEyOWUzZTAtNjkwYy0z NTc3LTgwMWEtMmVmODdhMjYwMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCljCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0Oc3iJYQ596AU1leIo6sBT1fH5RTfut2Cbek8e0mbOVQHdmifmlDcK TK9OHDScMCuaL4VSpP3bro42UebN5L2Vuu+brLVEEYR6n50nzhGtRWmHog9GnMlT 2ky8CGwrsiuh5Se0wk+crI5fv1x9HGz9PynczLn4YTOg++qBpxU88Lv+ZpQegrhP IXQTsNc7xFebXtvaqkr1jy1bFmYGei8qWikHmrPLR6SV001uSOSVeUHyahDu3Z8h H2/SbzAjxR54ZHoTTp6lh+gN7zlS0d/Scn64neemtkEOFNpD9QRP+YiBykB1osQW zCqJ3kvteM7Z2CLOCJ985dAefRO4QeM= -----END CERTIFICATE-----Generated at Tue Sep 1 02:09:45 2026 by rpki-client