$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa File: 6c80e3d5-346d-3567-9003-79a6e213a98d.roa (raw, json) Hash identifier: Y57zO7yE4vqBd4F5K1IMVbVOtoUNvOeXCoQmcNLZwDY= Subject key identifier: 29:33:B7:4A:92:30:23:51:9E:5E:7A:0D:51:A5:F8:D3:93:0D:33:E7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4F0821805D04F4D9D58A8500 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 150.48.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:21:80:5d:04:f4:d9:d5:8a:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=143cdb87-c01d-41c7-9589-40147294903d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:0a:f9:63:4b:04:14:c6:8d:a9:1d:09:1d: 02:fa:18:23:39:ec:e8:0f:1a:b2:fb:fd:67:0e:e4: af:bb:a2:06:22:8b:25:42:70:63:6c:8c:e6:7f:99: 46:d0:b9:82:22:eb:ce:56:e3:5f:80:40:b9:6a:7a: 26:6d:1d:56:bd:0b:ae:e2:44:c1:80:d5:61:dd:46: 53:66:0c:68:d7:9f:2c:32:c6:2d:91:ca:89:7a:b5: 00:3c:91:1e:1a:40:70:3b:73:36:1c:c3:ef:23:bc: 3f:df:5c:17:84:a3:00:2e:15:49:0c:22:2d:71:14: d2:1c:d6:0c:b7:93:f2:65:e7:ff:03:b6:f9:51:a2: 7c:3e:ab:e8:f9:07:a6:5b:37:e5:4a:98:91:53:3c: 3a:8b:7e:a3:c6:46:ee:20:57:cc:60:f8:cb:d0:41: b3:b1:dc:6a:ce:14:8b:d5:51:75:e8:e8:ca:02:9f: cc:5f:43:29:d3:cf:9d:5f:18:76:3f:f0:c4:b5:51: 71:3a:b7:e0:42:59:39:47:b3:95:d8:28:04:28:d3: ab:fe:5c:74:39:7e:b7:e9:86:4b:3a:b8:68:17:25: a1:ff:63:9a:43:95:e5:19:f5:3c:cc:cb:1c:27:78: ef:b7:b2:05:2b:38:3f:6e:22:d0:69:01:00:99:1f: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:33:B7:4A:92:30:23:51:9E:5E:7A:0D:51:A5:F8:D3:93:0D:33:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6c80e3d5-346d-3567-9003-79a6e213a98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:34:50:a0:de:42:c4:3b:ff:1e:09:8a:c5:82:6f:5b:64:de: 61:8e:cf:d3:18:50:29:34:ba:e8:88:49:15:15:5f:32:bb:b3: 21:ee:78:36:76:5b:9f:a8:92:7a:15:27:8a:af:fb:32:0e:35: e3:29:72:99:ee:2b:0c:24:58:2c:c6:52:52:30:0f:6c:3d:cd: b5:6b:5c:d0:f0:95:4b:1c:e6:27:be:d6:cb:5a:34:48:92:3e: 58:e2:34:f5:89:1d:33:95:b6:bd:86:8e:42:4e:52:56:2c:9d: 51:75:22:47:32:82:c3:91:ae:40:1a:af:5d:ea:17:8b:aa:03: 6e:a2:6c:76:3d:60:79:0b:f0:fe:3a:db:eb:2e:36:fe:ab:16: 43:ff:e6:03:07:50:42:e9:5e:20:d2:15:e0:03:81:af:08:53: 90:4c:dd:ad:61:68:a5:52:1b:de:45:34:e4:74:4d:d9:9b:ab: 1e:99:ce:5b:46:8d:38:60:8e:50:de:ce:8d:fc:b7:95:0d:26: 27:01:d1:0b:50:11:04:ba:70:3d:4f:8a:ee:0d:1b:44:0c:76: c6:19:85:5c:74:89:98:a3:0d:db:c6:55:b1:1e:94:e6:8f:60: db:f4:3d:f6:67:10:10:9b:ac:c6:7e:b8:79:6a:5b:4d:54:3d: 79:6f:4f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCGAXQT02dWKhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MTQzY2RiODctYzAxZC00MWM3LTk1ODktNDAxNDcyOTQ5MDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9UK+WNLBBTGjakdCR0C+hgjOezoDxqy+/1n DuSvu6IGIoslQnBjbIzmf5lG0LmCIuvOVuNfgEC5anombR1WvQuu4kTBgNVh3UZT Zgxo158sMsYtkcqJerUAPJEeGkBwO3M2HMPvI7w/31wXhKMALhVJDCItcRTSHNYM t5PyZef/A7b5UaJ8Pqvo+QemWzflSpiRUzw6i36jxkbuIFfMYPjL0EGzsdxqzhSL 1VF16OjKAp/MX0Mp08+dXxh2P/DEtVFxOrfgQlk5R7OV2CgEKNOr/lx0OX636YZL OrhoFyWh/2OaQ5XlGfU8zMscJ3jvt7IFKzg/biLQaQEAmR/N/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkzt0qSMCNRnl56DVGl+NOTDTPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNmM4MGUzZDUtMzQ2ZC0z NTY3LTkwMDMtNzlhNmUyMTNhOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU0UKDeQsQ7/x4JisWCb1tk3mGOz9MYUCk0uuiISRUVXzK7syHueDZ2 W5+oknoVJ4qv+zIONeMpcpnuKwwkWCzGUlIwD2w9zbVrXNDwlUsc5ie+1staNEiS PljiNPWJHTOVtr2GjkJOUlYsnVF1IkcygsORrkAar13qF4uqA26ibHY9YHkL8P46 2+suNv6rFkP/5gMHUELpXiDSFeADga8IU5BM3a1haKVSG95FNOR0Tdmbqx6ZzltG jThgjlDezo38t5UNJicB0QtQEQS6cD1Piu4NG0QMdsYZhVx0iZijDdvGVbEelOaP YNv0PfZnEBCbrMZ+uHlqW01UPXlvTyE= -----END CERTIFICATE-----Generated at Tue Oct 20 00:25:54 2026 by rpki-client