$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/84c3ad9c-0d72-3098-96a7-d1c19b922882.roa File: 84c3ad9c-0d72-3098-96a7-d1c19b922882.roa (raw, json) Hash identifier: 5eyQNqFNv9h30WpiOSub2DeSIafmRmgX/AM2vPE2j8s= Subject key identifier: F4:20:C7:1E:AC:6D:FC:BB:8C:FB:E3:4F:04:2C:B7:A1:33:F2:CF:19 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E0A7000CB6C4DD150B2EFE4C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/84c3ad9c-0d72-3098-96a7-d1c19b922882.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 13335 IP address blocks: 150.48.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:00:cb:6c:4d:d1:50:b2:ef:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=5bf5bd2e-fb42-4d40-97d0-c7188c019ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:f4:23:48:45:18:9f:5b:e1:21:3b:32:a1: e8:87:68:29:4f:a6:a8:4f:b0:eb:38:04:c7:7a:09: b6:87:10:0c:49:1b:79:c8:71:3b:68:b1:0b:ae:d0: 1d:76:c5:e6:ac:a7:bd:fe:99:c0:44:da:ea:64:71: 1f:a8:77:9d:3f:46:a7:67:64:65:9b:a2:ce:bb:76: 76:bb:ad:0c:ef:53:c9:4f:9e:87:24:f9:04:56:70: c4:4a:7d:25:31:ec:df:3e:7d:88:80:d8:c7:02:c6: 72:45:d9:a6:9d:e6:20:2b:ee:60:39:cb:38:2e:68: fa:02:e1:20:44:61:73:06:e5:7a:19:76:ca:c8:2b: eb:b0:05:0c:88:87:eb:32:8c:70:a1:cc:ce:be:78: c5:6f:31:5e:1c:2a:02:40:ff:6a:80:cc:00:9f:f5: 43:8b:c6:84:81:f5:94:02:24:18:61:dc:bd:8c:ee: 69:7e:5b:79:e3:ab:db:c9:eb:51:e7:b6:b5:40:4d: 03:e2:d2:bf:0e:47:59:c8:f2:b1:ca:17:55:0d:8a: 53:ce:1c:25:19:76:f2:f0:fd:c1:89:5b:cd:23:10: 7c:97:9c:27:ff:b4:0b:20:a9:83:34:01:38:38:2f: 3b:1a:90:ee:70:ac:9d:46:89:73:f9:b1:52:99:a4: e8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:20:C7:1E:AC:6D:FC:BB:8C:FB:E3:4F:04:2C:B7:A1:33:F2:CF:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/84c3ad9c-0d72-3098-96a7-d1c19b922882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:79:83:d2:64:23:45:06:d1:96:68:57:6c:45:4d:0f:23:84: 3d:a8:57:fc:b7:f4:50:65:d1:4e:13:96:34:df:c7:9a:d5:a9: dc:16:b1:f8:e4:1c:48:ac:a0:0e:8d:d0:af:eb:df:13:fe:a4: 87:f5:f2:93:82:9b:74:6d:da:18:17:3b:c9:e4:88:ab:9b:ed: 8f:7c:73:82:41:7f:68:0f:87:43:0d:34:ce:a1:78:cf:f6:9a: db:d9:fd:61:39:b7:39:0d:62:bc:11:ef:fc:56:fd:21:1c:77: 67:cf:c8:c8:10:16:47:ce:6f:ff:b9:26:da:a1:97:34:1b:cb: b1:6b:d3:92:fb:17:73:f7:fb:1a:98:bd:70:0b:8e:ab:20:57: 23:61:f1:0a:6b:9c:d5:2c:ac:ea:44:e2:56:3f:c1:a4:7e:62: 87:15:19:19:cb:d6:4e:fb:2f:d5:34:e5:05:30:c0:15:f2:5a: 37:7f:12:e2:a0:24:e7:b7:02:0c:fb:c4:a1:08:3d:90:6d:00: 62:fb:8d:46:bd:c8:77:7e:64:e8:3c:22:85:f1:6e:63:c3:52: 36:80:bd:7a:c0:15:53:d4:d2:22:b1:1a:13:d9:1c:12:7b:70: 95:42:8d:ab:40:1d:92:89:f4:a8:d2:70:22:f4:d9:3c:15:21: 6c:45:2d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcADLbE3RULLv5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk NWJmNWJkMmUtZmI0Mi00ZDQwLTk3ZDAtYzcxODhjMDE5Y2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGD0I0hFGJ9b4SE7MqHoh2gpT6aoT7DrOATH egm2hxAMSRt5yHE7aLELrtAddsXmrKe9/pnARNrqZHEfqHedP0anZ2Rlm6LOu3Z2 u60M71PJT56HJPkEVnDESn0lMezfPn2IgNjHAsZyRdmmneYgK+5gOcs4Lmj6AuEg RGFzBuV6GXbKyCvrsAUMiIfrMoxwoczOvnjFbzFeHCoCQP9qgMwAn/VDi8aEgfWU AiQYYdy9jO5pflt546vbyetR57a1QE0D4tK/DkdZyPKxyhdVDYpTzhwlGXby8P3B iVvNIxB8l5wn/7QLIKmDNAE4OC87GpDucKydRolz+bFSmaTocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQgxx6sbfy7jPvjTwQst6Ez8s8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODRjM2FkOWMtMGQ3Mi0z MDk4LTk2YTctZDFjMTliOTIyODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp5g9JkI0UG0ZZoV2xFTQ8jhD2oV/y39FBl0U4TljTfx5rVqdwWsfjk HEisoA6N0K/r3xP+pIf18pOCm3Rt2hgXO8nkiKub7Y98c4JBf2gPh0MNNM6heM/2 mtvZ/WE5tzkNYrwR7/xW/SEcd2fPyMgQFkfOb/+5JtqhlzQby7Fr05L7F3P3+xqY vXALjqsgVyNh8QprnNUsrOpE4lY/waR+YocVGRnL1k77L9U05QUwwBXyWjd/EuKg JOe3Agz7xKEIPZBtAGL7jUa9yHd+ZOg8IoXxbmPDUjaAvXrAFVPU0iKxGhPZHBJ7 cJVCjatAHZKJ9KjScCL02TwVIWxFLRM= -----END CERTIFICATE-----Generated at Tue Jun 2 21:50:55 2026 by rpki-client