$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa File: 3f343bd9-680f-3702-b991-0e48f54f6f74.roa (raw, json) Hash identifier: h4/dOSpC868fW5oiKXeLkBFyHlE6Ks8GZ7lsVSWIeF4= Subject key identifier: 5C:CF:7E:27:AF:22:71:CF:54:5C:74:72:00:20:CF:23:E5:A2:E5:38 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4F0820AFA10B812551FB8500 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 150.48.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:20:af:a1:0b:81:25:51:fb:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=0468bf77-5fff-4fec-990e-51308ac6d16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:f0:91:89:44:ae:38:42:ed:69:a2:67:de: be:9a:e4:f7:99:08:1a:e6:76:cd:95:06:5d:a3:79: 70:29:79:c6:99:2c:c2:98:b0:3b:f0:f3:ca:90:0d: 03:8f:b2:63:e9:ab:c9:8c:97:1b:f3:0a:b8:bf:40: 22:5c:67:20:d6:ab:9e:2d:94:f7:18:19:38:b5:38: f7:e3:df:c4:35:42:21:7a:22:97:f4:33:21:ee:3a: 6b:f4:6b:a8:43:0a:71:76:f7:fb:a5:5f:64:69:3a: 8f:ca:d9:47:fb:1a:27:62:d0:67:ea:18:0c:d4:a8: 8d:2d:ba:00:a2:94:d7:17:50:fe:fd:2a:73:d4:29: 9a:7f:57:71:5c:5a:27:c9:90:12:65:20:3c:08:4e: 0a:a1:88:72:58:5f:fa:30:34:be:12:f1:d8:02:b8: 08:2b:e7:c2:5e:f8:1f:1e:a9:11:4d:79:b2:d2:3e: 38:9f:78:e1:68:96:16:57:92:70:bc:e1:86:5c:be: 9a:37:3b:d3:aa:1c:75:f1:5f:d5:d5:27:eb:83:ba: 65:be:52:1f:7b:37:ab:eb:3e:cb:25:b2:cc:a6:91: b0:05:85:fe:6b:d9:cf:fd:53:29:d6:86:9c:25:ac: 38:35:b4:90:28:24:41:76:34:03:0a:69:39:37:f2: f1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CF:7E:27:AF:22:71:CF:54:5C:74:72:00:20:CF:23:E5:A2:E5:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3f343bd9-680f-3702-b991-0e48f54f6f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2c:b5:fb:f5:40:e5:55:37:04:1f:e9:5b:29:52:9c:3c:dc: e7:08:0c:85:fd:80:be:f6:c4:ff:c6:ff:9d:42:8c:7a:4a:9e: ff:98:10:09:51:bf:0d:b5:a6:b1:83:a2:e6:6a:e6:c5:74:8a: c1:80:b6:e2:68:75:74:26:9d:60:f4:eb:ac:53:e1:22:bd:00: 58:ad:44:5b:b4:cf:b1:0f:ab:ed:48:21:a6:b4:31:43:38:20: 5e:5a:df:35:b0:32:b7:0e:14:1e:eb:04:ca:6b:a9:d6:c2:d9: 0a:e7:89:be:58:e3:13:34:be:17:a0:62:5c:60:aa:86:ab:70: 9c:a0:84:f9:1d:84:86:0c:1b:e5:40:e0:93:5d:f8:ee:d4:20: 12:17:4f:8c:0a:ac:24:35:60:04:b8:b3:6c:91:cb:15:8d:72: dd:a7:bb:49:1d:87:38:66:e7:17:2e:8c:fa:61:8a:88:41:4d: a3:89:3b:6c:46:94:ee:e4:68:7e:76:90:6e:19:cc:39:4b:3d: 8d:fd:48:19:d9:c4:d8:2f:95:16:a0:d1:1b:94:9b:f5:08:09: 2d:08:b5:7c:c0:8f:64:10:66:c5:f3:37:e8:8a:4f:82:78:74: 96:39:f9:24:6f:37:39:3a:06:9a:e6:68:fa:3b:be:00:dd:c8: f8:03:47:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCCvoQuBJVH7hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MDQ2OGJmNzctNWZmZi00ZmVjLTk5MGUtNTEzMDhhYzZkMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui7wkYlErjhC7WmiZ96+muT3mQga5nbNlQZd o3lwKXnGmSzCmLA78PPKkA0Dj7Jj6avJjJcb8wq4v0AiXGcg1queLZT3GBk4tTj3 49/ENUIheiKX9DMh7jpr9GuoQwpxdvf7pV9kaTqPytlH+xonYtBn6hgM1KiNLboA opTXF1D+/Spz1Cmaf1dxXFonyZASZSA8CE4KoYhyWF/6MDS+EvHYArgIK+fCXvgf HqkRTXmy0j44n3jhaJYWV5JwvOGGXL6aNzvTqhx18V/V1Sfrg7plvlIfezer6z7L JbLMppGwBYX+a9nP/VMp1oacJaw4NbSQKCRBdjQDCmk5N/LxIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzPfievInHPVFx0cgAgzyPlouU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2YzNDNiZDktNjgwZi0z NzAyLWI5OTEtMGU0OGY1NGY2Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgstfv1QOVVNwQf6VspUpw83OcIDIX9gL72xP/G/51CjHpKnv+YEAlR vw21prGDouZq5sV0isGAtuJodXQmnWD066xT4SK9AFitRFu0z7EPq+1IIaa0MUM4 IF5a3zWwMrcOFB7rBMprqdbC2Qrnib5Y4xM0vhegYlxgqoarcJyghPkdhIYMG+VA 4JNd+O7UIBIXT4wKrCQ1YAS4s2yRyxWNct2nu0kdhzhm5xcujPphiohBTaOJO2xG lO7kaH52kG4ZzDlLPY39SBnZxNgvlRag0RuUm/UICS0ItXzAj2QQZsXzN+iKT4J4 dJY5+SRvNzk6BprmaPo7vgDdyPgDR3s= -----END CERTIFICATE-----Generated at Fri Oct 23 07:31:06 2026 by rpki-client