$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/42419c3d-700b-345f-b7c1-6360d87259bd.roa File: 42419c3d-700b-345f-b7c1-6360d87259bd.roa (raw, json) Hash identifier: 7YLPuDdlnq0QKdWhMSZaKJx1jr3r+VA6NA69Z9IjeOE= Subject key identifier: 3C:71:04:7C:45:0D:8F:F6:C3:8E:D7:82:66:D1:15:EF:6F:1E:09:1D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E0A7003F4CC98024B183F9880 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/42419c3d-700b-345f-b7c1-6360d87259bd.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 13335 IP address blocks: 150.48.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:03:f4:cc:98:02:4b:18:3f:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=85eb057f-4ed5-4db2-bd7d-46d8a15993c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:ef:bf:51:ad:45:58:8a:a1:a1:ca:7a:09: df:b7:95:78:66:5d:24:a4:2b:2d:99:13:9b:9d:68: b4:63:12:03:28:e5:81:87:b2:e2:3f:83:b2:93:13: a2:21:a0:c2:52:ee:c7:db:7c:01:db:4d:a6:d4:00: 2e:6f:f1:ea:60:27:80:69:9d:b8:f0:46:d2:6c:be: 30:1f:bd:2e:c2:27:96:c1:58:b8:4a:b2:41:11:b9: a6:a1:50:de:dc:56:af:1d:08:0d:9d:05:7f:bd:21: 22:7b:10:77:7c:93:d6:3e:1c:4c:cf:94:0a:f5:53: 6f:8d:e3:36:83:ce:ed:47:c3:22:20:6f:7e:aa:e4: 2d:c4:7e:6f:c9:89:9e:de:51:17:20:33:99:ef:80: c8:46:02:4b:65:3e:c9:52:66:f9:37:46:02:0f:8d: 15:8c:40:e2:ae:da:e6:05:75:74:8a:a3:92:37:e1: ee:a6:23:81:40:5b:23:87:0d:e7:1e:c7:9d:2f:2f: ac:48:13:f7:82:a3:8c:31:d2:b7:9d:f6:42:a0:5b: 5b:17:fe:37:f2:c0:b8:ca:28:5d:bf:06:50:61:a0: ef:43:fd:73:23:1f:75:e2:fa:04:03:f0:b6:ec:51: 4c:0e:f8:7b:62:0c:e9:82:e7:62:f8:1a:f6:77:e8: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:71:04:7C:45:0D:8F:F6:C3:8E:D7:82:66:D1:15:EF:6F:1E:09:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/42419c3d-700b-345f-b7c1-6360d87259bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cd:87:51:10:cf:78:b9:72:71:b4:9a:a5:e5:95:6a:dd:e9: 1f:f7:69:75:99:21:0a:0d:a7:d0:57:ed:4a:e0:e9:88:e7:45: e1:46:1d:5e:fd:19:dc:da:4d:1f:2f:9d:a6:df:ce:07:6d:9a: 11:3f:5f:d3:01:b6:2a:1d:a6:9c:d9:b5:6f:d0:c9:6d:46:1a: c4:68:5f:95:6c:ed:93:e5:ea:94:55:1d:e4:89:ea:bc:32:60: 04:55:c6:fe:9a:b2:e8:a0:8a:24:d6:d1:54:ce:4e:6e:d8:2a: 54:07:8f:2c:b5:c1:98:80:e9:a1:00:b2:0b:e5:d9:67:cd:31: 42:39:2d:a2:6d:b4:b6:a8:47:10:0c:1f:f6:49:72:21:9e:f6: 68:4a:12:16:6e:ce:c4:29:19:dc:85:e0:eb:5f:57:ac:66:e1: 5d:df:63:c5:dd:e7:e4:71:1c:fd:85:e2:99:54:fa:b7:42:cf: 70:b3:2f:4a:f1:a7:d0:44:3d:b7:1f:26:a1:f3:c8:4f:db:2b: 13:c0:de:b9:90:04:32:ae:78:59:70:3a:85:c3:74:07:70:31: 87:e7:ae:17:11:04:c5:29:1b:e0:cf:d5:1c:4d:94:8b:ca:91: 98:2f:15:92:f7:e7:04:b1:9e:95:eb:e3:b7:41:a1:e6:ec:cc: 5d:9e:0e:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAP0zJgCSxg/mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk ODVlYjA1N2YtNGVkNS00ZGIyLWJkN2QtNDZkOGExNTk5M2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYLvv1GtRViKoaHKegnft5V4Zl0kpCstmROb nWi0YxIDKOWBh7LiP4OykxOiIaDCUu7H23wB202m1AAub/HqYCeAaZ248EbSbL4w H70uwieWwVi4SrJBEbmmoVDe3FavHQgNnQV/vSEiexB3fJPWPhxMz5QK9VNvjeM2 g87tR8MiIG9+quQtxH5vyYme3lEXIDOZ74DIRgJLZT7JUmb5N0YCD40VjEDirtrm BXV0iqOSN+HupiOBQFsjhw3nHsedLy+sSBP3gqOMMdK3nfZCoFtbF/438sC4yihd vwZQYaDvQ/1zIx914voEA/C27FFMDvh7Ygzpgudi+Br2d+g9dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxxBHxFDY/2w47XgmbRFe9vHgkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDI0MTljM2QtNzAwYi0z NDVmLWI3YzEtNjM2MGQ4NzI1OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrNh1EQz3i5cnG0mqXllWrd6R/3aXWZIQoNp9BX7Urg6YjnReFGHV79 GdzaTR8vnabfzgdtmhE/X9MBtiodppzZtW/QyW1GGsRoX5Vs7ZPl6pRVHeSJ6rwy YARVxv6asuigiiTW0VTOTm7YKlQHjyy1wZiA6aEAsgvl2WfNMUI5LaJttLaoRxAM H/ZJciGe9mhKEhZuzsQpGdyF4OtfV6xm4V3fY8Xd5+RxHP2F4plU+rdCz3CzL0rx p9BEPbcfJqHzyE/bKxPA3rmQBDKueFlwOoXDdAdwMYfnrhcRBMUpG+DP1RxNlIvK kZgvFZL35wSxnpXr47dBoebszF2eDs8= -----END CERTIFICATE-----Generated at Tue Jun 2 21:51:07 2026 by rpki-client