$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cf22c88d-6f13-3c9d-a49d-8d9f89487b7f.roa File: cf22c88d-6f13-3c9d-a49d-8d9f89487b7f.roa (raw, json) Hash identifier: mDU9SoFNs/BYkEOXa8liX5iawTABBXEhksG/8VfGQ8w= Subject key identifier: 9A:70:A8:3A:F2:56:02:7A:FD:B8:4D:D0:77:25:46:33:9F:6E:6B:89 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F4F08222BAEB2D0279537F980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cf22c88d-6f13-3c9d-a49d-8d9f89487b7f.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 150.48.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:22:2b:ae:b2:d0:27:95:37:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=b3379ec8-0587-492f-90f9-9b31143002f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:5c:31:51:42:2c:07:f1:32:a6:4b:f1:e8: 14:b9:ca:a2:f8:d6:76:b0:17:4f:bc:73:e6:5f:71: 79:c5:e8:aa:aa:bf:7d:26:29:7c:72:35:a5:7d:94: 9a:1a:67:e8:6b:86:65:a4:11:81:e5:04:0c:2f:27: 6d:4e:f4:15:f1:ec:bb:97:de:79:1c:a9:9c:75:13: 2b:62:9e:e9:0f:35:de:7c:69:63:94:ba:7a:a6:ff: 22:b8:54:6a:c5:87:58:ec:91:25:7e:56:e8:a0:47: e4:01:c5:77:43:e6:65:c1:64:53:6e:1b:ce:be:c6: 9a:80:11:01:7b:a8:2f:c9:2b:9d:d2:ad:e4:b8:92: cc:6f:31:90:08:e9:fa:ad:c6:50:fa:69:10:bc:81: 3f:64:e8:05:b2:87:a1:72:47:b5:7b:a5:a7:e9:c2: c0:0a:f9:29:90:cf:bf:22:0f:4b:dc:5e:e6:69:fe: 9f:fc:f6:6c:d5:ae:0d:98:ae:d7:94:19:7b:a1:bd: 01:e5:8b:aa:e9:50:2b:c4:d2:72:83:fc:0c:90:e6: 48:a0:03:14:86:bb:66:8b:92:c6:04:d8:2d:24:5a: fd:95:97:04:78:fc:55:27:ec:eb:c3:71:98:48:c5: bd:b9:a6:d7:71:98:1f:f5:21:7c:8b:ff:8e:71:51: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:70:A8:3A:F2:56:02:7A:FD:B8:4D:D0:77:25:46:33:9F:6E:6B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cf22c88d-6f13-3c9d-a49d-8d9f89487b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a4:8d:7e:57:96:d3:45:a9:fd:02:66:4d:4d:7d:03:26:a6: ad:db:4d:8c:24:31:9b:6e:81:1c:ea:d9:43:e8:3e:d6:e1:8a: 6c:1c:5f:fc:df:10:cf:ef:79:96:eb:6f:9d:8a:d3:1f:fa:4f: 9d:cb:3b:e2:eb:23:59:21:0c:95:05:61:9b:08:62:7e:49:8b: dd:61:99:4f:cd:e8:55:e0:96:2d:ca:b6:fd:b2:11:fa:6a:02: 0b:0e:24:f5:3c:68:60:d3:78:cf:1d:a5:27:93:ab:1d:e0:d5: c9:9a:04:47:50:bc:36:8b:d7:24:a0:9a:24:1a:d1:2f:de:7c: 84:01:df:96:cd:3e:98:17:ef:c5:69:84:e9:d7:c5:25:3d:61: 72:2d:3a:6c:12:20:5d:56:dd:09:8f:ae:d3:84:ee:5b:b5:e3: 6b:87:c0:f1:87:cf:82:5c:8f:eb:c6:f7:5a:d1:3b:fe:20:88: 70:7b:03:a8:46:35:05:58:00:be:24:f6:28:0d:70:ba:5e:37: c4:af:01:1e:94:b8:18:69:8d:c9:7f:da:6f:44:9d:b8:9d:2d: 3f:bd:bf:a0:74:9e:f2:c7:0f:7d:21:df:16:c2:6a:47:0b:b0: c6:64:5a:60:c3:29:87:1e:a8:4c:14:29:c4:ab:00:46:61:9e: 9c:12:8a:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCIrrrLQJ5U3+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YjMzNzllYzgtMDU4Ny00OTJmLTkwZjktOWIzMTE0MzAwMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUtcMVFCLAfxMqZL8egUucqi+NZ2sBdPvHPm X3F5xeiqqr99Jil8cjWlfZSaGmfoa4ZlpBGB5QQMLydtTvQV8ey7l955HKmcdRMr Yp7pDzXefGljlLp6pv8iuFRqxYdY7JElflbooEfkAcV3Q+ZlwWRTbhvOvsaagBEB e6gvySud0q3kuJLMbzGQCOn6rcZQ+mkQvIE/ZOgFsoehcke1e6Wn6cLACvkpkM+/ Ig9L3F7maf6f/PZs1a4NmK7XlBl7ob0B5Yuq6VArxNJyg/wMkOZIoAMUhrtmi5LG BNgtJFr9lZcEePxVJ+zrw3GYSMW9uabXcZgf9SF8i/+OcVEOSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpwqDryVgJ6/bhN0HclRjOfbmuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2YyMmM4OGQtNmYxMy0z YzlkLWE0OWQtOGQ5Zjg5NDg3YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGkjX5XltNFqf0CZk1NfQMmpq3bTYwkMZtugRzq2UPoPtbhimwcX/zf EM/veZbrb52K0x/6T53LO+LrI1khDJUFYZsIYn5Ji91hmU/N6FXgli3Ktv2yEfpq AgsOJPU8aGDTeM8dpSeTqx3g1cmaBEdQvDaL1ySgmiQa0S/efIQB35bNPpgX78Vp hOnXxSU9YXItOmwSIF1W3QmPrtOE7lu142uHwPGHz4Jcj+vG91rRO/4giHB7A6hG NQVYAL4k9igNcLpeN8SvAR6UuBhpjcl/2m9EnbidLT+9v6B0nvLHD30h3xbCakcL sMZkWmDDKYceqEwUKcSrAEZhnpwSivw= -----END CERTIFICATE-----Generated at Sat Oct 17 19:28:38 2026 by rpki-client