$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cf22c88d-6f13-3c9d-a49d-8d9f89487b7f.roa File: cf22c88d-6f13-3c9d-a49d-8d9f89487b7f.roa (raw, json) Hash identifier: 6Nn8j2I77vy1M1fqCRuoeUdAsmiE18Ck4jlzEKah8rQ= Subject key identifier: 3A:2C:C5:90:BB:BB:8B:31:91:B6:C9:D0:A4:F3:33:27:79:E4:64:95 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E0A70030166F7395CB8702900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cf22c88d-6f13-3c9d-a49d-8d9f89487b7f.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 13335 IP address blocks: 150.48.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:03:01:66:f7:39:5c:b8:70:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=ea2b9889-e554-468a-9d04-8141baf841fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fb:c7:be:26:26:da:4c:35:e1:17:40:10:d6: 65:c6:b1:d0:8d:49:49:41:29:77:54:9d:92:10:94: 83:d8:e1:98:0b:a5:a5:66:09:85:1b:6f:15:b6:17: 92:47:d5:3c:46:52:c3:06:4d:81:c6:1b:c8:22:d0: 96:15:f0:da:48:38:00:fc:04:a3:49:30:9a:47:31: 92:4c:48:24:94:50:a2:8b:36:78:15:76:97:8d:b6: ca:73:7f:81:84:3b:bb:c3:c7:57:9b:b2:5d:8d:40: a9:95:e1:00:fb:dd:8b:cf:9a:7a:25:51:67:ec:fc: 0f:5c:d7:13:4f:5a:5c:f8:26:c2:42:8e:18:eb:9d: c9:c5:37:26:88:4b:69:fc:35:80:6a:f9:a0:0e:d0: ad:74:38:56:ce:8f:49:9e:7d:3e:91:bc:0c:65:21: bd:b2:b9:c4:94:e4:85:f9:3f:06:0e:c5:b0:1b:76: 15:f0:c7:75:3c:75:d8:ba:8e:70:37:ed:9c:2c:2d: 82:05:cf:e7:0b:37:23:fd:57:e5:a7:72:57:b8:ac: da:19:89:62:e0:fd:a3:52:cb:6e:ad:a0:b8:0b:c9: 00:07:c6:40:11:5a:44:d1:f9:ef:9d:d7:78:63:4d: 87:44:98:97:11:a7:d2:4c:b9:a8:94:4b:d9:df:46: 65:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2C:C5:90:BB:BB:8B:31:91:B6:C9:D0:A4:F3:33:27:79:E4:64:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cf22c88d-6f13-3c9d-a49d-8d9f89487b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:88:a7:7e:bf:46:f6:aa:b5:ce:11:60:9d:b7:04:59:b7:f5: ad:8e:08:d6:11:ee:25:49:82:1b:16:b7:66:ea:d2:e0:b1:9f: 63:05:59:56:3c:09:25:32:5f:82:48:80:8b:97:19:88:90:ec: 37:90:cd:53:d4:5a:d2:ba:1f:86:9d:be:67:7f:98:d3:3d:62: 71:f9:d4:46:8d:3a:f1:ff:11:85:ad:fc:7b:b7:f4:8a:cf:35: a0:d9:a1:ba:3c:b9:ef:de:fd:3b:ca:fe:f5:fc:65:8a:62:35: de:81:06:02:64:67:ab:dc:f7:cd:80:be:8a:08:6d:a1:9b:2d: 90:3f:03:81:72:ef:98:9f:d9:5c:e1:21:d5:07:38:90:da:ad: 5d:01:1b:d1:20:3c:55:8c:12:15:5b:70:19:78:b7:99:0d:c1: 89:1d:81:c1:85:53:52:01:f9:5e:13:c3:23:bd:52:aa:88:bf: c0:c9:2b:02:fd:24:52:ed:33:28:5b:20:46:22:e9:dc:e9:90: 11:15:ef:f5:c2:f6:ff:00:d5:a1:a6:cf:a8:64:8a:40:71:ba: 46:6f:24:3b:df:8f:48:88:96:8f:1c:f4:91:36:ff:36:2d:6a: d6:c9:99:91:e2:50:c8:1f:56:a4:45:52:1a:fe:cd:54:0a:13: a7:1a:9e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAMBZvc5XLhwKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk ZWEyYjk4ODktZTU1NC00NjhhLTlkMDQtODE0MWJhZjg0MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvvHviYm2kw14RdAENZlxrHQjUlJQSl3VJ2S EJSD2OGYC6WlZgmFG28VtheSR9U8RlLDBk2BxhvIItCWFfDaSDgA/ASjSTCaRzGS TEgklFCiizZ4FXaXjbbKc3+BhDu7w8dXm7JdjUCpleEA+92Lz5p6JVFn7PwPXNcT T1pc+CbCQo4Y653JxTcmiEtp/DWAavmgDtCtdDhWzo9Jnn0+kbwMZSG9srnElOSF +T8GDsWwG3YV8Md1PHXYuo5wN+2cLC2CBc/nCzcj/Vflp3JXuKzaGYli4P2jUstu raC4C8kAB8ZAEVpE0fnvndd4Y02HRJiXEafSTLmolEvZ30ZlLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDosxZC7u4sxkbbJ0KTzMyd55GSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2YyMmM4OGQtNmYxMy0z YzlkLWE0OWQtOGQ5Zjg5NDg3YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWIp36/Rvaqtc4RYJ23BFm39a2OCNYR7iVJghsWt2bq0uCxn2MFWVY8 CSUyX4JIgIuXGYiQ7DeQzVPUWtK6H4advmd/mNM9YnH51EaNOvH/EYWt/Hu39IrP NaDZobo8ue/e/TvK/vX8ZYpiNd6BBgJkZ6vc982AvooIbaGbLZA/A4Fy75if2Vzh IdUHOJDarV0BG9EgPFWMEhVbcBl4t5kNwYkdgcGFU1IB+V4TwyO9UqqIv8DJKwL9 JFLtMyhbIEYi6dzpkBEV7/XC9v8A1aGmz6hkikBxukZvJDvfj0iIlo8c9JE2/zYt atbJmZHiUMgfVqRFUhr+zVQKE6cankI= -----END CERTIFICATE-----Generated at Tue Jun 2 21:50:55 2026 by rpki-client