$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc09158f-e5e0-3535-bd23-1840d5f73492.roa File: cc09158f-e5e0-3535-bd23-1840d5f73492.roa (raw, json) Hash identifier: o/WgJ0E54s/k0/w3RobEscR5YlXK10VPWfhfQlaNk+Q= Subject key identifier: 12:56:95:14:A1:07:EE:C7:4F:BA:A3:F4:C2:87:7E:93:93:B3:EE:EE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4F0821F2BBE453A18C07AE00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc09158f-e5e0-3535-bd23-1840d5f73492.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 150.48.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:21:f2:bb:e4:53:a1:8c:07:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=598929eb-18b5-44f9-a31b-6fd0cb4c0f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:9e:03:6b:df:ab:03:49:c1:33:3f:2f:7f: b4:d9:1e:f2:e7:5f:64:15:e5:b9:3c:5d:bd:1a:b1: bd:53:bf:be:a3:df:e4:37:9a:97:0f:3d:2d:88:50: 20:3f:b1:d2:24:08:48:49:6a:6a:4b:42:66:05:e8: ff:48:74:42:70:71:c3:0a:1f:ed:f1:fa:01:08:72: 9e:93:f5:5d:70:43:54:4d:db:76:24:c6:c6:d0:09: ac:27:85:65:9d:dc:65:75:28:11:bb:48:3f:12:68: 23:ee:2a:fc:19:73:fd:49:95:96:2f:ce:94:6c:63: ad:7e:6c:68:a8:67:f5:fc:43:35:fe:a8:4c:32:bb: 47:6c:87:c0:ce:b4:5a:69:d6:9c:7b:c1:86:f5:c6: 55:02:d8:88:72:2b:63:8f:10:6c:f2:c7:48:e7:28: 31:11:9f:69:76:ae:fd:0b:ab:df:48:75:2b:5b:12: 1d:56:3f:78:b1:56:64:8f:3d:95:9d:04:a1:90:dc: 16:50:fc:12:1f:4b:a9:29:01:b6:4a:f5:3b:e0:57: ed:e2:ee:98:81:8f:72:1d:58:bc:12:7a:d2:0c:cf: 3f:5b:90:84:2a:6d:d4:05:b8:80:db:9f:4f:07:94: 59:cf:e5:66:26:90:3e:df:a3:70:f4:c1:f2:ad:79: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:56:95:14:A1:07:EE:C7:4F:BA:A3:F4:C2:87:7E:93:93:B3:EE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc09158f-e5e0-3535-bd23-1840d5f73492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8e:16:a2:e1:c0:76:9e:2b:0a:2e:4c:58:7c:2f:20:c5:67: 4a:83:4b:2e:f7:60:32:12:37:aa:b6:76:1c:de:23:ca:21:bb: 35:fd:19:5e:6d:1f:ca:25:e5:b1:e0:32:9f:dd:02:d9:ad:d4: 54:f4:6e:26:3b:60:da:82:2b:15:50:54:23:6b:e3:9f:46:7f: 86:3c:36:3c:ae:ff:6a:13:3d:d3:1d:f9:bc:10:b0:48:1f:be: a3:e5:42:ad:35:63:02:d8:b8:68:b4:2e:da:09:7f:07:2f:15: 03:8d:7e:ad:fd:3c:ba:7c:f9:10:db:f6:93:c5:c4:2d:e9:ce: d8:88:64:0f:99:c3:1b:33:24:40:20:e8:10:ee:a4:85:7f:fb: 4f:89:1f:58:7e:4a:2b:3b:a4:94:7a:0c:44:f2:4f:8e:70:a0: fc:77:3d:d8:c1:21:bd:3f:61:58:53:75:2b:72:71:6e:df:5b: 62:ad:45:81:59:fc:49:42:2b:60:9c:97:a7:26:07:e9:38:ff: 78:14:b0:12:63:64:97:3a:71:ea:e7:c5:70:1d:ae:8d:ef:7e: e8:75:bc:d9:a5:49:d4:91:a2:66:3b:8e:d7:f3:a7:5c:82:b9: 3d:e0:21:41:78:66:67:e5:0e:09:d3:c1:31:59:e7:9f:e2:9d: 8e:ed:37:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCHyu+RToYwHrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NTk4OTI5ZWItMThiNS00NGY5LWEzMWItNmZkMGNiNGMwZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheyeA2vfqwNJwTM/L3+02R7y519kFeW5PF29 GrG9U7++o9/kN5qXDz0tiFAgP7HSJAhISWpqS0JmBej/SHRCcHHDCh/t8foBCHKe k/VdcENUTdt2JMbG0AmsJ4VlndxldSgRu0g/Emgj7ir8GXP9SZWWL86UbGOtfmxo qGf1/EM1/qhMMrtHbIfAzrRaadace8GG9cZVAtiIcitjjxBs8sdI5ygxEZ9pdq79 C6vfSHUrWxIdVj94sVZkjz2VnQShkNwWUPwSH0upKQG2SvU74Fft4u6YgY9yHVi8 EnrSDM8/W5CEKm3UBbiA259PB5RZz+VmJpA+36Nw9MHyrXlSVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJWlRShB+7HT7qj9MKHfpOTs+7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2MwOTE1OGYtZTVlMC0z NTM1LWJkMjMtMTg0MGQ1ZjczNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDljCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKOFqLhwHaeKwouTFh8LyDFZ0qDSy73YDISN6q2dhzeI8ohuzX9GV5t H8ol5bHgMp/dAtmt1FT0biY7YNqCKxVQVCNr459Gf4Y8Njyu/2oTPdMd+bwQsEgf vqPlQq01YwLYuGi0LtoJfwcvFQONfq39PLp8+RDb9pPFxC3pztiIZA+ZwxszJEAg 6BDupIV/+0+JH1h+Sis7pJR6DETyT45woPx3PdjBIb0/YVhTdStycW7fW2KtRYFZ /ElCK2Ccl6cmB+k4/3gUsBJjZJc6cernxXAdro3vfuh1vNmlSdSRomY7jtfzp1yC uT3gIUF4ZmflDgnTwTFZ55/inY7tN5o= -----END CERTIFICATE-----Generated at Mon Oct 19 21:53:04 2026 by rpki-client