$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af9b7569-66f0-3d3b-8b45-ca2bbfd71a0a.roa File: af9b7569-66f0-3d3b-8b45-ca2bbfd71a0a.roa (raw, json) Hash identifier: L0Hl5MgpC5f2bXeoi5sXSdu/6gENZIOrfA6w68cOXAY= Subject key identifier: 31:65:DE:4F:8F:E6:5C:9A:55:10:17:20:BA:BB:DB:77:B5:00:B6:B4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A89A625A2AB0478A93B354D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af9b7569-66f0-3d3b-8b45-ca2bbfd71a0a.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 13335 IP address blocks: 150.48.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:25:a2:ab:04:78:a9:3b:35:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=30e41740-be3b-49ee-a6ae-200155589834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:53:32:dc:e5:f0:09:92:ec:e5:3c:e2:1f:50: 8b:0e:ed:aa:59:4e:45:73:5f:b2:d5:0c:f9:70:54: cd:62:be:a9:1d:db:a6:ed:de:c0:49:68:eb:cd:40: cd:bc:ec:18:48:50:5e:40:19:87:a5:7a:6b:73:e7: 55:f0:16:15:0b:33:36:e0:40:11:e2:6c:59:75:73: c7:ad:50:1f:b2:b7:2a:26:95:e0:bc:7c:80:f6:93: 18:ac:21:21:41:7a:31:33:56:e0:60:9e:03:c0:91: f2:39:02:39:c0:7f:0e:8e:59:e1:f4:d5:d3:6d:6a: 94:3d:2a:b9:53:16:65:2f:91:f2:4f:3c:81:5c:b1: 80:76:05:bc:d6:0e:c4:f8:17:d9:36:dd:26:d0:a0: 0d:0e:af:3f:86:70:a5:3d:5d:63:eb:d2:28:65:ba: 4b:97:de:37:06:46:5b:bb:4d:3a:8d:8b:92:78:ab: 3a:c7:f1:8f:11:54:c7:ad:55:f3:43:d8:61:89:b3: 78:12:91:68:ef:68:bb:49:99:b9:81:c5:80:08:8d: 1b:8b:6e:c5:da:9c:58:95:a4:10:82:97:0b:3a:b8: 8b:94:88:16:a3:b5:28:1e:46:ba:5b:51:d6:dd:ea: ce:8d:f5:7e:c2:cf:dd:59:b3:d1:5e:8e:5c:1a:80: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:65:DE:4F:8F:E6:5C:9A:55:10:17:20:BA:BB:DB:77:B5:00:B6:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/af9b7569-66f0-3d3b-8b45-ca2bbfd71a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:98:1c:5e:0f:a4:4b:95:6e:25:58:8f:f7:89:7d:d1:86:53: 64:34:ad:ba:db:6a:8a:86:18:48:7a:ef:79:f8:e1:95:22:fe: e3:86:da:dd:6f:a2:5c:98:e2:f9:1b:0d:63:35:fe:f3:c8:41: 4a:34:09:4d:eb:4a:cd:09:1b:ba:11:a4:72:3d:63:32:96:ca: 04:6b:0b:af:52:a0:5f:10:ce:99:d0:4a:66:75:95:fa:df:5e: c2:e5:c2:da:81:37:b7:87:04:a7:bf:98:25:d4:68:ab:e6:44: fc:c2:68:dc:b2:47:7a:77:aa:02:5c:09:29:36:25:76:6f:77: dd:cc:d8:a6:82:c5:c3:46:45:23:4d:e2:b1:0c:ee:17:e9:ad: 19:09:14:b9:fa:29:21:8a:5b:ab:26:bf:59:9f:a1:96:89:e2: d7:51:2d:ac:b6:da:00:d7:48:07:d0:21:18:1b:58:55:7e:f9: ca:11:56:cd:ef:6c:87:c9:fd:a8:47:a3:7e:1f:44:b1:93:23: 66:44:1f:f0:48:b3:e6:a7:6d:3b:85:1f:d0:fa:1f:69:93:71: a1:08:e5:da:11:e4:4f:7e:b6:89:be:f9:f2:83:26:7a:79:8a: b3:60:c4:59:00:fe:cb:5e:8c:91:37:c9:33:f1:c5:9a:1c:a9: 13:72:8c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpiWiqwR4qTs1TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk MzBlNDE3NDAtYmUzYi00OWVlLWE2YWUtMjAwMTU1NTg5ODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1My3OXwCZLs5TziH1CLDu2qWU5Fc1+y1Qz5 cFTNYr6pHdum7d7ASWjrzUDNvOwYSFBeQBmHpXprc+dV8BYVCzM24EAR4mxZdXPH rVAfsrcqJpXgvHyA9pMYrCEhQXoxM1bgYJ4DwJHyOQI5wH8Ojlnh9NXTbWqUPSq5 UxZlL5HyTzyBXLGAdgW81g7E+BfZNt0m0KANDq8/hnClPV1j69IoZbpLl943BkZb u006jYuSeKs6x/GPEVTHrVXzQ9hhibN4EpFo72i7SZm5gcWACI0bi27F2pxYlaQQ gpcLOriLlIgWo7UoHka6W1HW3erOjfV+ws/dWbPRXo5cGoClGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFl3k+P5lyaVRAXILq723e1ALa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWY5Yjc1NjktNjZmMC0z ZDNiLThiNDUtY2EyYmJmZDcxYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKYHF4PpEuVbiVYj/eJfdGGU2Q0rbrbaoqGGEh673n44ZUi/uOG2t1v olyY4vkbDWM1/vPIQUo0CU3rSs0JG7oRpHI9YzKWygRrC69SoF8QzpnQSmZ1lfrf XsLlwtqBN7eHBKe/mCXUaKvmRPzCaNyyR3p3qgJcCSk2JXZvd93M2KaCxcNGRSNN 4rEM7hfprRkJFLn6KSGKW6smv1mfoZaJ4tdRLay22gDXSAfQIRgbWFV++coRVs3v bIfJ/ahHo34fRLGTI2ZEH/BIs+anbTuFH9D6H2mTcaEI5doR5E9+tom++fKDJnp5 irNgxFkA/stejJE3yTPxxZocqRNyjNM= -----END CERTIFICATE-----Generated at Mon Aug 4 01:31:39 2025 by rpki-client