$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa File: f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa (raw, json) Hash identifier: v4T0uqA+UpnPQEFxKpwKclaDTbFrRpO2lr2ydrauPcg= Subject key identifier: FF:F5:8A:1E:A4:7C:01:D5:BE:40:69:AE:13:D2:60:E5:4F:DA:7E:8E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E0A700209A07F79653F00D700 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 13335 IP address blocks: 150.48.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:02:09:a0:7f:79:65:3f:00:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=66fdb3bf-ad7f-485a-a28c-bd77de2e9d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dc:52:f9:87:b5:85:c4:53:28:a6:53:ed:fd: bb:7c:be:90:df:56:1e:4b:ed:8f:15:a4:ca:96:39: b1:7b:41:85:10:13:41:57:0f:cc:55:28:ea:46:9c: c7:d7:23:44:f7:d7:a8:d5:98:14:6f:0a:7c:49:63: 16:1f:7d:8f:e9:26:ac:6d:4a:2c:40:9b:ff:33:a8: 27:d0:7b:86:dc:1c:aa:93:7d:f3:f4:64:b6:0e:b2: 12:88:00:0d:c8:2a:5d:d2:54:8f:66:e1:84:fe:6f: 12:6f:44:bf:87:ba:6d:87:f8:36:2f:5e:d6:a2:96: 9c:bb:10:51:00:18:66:d8:b9:d2:c7:87:10:79:62: 05:86:40:4d:47:23:4b:f3:45:be:90:19:c6:d2:b6: 18:d3:47:d1:5d:45:0e:27:2a:46:38:fd:26:b5:98: d9:2b:83:a4:3a:37:c9:88:23:61:4f:82:94:55:3e: de:8a:bd:3c:3e:26:70:5b:e5:48:81:4d:79:9f:4e: b5:d7:6a:2d:81:b3:7e:25:68:86:c7:0e:e0:68:14: 0e:08:b4:a0:6d:37:4e:02:9e:4e:34:6f:75:f6:9f: 0b:cb:79:93:1d:a1:e5:89:21:2e:ba:15:02:98:b4: 63:87:6f:5c:08:c9:b6:2c:33:41:2d:15:ce:54:f0: 84:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F5:8A:1E:A4:7C:01:D5:BE:40:69:AE:13:D2:60:E5:4F:DA:7E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:62:cb:e1:28:06:f7:d5:d5:5e:75:c9:78:cb:53:0f:a5:19: 92:24:98:37:04:a9:d1:3a:2e:df:52:61:b4:7f:63:3c:97:b8: af:2b:40:44:18:c8:66:2d:14:90:4b:98:e2:e9:b5:2b:41:5d: 2a:03:b7:6e:9d:c8:23:c1:70:76:ab:9c:cc:ed:3b:06:6a:b0: 62:f1:d6:59:3c:7c:e7:26:ed:d6:c3:8d:c6:80:41:46:43:49: b4:10:b5:03:9c:1c:3d:a9:e5:1c:d9:92:e8:72:19:9d:6c:59: 37:21:06:69:16:20:81:62:d8:ba:c7:83:43:2a:38:5c:74:38: 5b:9c:dd:22:83:62:15:71:88:3f:32:b3:53:59:83:d2:8d:90: 39:04:c4:cb:6e:17:23:53:3c:88:05:a6:e6:8b:0a:9e:45:d2: 8a:b5:b4:df:f4:aa:53:13:d4:70:49:2f:d0:e7:66:b8:20:06: e5:57:9f:11:60:d5:fd:84:e1:30:a3:08:c6:ad:b4:66:8b:47: 7a:27:2c:fb:d5:ea:a9:1b:59:45:02:60:84:28:38:69:64:c6: ad:31:bd:ab:ce:1b:8a:e9:08:64:81:a2:5d:12:ee:23:0f:43: a3:c3:57:e8:33:70:99:2d:5e:47:32:05:df:68:11:ee:b1:f4: 28:af:38:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4KcAIJoH95ZT8A1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk NjZmZGIzYmYtYWQ3Zi00ODVhLWEyOGMtYmQ3N2RlMmU5ZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2txS+Ye1hcRTKKZT7f27fL6Q31YeS+2PFaTK ljmxe0GFEBNBVw/MVSjqRpzH1yNE99eo1ZgUbwp8SWMWH32P6SasbUosQJv/M6gn 0HuG3Byqk33z9GS2DrISiAANyCpd0lSPZuGE/m8Sb0S/h7pth/g2L17WopacuxBR ABhm2LnSx4cQeWIFhkBNRyNL80W+kBnG0rYY00fRXUUOJypGOP0mtZjZK4OkOjfJ iCNhT4KUVT7eir08PiZwW+VIgU15n06112otgbN+JWiGxw7gaBQOCLSgbTdOAp5O NG919p8Ly3mTHaHliSEuuhUCmLRjh29cCMm2LDNBLRXOVPCE4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/1ih6kfAHVvkBprhPSYOVP2n6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjBkYWE4ZTQtM2ZiOC0z ZWZhLWI5NTktOGFmMmNhN2E0NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACliy+EoBvfV1V51yXjLUw+lGZIkmDcEqdE6Lt9SYbR/YzyXuK8rQEQY yGYtFJBLmOLptStBXSoDt26dyCPBcHarnMztOwZqsGLx1lk8fOcm7dbDjcaAQUZD SbQQtQOcHD2p5RzZkuhyGZ1sWTchBmkWIIFi2LrHg0MqOFx0OFuc3SKDYhVxiD8y s1NZg9KNkDkExMtuFyNTPIgFpuaLCp5F0oq1tN/0qlMT1HBJL9DnZrggBuVXnxFg 1f2E4TCjCMattGaLR3onLPvV6qkbWUUCYIQoOGlkxq0xvavOG4rpCGSBol0S7iMP Q6PDV+gzcJktXkcyBd9oEe6x9CivOFA= -----END CERTIFICATE-----Generated at Tue Jun 2 21:57:33 2026 by rpki-client