$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b67294c7-af63-3714-9d84-31229374d8bd.roa File: b67294c7-af63-3714-9d84-31229374d8bd.roa (raw, json) Hash identifier: dTDbcfs54B1kNzGSt4BjZSueiDV3yg5ZqkIYzuZgbDU= Subject key identifier: 81:8D:CD:FB:A5:A8:04:C8:08:3D:C2:6B:8C:CC:FD:7F:46:E8:99:94 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4F082028208A50C1D5291980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b67294c7-af63-3714-9d84-31229374d8bd.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 150.48.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:20:28:20:8a:50:c1:d5:29:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=07027430-df6f-4064-8e12-16168b2e9d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:a8:cb:54:05:ee:61:46:59:41:41:7b:e4: 65:0a:33:27:73:53:4d:8a:26:37:7a:bd:e1:31:d4: 88:23:a4:f1:62:2e:ad:16:7b:75:a6:de:db:1e:e8: 67:a0:c6:f6:ab:ea:7e:34:8d:9a:6e:ed:c8:cf:a2: 59:00:e9:16:dc:8a:e9:7e:c1:26:51:38:9f:d0:85: 18:7d:bc:0f:df:77:de:2e:f5:97:e8:d0:b1:8d:0a: b6:8f:5c:6d:9e:72:74:3e:fc:13:bc:82:d4:1a:00: 55:bc:0b:f3:30:22:3c:2f:ba:96:80:59:22:87:ce: 5e:16:b7:3a:ea:83:b5:d8:56:3f:77:21:d1:dd:f7: d7:db:4f:44:86:a4:a5:b2:27:9d:c1:f1:ca:65:b6: 81:e2:71:4d:2a:2a:a2:7e:f3:8d:21:77:b8:8e:31: 0e:1c:66:63:b8:08:d2:80:01:99:2e:e2:24:07:6b: dd:ac:a0:e3:f3:60:45:af:f2:3c:89:ac:f5:73:4f: 34:ea:d5:78:69:37:aa:60:10:8c:dd:5f:ff:87:05: 5a:aa:52:6c:9e:94:84:7c:f8:66:10:fd:f4:dd:b2: c5:8a:7e:da:91:bd:0e:03:c0:ad:5b:b7:9f:11:89: a5:50:2e:8f:f7:bb:cc:8a:d4:47:11:1b:29:e0:1c: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8D:CD:FB:A5:A8:04:C8:08:3D:C2:6B:8C:CC:FD:7F:46:E8:99:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b67294c7-af63-3714-9d84-31229374d8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:04:52:88:33:0f:5d:f6:46:32:a9:b3:e6:15:b1:31:63:ea: 65:b7:f7:0b:41:1b:28:44:f5:1b:e8:62:c9:a5:8f:c5:33:62: f6:a9:56:e8:9d:97:df:2e:2c:37:4c:c5:ee:97:33:e9:c4:a8: 6c:0d:a6:99:65:2d:92:da:17:43:45:8b:17:99:4d:04:7f:72: 3b:8b:57:9c:14:96:36:2c:49:67:86:8d:3f:bb:5e:04:3e:e5: 9f:e4:f4:d0:96:28:6b:30:9b:e0:02:28:4e:dc:0d:e0:da:6f: b7:df:9b:38:e3:c1:62:f6:f5:fb:46:32:a0:5b:85:91:ca:c9: 9b:cc:cc:3a:0a:5f:52:99:63:40:c7:88:b6:5e:97:6d:20:bf: 0a:8c:8a:cf:93:0e:6a:a2:35:42:2f:3f:6f:e2:25:bf:d5:24: 01:81:d6:04:d8:87:bc:3b:bb:bd:38:97:6e:45:b7:0c:7e:3a: 7f:f3:a0:c8:be:ba:22:98:b4:d5:36:9e:21:a7:c7:bf:37:10: 72:39:db:ce:1d:01:06:92:1a:41:a9:ca:49:25:fb:4a:a0:b2: f1:fd:bc:02:43:76:3e:b7:6d:70:63:d4:12:fc:ae:65:ad:d4: 21:1d:5c:2b:52:ec:c9:cc:be:a9:7e:6b:72:ea:e7:5f:a7:4d: 75:29:5a:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCAoIIpQwdUpGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MDcwMjc0MzAtZGY2Zi00MDY0LThlMTItMTYxNjhiMmU5ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQOoy1QF7mFGWUFBe+RlCjMnc1NNiiY3er3h MdSII6TxYi6tFnt1pt7bHuhnoMb2q+p+NI2abu3Iz6JZAOkW3IrpfsEmUTif0IUY fbwP33feLvWX6NCxjQq2j1xtnnJ0PvwTvILUGgBVvAvzMCI8L7qWgFkih85eFrc6 6oO12FY/dyHR3ffX209EhqSlsiedwfHKZbaB4nFNKiqifvONIXe4jjEOHGZjuAjS gAGZLuIkB2vdrKDj82BFr/I8iaz1c0806tV4aTeqYBCM3V//hwVaqlJsnpSEfPhm EP303bLFin7akb0OA8CtW7efEYmlUC6P97vMitRHERsp4By9nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGNzfulqATICD3Ca4zM/X9G6JmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjY3Mjk0YzctYWY2My0z NzE0LTlkODQtMzEyMjkzNzRkOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEEUogzD132RjKps+YVsTFj6mW39wtBGyhE9RvoYsmlj8UzYvapVuid l98uLDdMxe6XM+nEqGwNppllLZLaF0NFixeZTQR/cjuLV5wUljYsSWeGjT+7XgQ+ 5Z/k9NCWKGswm+ACKE7cDeDab7ffmzjjwWL29ftGMqBbhZHKyZvMzDoKX1KZY0DH iLZel20gvwqMis+TDmqiNUIvP2/iJb/VJAGB1gTYh7w7u704l25Ftwx+On/zoMi+ uiKYtNU2niGnx783EHI5284dAQaSGkGpykkl+0qgsvH9vAJDdj63bXBj1BL8rmWt 1CEdXCtS7MnMvql+a3Lq51+nTXUpWjk= -----END CERTIFICATE-----Generated at Sat Oct 17 15:52:31 2026 by rpki-client