$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0dc5997d-840a-32da-88bf-847223da7391.roa File: 0dc5997d-840a-32da-88bf-847223da7391.roa (raw, json) Hash identifier: q+Zk+T05tJ34ofvSTO5dAA4YC28jUqatu5BdnNRQB8A= Subject key identifier: BA:91:42:AF:B9:F9:86:DA:C3:E4:60:88:C0:99:48:AF:81:FE:3F:4A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A89A629C3BCF70725A53255C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0dc5997d-840a-32da-88bf-847223da7391.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 13335 IP address blocks: 150.48.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:29:c3:bc:f7:07:25:a5:32:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=cef5e440-a58e-40ba-95e0-5ccc50248ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:4d:4c:15:08:14:4c:94:e1:1c:41:1c:11: 44:e8:57:bd:04:1f:32:b5:b1:47:ea:2b:e4:eb:4e: 9e:d3:51:6e:08:5e:10:62:ee:0f:7f:71:79:28:80: 89:4d:b1:85:c8:57:f9:45:cc:34:9a:22:40:e1:e2: 19:e8:91:98:8d:34:a1:ee:ee:9f:b9:a7:51:00:60: c5:db:ce:62:d0:23:a1:c2:49:0c:96:79:4c:fa:0f: ef:11:b4:1a:ec:10:41:aa:90:52:4a:d9:0b:a3:42: 57:5e:5b:40:3d:f1:54:4c:17:65:2c:2d:33:cb:2e: 4e:06:cb:0b:56:5e:64:4c:56:a0:79:0c:f1:93:96: 6b:91:eb:a0:43:19:8d:bc:28:20:16:c9:35:d1:bc: c9:df:c4:6f:b1:da:70:8c:47:f7:7e:d4:29:f4:0d: 72:26:16:21:ee:48:9a:54:1b:90:0b:fd:40:3c:b6: 27:3f:a1:07:b1:4f:ea:c0:67:38:20:e0:66:91:60: 07:26:71:51:f2:cf:57:2c:b6:c5:83:7b:24:03:38: 02:4a:0f:a2:ee:c4:8a:59:87:e3:f2:9c:f8:2d:30: b6:1d:5a:d5:05:5b:6f:3a:7d:a4:9e:3d:6f:f3:27: 5e:23:9d:53:2f:2f:72:94:ca:9f:c8:7e:21:09:28: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:91:42:AF:B9:F9:86:DA:C3:E4:60:88:C0:99:48:AF:81:FE:3F:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0dc5997d-840a-32da-88bf-847223da7391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:20:9a:81:63:e3:18:17:4b:7c:11:cf:af:a8:6e:7b:eb:8f: ba:14:74:c8:9e:9a:bb:cc:9c:59:62:8a:92:dc:c0:44:a5:9c: 03:9d:17:41:79:da:d3:c4:7c:9f:e1:33:e1:94:a6:a4:ea:d4: 11:77:dd:b5:cc:19:c0:12:f4:a0:7b:fa:4b:2a:d7:c6:9b:fb: f5:40:6d:f1:24:27:1e:22:e4:03:3e:94:58:78:75:4d:f6:90: 6b:5c:39:98:ea:28:c1:f3:e1:48:83:13:9d:c6:49:49:48:13: 84:75:67:f5:de:b6:d8:b6:30:e1:cd:ef:c1:71:3f:21:94:21: 1e:ca:d4:6e:9a:ed:8b:b8:c8:b0:87:a9:56:e9:f1:ac:11:99: 25:6b:52:36:e3:c9:4b:ca:f0:b7:6e:5b:ce:3b:a1:cb:4b:11: ad:35:2b:79:26:f8:6b:96:b2:5c:5b:ef:ac:a4:e5:8c:6f:b7: fa:32:0a:18:50:a9:5e:7f:42:46:d3:7e:a0:67:d5:b3:43:8f: 59:9a:16:4c:ca:0d:d2:b0:d6:94:6c:7f:f5:8d:a7:58:da:e3: 8b:17:c0:9a:bb:af:5e:e1:1f:84:43:4c:c1:3c:e4:a3:7a:2d: b4:e0:67:a4:b9:28:76:ca:d6:68:6c:db:ff:ae:0b:d4:8c:95: d1:8f:b9:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpinDvPcHJaUyVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk Y2VmNWU0NDAtYTU4ZS00MGJhLTk1ZTAtNWNjYzUwMjQ4ZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9hNTBUIFEyU4RxBHBFE6Fe9BB8ytbFH6ivk 606e01FuCF4QYu4Pf3F5KICJTbGFyFf5Rcw0miJA4eIZ6JGYjTSh7u6fuadRAGDF 285i0COhwkkMlnlM+g/vEbQa7BBBqpBSStkLo0JXXltAPfFUTBdlLC0zyy5OBssL Vl5kTFageQzxk5ZrkeugQxmNvCggFsk10bzJ38RvsdpwjEf3ftQp9A1yJhYh7kia VBuQC/1APLYnP6EHsU/qwGc4IOBmkWAHJnFR8s9XLLbFg3skAzgCSg+i7sSKWYfj 8pz4LTC2HVrVBVtvOn2knj1v8ydeI51TLy9ylMqfyH4hCSiBTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqRQq+5+Ybaw+RgiMCZSK+B/j9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGRjNTk5N2QtODQwYS0z MmRhLTg4YmYtODQ3MjIzZGE3MzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBljCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsgmoFj4xgXS3wRz6+obnvrj7oUdMiemrvMnFliipLcwESlnAOdF0F5 2tPEfJ/hM+GUpqTq1BF33bXMGcAS9KB7+ksq18ab+/VAbfEkJx4i5AM+lFh4dU32 kGtcOZjqKMHz4UiDE53GSUlIE4R1Z/Xetti2MOHN78FxPyGUIR7K1G6a7Yu4yLCH qVbp8awRmSVrUjbjyUvK8LduW847octLEa01K3km+GuWslxb76yk5Yxvt/oyChhQ qV5/QkbTfqBn1bNDj1maFkzKDdKw1pRsf/WNp1ja44sXwJq7r17hH4RDTME85KN6 LbTgZ6S5KHbK1mhs2/+uC9SMldGPuRw= -----END CERTIFICATE-----Generated at Mon Aug 4 01:42:59 2025 by rpki-client