$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa File: 4f004cec-8ad5-311c-a400-22bfc882b03c.roa (raw, json) Hash identifier: 1JCobVh8ylV2u62LwPZ8ga8lFFBkZzg2ZtF8yQtyhZU= Subject key identifier: 8E:C9:A7:1D:E1:73:62:19:1C:82:A8:87:CD:9D:91:40:4E:D3:A5:31 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B6A61F97520689AC765D08E00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 13335 IP address blocks: 150.48.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f9:75:20:68:9a:c7:65:d0:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=afe170dd-4f46-4c6d-af96-69ec2172dde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a1:12:fc:5d:d3:de:bf:e1:c5:d6:5e:d3:a5: b3:ec:ad:f0:77:52:eb:69:fd:e5:ef:d8:24:9d:0f: 4e:fc:b8:35:f3:d1:73:47:26:e3:1c:73:53:7e:8e: ad:4c:ff:99:cc:d4:38:bc:f5:a5:e5:3c:d3:2e:e0: 67:ee:70:f8:fa:a3:ae:32:3f:e9:a3:63:cf:0f:8e: 91:7d:91:a0:c5:0c:46:9b:1d:59:3d:27:aa:21:4f: 03:5a:66:21:10:a0:0d:94:d4:57:5c:3b:94:16:5b: 3c:9d:a9:5b:21:cb:7b:2e:f7:cb:eb:96:38:71:12: a9:5d:a2:36:3c:5d:38:36:b5:0b:9f:2d:b4:a5:a0: e0:d2:2d:2b:88:6c:81:2f:c6:6c:2a:01:9d:c3:99: c9:36:e3:7f:16:72:6e:1f:65:c2:1c:17:78:14:b3: ef:49:f3:fc:44:b9:e5:ea:f7:2c:76:f7:84:2c:9d: e8:b9:c2:c1:a9:bb:2e:e0:9e:99:23:de:06:85:04: 43:c5:dc:43:0d:2b:7e:02:3e:e1:9e:e2:2f:4a:7e: 51:8f:9e:5b:0d:0e:62:26:8b:cf:b0:18:a9:07:58: eb:fa:e8:d4:7b:2f:72:8c:06:21:43:5a:9e:d4:28: d1:5e:12:04:a3:8d:46:83:68:ee:a6:8c:f7:40:79: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C9:A7:1D:E1:73:62:19:1C:82:A8:87:CD:9D:91:40:4E:D3:A5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4f004cec-8ad5-311c-a400-22bfc882b03c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:91:35:c1:8b:bd:96:fc:c9:76:64:1b:8b:eb:6b:bc:e1:9e: 7e:0d:ab:d5:dd:13:c1:5e:65:0a:fe:9d:b5:61:57:3b:11:a9: a9:6c:92:bf:e6:d4:97:bb:bb:7e:98:09:e4:bf:a5:96:dd:c3: 1d:f8:62:4d:d7:99:e1:a1:a0:46:9a:9f:29:0c:8c:2b:f9:15: 62:48:46:5e:e1:11:59:63:1d:6c:b1:4d:65:d3:11:ba:6b:47: 80:f6:fc:2c:4b:07:9a:b0:b7:7c:96:19:94:2f:a0:b4:25:67: fe:51:12:96:ff:3a:a4:72:d0:d2:15:c9:14:95:28:16:7d:a4: 3c:80:9e:66:74:52:85:ac:00:16:a3:f0:7a:b9:59:57:b5:f2: 04:f9:c2:72:f0:fb:05:73:8b:9a:a5:6d:41:8c:32:88:90:1f: dc:03:fe:d9:d4:94:53:8d:b9:52:77:c8:ab:a9:de:0f:92:48: 06:59:0a:7b:21:f0:c5:98:11:16:7d:70:c7:a1:fc:80:19:61: 15:79:88:63:6c:e8:46:60:4c:cc:b9:92:9d:32:fd:ba:1f:0f: 15:2a:17:82:41:6e:3a:a8:db:a8:6a:55:d6:6b:b2:58:1e:98: 42:d5:53:d1:82:38:fe:36:bc:66:e6:83:dc:de:13:25:88:bc: 2f:46:e7:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfl1IGiax2XQjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YWZlMTcwZGQtNGY0Ni00YzZkLWFmOTYtNjllYzIxNzJkZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKES/F3T3r/hxdZe06Wz7K3wd1Lraf3l79gk nQ9O/Lg189FzRybjHHNTfo6tTP+ZzNQ4vPWl5TzTLuBn7nD4+qOuMj/po2PPD46R fZGgxQxGmx1ZPSeqIU8DWmYhEKANlNRXXDuUFls8nalbIct7LvfL65Y4cRKpXaI2 PF04NrULny20paDg0i0riGyBL8ZsKgGdw5nJNuN/FnJuH2XCHBd4FLPvSfP8RLnl 6vcsdveELJ3oucLBqbsu4J6ZI94GhQRDxdxDDSt+Aj7hnuIvSn5Rj55bDQ5iJovP sBipB1jr+ujUey9yjAYhQ1qe1CjRXhIEo41Gg2jupoz3QHmpPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7Jpx3hc2IZHIKoh82dkUBO06UxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGYwMDRjZWMtOGFkNS0z MTFjLWE0MDAtMjJiZmM4ODJiMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqRNcGLvZb8yXZkG4vra7zhnn4Nq9XdE8FeZQr+nbVhVzsRqalskr/m 1Je7u36YCeS/pZbdwx34Yk3XmeGhoEaanykMjCv5FWJIRl7hEVljHWyxTWXTEbpr R4D2/CxLB5qwt3yWGZQvoLQlZ/5REpb/OqRy0NIVyRSVKBZ9pDyAnmZ0UoWsABaj 8Hq5WVe18gT5wnLw+wVzi5qlbUGMMoiQH9wD/tnUlFONuVJ3yKup3g+SSAZZCnsh 8MWYERZ9cMeh/IAZYRV5iGNs6EZgTMy5kp0y/bofDxUqF4JBbjqo26hqVdZrslge mELVU9GCOP42vGbmg9zeEyWIvC9G50Q= -----END CERTIFICATE-----Generated at Sun Oct 19 19:05:51 2025 by rpki-client