$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386e41f7-16ef-3079-81c3-a8fad0c934d2.roa File: 386e41f7-16ef-3079-81c3-a8fad0c934d2.roa (raw, json) Hash identifier: ztkzqRFWhPHBB8aO9tvFnyp/2l4YxOaws0/p+1IVkpg= Subject key identifier: 59:08:DA:B1:AB:3B:40:2C:83:9F:EF:C0:C7:9B:50:2A:17:19:AB:81 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EAD1C5F3D0A361E742E57D200 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386e41f7-16ef-3079-81c3-a8fad0c934d2.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 13335 IP address blocks: 150.48.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:5f:3d:0a:36:1e:74:2e:57:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=97207173-c05c-49c1-9993-e37e84588987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:06:52:9a:67:57:d1:64:63:e0:94:25:1d: db:6b:7d:ba:7a:7d:b8:5a:69:5c:4a:ca:67:a8:19: 38:8b:50:5a:91:82:c3:a1:74:6e:a4:a5:43:ad:f6: 7c:0a:92:8d:7c:d2:2c:41:14:a5:59:94:f9:8c:a1: bd:13:48:67:6d:f4:73:e8:ad:bf:07:9d:c0:d0:30: a2:8a:26:83:69:78:a5:5d:7c:7d:c7:67:69:54:6b: 81:d3:13:89:97:ce:f8:24:82:4b:80:5f:1a:10:c5: bf:b8:a6:ee:f6:a8:78:68:f7:9f:75:39:d0:79:34: 2d:36:fc:ef:14:44:8b:36:70:42:2d:1d:ab:4d:31: 9f:49:22:ad:0f:6f:e0:97:75:b9:3e:5d:bc:be:95: 3b:6b:cc:85:23:6c:8a:dd:d0:c9:fe:74:69:5a:ad: dd:e0:a2:15:f4:e2:ac:42:60:d2:b2:fe:46:f7:0e: 77:90:41:7a:64:40:30:26:65:70:9b:9f:84:bc:a9: bd:3e:dd:67:5d:df:c9:18:2d:b6:d0:90:03:f8:8c: 1d:b9:df:f4:46:79:97:52:be:f8:47:b7:2f:f4:3a: 64:90:b7:83:da:40:cf:7b:11:23:52:b4:56:f4:61: 49:33:c4:f0:3a:f1:9d:64:aa:b0:95:d4:0f:61:42: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:08:DA:B1:AB:3B:40:2C:83:9F:EF:C0:C7:9B:50:2A:17:19:AB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/386e41f7-16ef-3079-81c3-a8fad0c934d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:2b:18:e9:5e:c9:a9:2a:1e:41:fe:ca:7a:b1:a6:f3:b7:9b: b5:6c:84:e8:ea:a7:01:e2:8c:f3:48:e4:98:be:49:e2:30:d0: eb:50:c5:e5:62:2a:3a:9f:95:51:25:5f:c9:2b:ed:af:cb:eb: 44:64:39:a8:59:c8:28:f0:b0:91:98:65:95:e6:57:07:75:ca: 7d:e6:8a:e1:40:5c:30:d7:48:b2:14:05:21:c7:52:64:05:0a: 72:bf:5f:59:eb:61:93:31:72:75:4c:82:43:1b:e0:bb:1b:01: 9f:24:5a:7f:4e:62:5a:f1:2d:21:8a:bb:77:b3:8a:5b:d8:df: a8:21:3f:9c:2c:d1:0f:fc:a0:12:54:92:8c:7e:6c:3a:6c:ee: c1:db:4c:fa:da:12:f1:0f:9c:2a:04:6d:1e:a7:3f:8a:af:07: 33:99:40:c5:15:8b:a6:8d:3a:3b:d3:37:0d:fb:76:99:7f:7c: e5:b3:5d:64:fc:39:fc:a1:e3:47:59:4b:67:35:76:e1:79:9b: 09:48:0e:8a:de:ce:2c:b5:ab:9b:33:1d:3c:8c:2d:e0:46:e8: 43:a1:c0:66:a5:97:e4:31:75:d6:e7:cd:7b:bd:eb:b5:ec:15: 33:b9:17:1a:a9:44:5c:e9:8c:94:6f:e7:e7:b0:cb:13:d1:42: 09:57:9a:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHF89CjYedC5X0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk OTcyMDcxNzMtYzA1Yy00OWMxLTk5OTMtZTM3ZTg0NTg4OTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGAGUppnV9FkY+CUJR3ba326en24WmlcSspn qBk4i1BakYLDoXRupKVDrfZ8CpKNfNIsQRSlWZT5jKG9E0hnbfRz6K2/B53A0DCi iiaDaXilXXx9x2dpVGuB0xOJl874JIJLgF8aEMW/uKbu9qh4aPefdTnQeTQtNvzv FESLNnBCLR2rTTGfSSKtD2/gl3W5Pl28vpU7a8yFI2yK3dDJ/nRpWq3d4KIV9OKs QmDSsv5G9w53kEF6ZEAwJmVwm5+EvKm9Pt1nXd/JGC220JAD+Iwdud/0RnmXUr74 R7cv9DpkkLeD2kDPexEjUrRW9GFJM8TwOvGdZKqwldQPYUJBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkI2rGrO0Asg5/vwMebUCoXGauBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzg2ZTQxZjctMTZlZi0z MDc5LTgxYzMtYThmYWQwYzkzNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUrGOleyakqHkH+ynqxpvO3m7VshOjqpwHijPNI5Ji+SeIw0OtQxeVi KjqflVElX8kr7a/L60RkOahZyCjwsJGYZZXmVwd1yn3miuFAXDDXSLIUBSHHUmQF CnK/X1nrYZMxcnVMgkMb4LsbAZ8kWn9OYlrxLSGKu3ezilvY36ghP5ws0Q/8oBJU kox+bDps7sHbTPraEvEPnCoEbR6nP4qvBzOZQMUVi6aNOjvTNw37dpl/fOWzXWT8 Ofyh40dZS2c1duF5mwlIDoreziy1q5szHTyMLeBG6EOhwGall+QxddbnzXu967Xs FTO5FxqpRFzpjJRv5+ewyxPRQglXmhY= -----END CERTIFICATE-----Generated at Tue Sep 1 03:15:00 2026 by rpki-client