$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ec56d9d1-0100-3aba-9227-43fefecfd92a.roa File: ec56d9d1-0100-3aba-9227-43fefecfd92a.roa (raw, json) Hash identifier: fChIYuDSbVwh13CRikMwVBds/xuDtNNaF9ja2jg1P+I= Subject key identifier: 1D:17:66:30:D0:0D:AD:B3:2B:68:16:3E:02:F4:D5:FC:E2:53:4B:84 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E0A7008A2D97EA6622BF9B780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ec56d9d1-0100-3aba-9227-43fefecfd92a.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 13335 IP address blocks: 150.48.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:08:a2:d9:7e:a6:62:2b:f9:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=92da0759-c645-4f77-8e0d-674f015221fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:ac:b2:e6:dd:c4:78:34:38:0c:4d:e8:e7: ed:15:a2:51:60:2c:5f:56:49:42:c0:35:bb:bd:9a: 71:91:34:32:d2:4f:ad:3d:a7:0b:27:0a:9d:ec:2d: d0:f8:33:26:fb:70:d5:1f:9e:f5:8a:40:81:28:35: fd:34:dc:06:91:9e:e9:4d:b1:55:42:d3:69:e7:4e: 6f:bb:49:cf:05:5b:e3:7a:00:f4:8e:c2:1d:f4:a5: b5:d2:ca:f1:43:9a:e3:c0:a1:3d:ae:d5:71:da:6e: 22:60:47:68:92:c9:08:7a:c5:35:ff:7b:9a:da:c0: 92:98:8b:7b:ef:22:7d:5b:43:aa:80:a3:05:59:a9: 59:e8:12:4e:b9:06:31:14:ec:e9:a6:7e:76:d3:1d: a2:9a:e0:63:1d:4c:06:79:75:44:b4:02:7c:97:37: b5:92:5b:1b:8d:9f:bb:30:88:40:e6:37:bd:ce:98: 10:f4:02:81:ad:ec:8e:b3:6d:4e:83:6e:8b:70:74: 77:f3:e5:57:b2:86:77:59:a6:6d:43:a4:40:6a:2a: 4c:64:74:12:07:1d:6a:38:77:46:3f:31:ce:bd:a9: 4d:56:8f:ef:db:a7:6b:47:b1:fe:ca:af:19:c1:65: b6:d6:6f:48:02:d9:9d:4b:05:57:fe:d5:ad:12:86: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:17:66:30:D0:0D:AD:B3:2B:68:16:3E:02:F4:D5:FC:E2:53:4B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ec56d9d1-0100-3aba-9227-43fefecfd92a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e7:88:cf:c2:d4:68:9d:15:ac:89:53:07:31:f6:76:20:4c: 46:8c:d0:cd:86:6b:39:09:68:53:89:76:17:4e:d5:a6:e1:e5: 8b:31:9d:8d:15:a9:d6:d1:08:2f:b2:bc:0b:a8:10:84:b3:2b: 32:6b:69:6c:48:e3:b1:b4:ea:06:66:73:0f:91:34:fd:e7:c0: 74:a0:ff:ad:4c:72:62:d8:4f:27:33:04:5b:a3:a4:c7:e9:4f: 18:1f:1e:10:39:ad:d6:4b:48:b6:d1:49:da:18:8b:b0:b4:73: c5:ae:6c:58:a5:61:18:d4:bb:ff:52:11:d1:60:25:f1:b1:ce: 3f:52:d5:65:85:49:8a:3c:51:c6:5b:5d:84:63:18:7c:1e:20: d4:26:cc:ca:13:4d:ac:33:28:e3:2f:e5:60:6f:f8:37:fd:81: c3:9c:bd:83:ac:b3:d5:3c:3f:c4:7d:83:3b:98:87:07:c7:4b: 1d:e9:66:7b:00:a5:7c:ee:d7:ab:7e:fa:d1:54:19:99:f5:b3: 6b:b3:00:98:bf:9b:41:af:37:08:c6:62:9b:bb:36:48:a3:63: 72:34:9a:e9:0b:75:84:2f:65:16:70:06:d3:01:86:c5:55:c3: 7e:81:88:f1:43:26:fe:e4:39:7b:f0:b8:e4:55:54:f7:2f:b5: 64:29:f6:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAii2X6mYiv5t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk OTJkYTA3NTktYzY0NS00Zjc3LThlMGQtNjc0ZjAxNTIyMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFyssubdxHg0OAxN6OftFaJRYCxfVklCwDW7 vZpxkTQy0k+tPacLJwqd7C3Q+DMm+3DVH571ikCBKDX9NNwGkZ7pTbFVQtNp505v u0nPBVvjegD0jsId9KW10srxQ5rjwKE9rtVx2m4iYEdokskIesU1/3ua2sCSmIt7 7yJ9W0OqgKMFWalZ6BJOuQYxFOzppn520x2imuBjHUwGeXVEtAJ8lze1klsbjZ+7 MIhA5je9zpgQ9AKBreyOs21Og26LcHR38+VXsoZ3WaZtQ6RAaipMZHQSBx1qOHdG PzHOvalNVo/v26drR7H+yq8ZwWW21m9IAtmdSwVX/tWtEoYfVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0XZjDQDa2zK2gWPgL01fziU0uEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZWM1NmQ5ZDEtMDEwMC0z YWJhLTkyMjctNDNmZWZlY2ZkOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvniM/C1GidFayJUwcx9nYgTEaM0M2GazkJaFOJdhdO1abh5YsxnY0V qdbRCC+yvAuoEISzKzJraWxI47G06gZmcw+RNP3nwHSg/61McmLYTyczBFujpMfp TxgfHhA5rdZLSLbRSdoYi7C0c8WubFilYRjUu/9SEdFgJfGxzj9S1WWFSYo8UcZb XYRjGHweINQmzMoTTawzKOMv5WBv+Df9gcOcvYOss9U8P8R9gzuYhwfHSx3pZnsA pXzu16t++tFUGZn1s2uzAJi/m0GvNwjGYpu7NkijY3I0mukLdYQvZRZwBtMBhsVV w36BiPFDJv7kOXvwuORVVPcvtWQp9hE= -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:28 2026 by rpki-client