$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa File: d45a5249-bf9a-3fab-aef4-be6e656a9773.roa (raw, json) Hash identifier: W4992DzfliHRefdufeJ+sAvWUlf1wvUYeQ0OQ/b4Mh0= Subject key identifier: 4B:D4:14:56:D3:CC:3E:BC:3B:04:68:D1:12:A1:17:D8:AA:72:DF:94 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B6A61F94FB4FCB64BCA0B2900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 13335 IP address blocks: 150.48.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f9:4f:b4:fc:b6:4b:ca:0b:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=3d367009-65c1-4e27-b180-be5cdb6d1760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:67:c6:6c:a9:d0:77:b8:e7:bb:55:83:d2: 26:db:9e:22:75:a4:fd:6f:c4:f1:69:7b:78:b8:f2: b5:f0:ba:1d:d7:d0:8e:36:f2:83:2b:05:76:38:61: 04:af:d1:f9:88:2b:89:94:9a:c3:16:5f:5e:1f:80: a4:a8:96:56:79:64:68:ae:a2:c9:45:9c:d6:93:eb: dd:fa:f2:a6:44:d4:86:bc:68:3e:25:04:2f:52:70: 91:47:75:94:36:c2:c9:bd:70:54:d6:68:84:b0:f9: 12:09:e8:a1:db:25:e8:fc:12:76:23:96:9d:5b:0e: 88:8c:59:0e:e2:f3:26:87:a6:5d:09:e9:72:df:24: b3:7a:05:58:c7:9b:18:a6:78:72:05:6d:c8:3d:d1: ec:76:2c:ca:3f:c5:f7:a6:38:5b:bf:9c:5f:6e:e6: c8:2f:d4:cc:34:42:9b:24:e8:8d:c4:bb:c2:ac:28: 7d:10:18:49:b1:0b:5f:37:bf:4f:bc:46:98:75:b8: a7:1e:42:0f:dd:40:31:ea:7a:5c:47:12:8a:40:33: 75:62:a3:96:77:ec:06:b9:99:52:88:ab:a1:a1:75: 76:20:19:53:e8:ce:ff:be:f1:1a:b1:e4:53:20:8a: 60:df:7a:8e:a7:a1:70:24:bd:ac:7b:e2:1d:ba:c1: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D4:14:56:D3:CC:3E:BC:3B:04:68:D1:12:A1:17:D8:AA:72:DF:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d45a5249-bf9a-3fab-aef4-be6e656a9773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8c:3d:f6:47:b9:98:4c:dc:70:ff:0d:38:00:6e:05:f4:73: 64:70:dd:35:42:d7:a0:b1:aa:13:da:c5:55:11:24:84:f5:e8: 24:c0:01:ec:ee:61:d9:78:79:a7:28:cd:6e:be:d3:c2:b0:4e: 6d:18:b8:0e:48:cd:8c:ef:ca:21:d2:49:b5:cc:59:9f:a1:83: 75:ac:70:29:e9:f3:3c:44:ba:28:f2:d5:10:8e:76:06:07:37: 1e:16:d8:31:66:0f:fe:da:7b:3f:a5:a7:ff:87:11:6b:40:98: d1:54:a0:95:7e:5a:b0:1a:cb:93:91:53:93:dc:6e:d1:60:0b: 58:e2:4d:bd:45:f8:c4:d5:79:6a:78:63:52:de:d8:02:da:f1: 73:dc:5f:06:53:00:59:eb:a6:6c:dd:14:d4:b0:b8:84:aa:3c: f0:0a:23:34:80:86:e5:f1:e5:e8:c6:34:8e:6a:15:b3:5c:d4: 93:22:1d:ab:30:68:50:0b:dc:ae:92:ea:24:7b:6e:2e:f5:76: 28:44:57:a2:c2:36:9f:34:c5:7a:7b:57:d6:45:fe:dc:89:f4: 4f:94:ce:98:dc:32:bb:7c:1d:f1:88:26:01:c9:ee:f4:f3:cf: 9b:6b:2b:8e:69:cb:0a:1c:1a:a3:31:e1:c6:16:09:8b:3f:d5: c0:df:95:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYflPtPy2S8oLKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk M2QzNjcwMDktNjVjMS00ZTI3LWIxODAtYmU1Y2RiNmQxNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKFnxmyp0He457tVg9Im254idaT9b8TxaXt4 uPK18Lod19CONvKDKwV2OGEEr9H5iCuJlJrDFl9eH4CkqJZWeWRorqLJRZzWk+vd +vKmRNSGvGg+JQQvUnCRR3WUNsLJvXBU1miEsPkSCeih2yXo/BJ2I5adWw6IjFkO 4vMmh6ZdCely3ySzegVYx5sYpnhyBW3IPdHsdizKP8X3pjhbv5xfbubIL9TMNEKb JOiNxLvCrCh9EBhJsQtfN79PvEaYdbinHkIP3UAx6npcRxKKQDN1YqOWd+wGuZlS iKuhoXV2IBlT6M7/vvEaseRTIIpg33qOp6FwJL2se+IdusHcGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvUFFbTzD68OwRo0RKhF9iqct+UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDQ1YTUyNDktYmY5YS0z ZmFiLWFlZjQtYmU2ZTY1NmE5NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSMPfZHuZhM3HD/DTgAbgX0c2Rw3TVC16CxqhPaxVURJIT16CTAAezu Ydl4eacozW6+08KwTm0YuA5IzYzvyiHSSbXMWZ+hg3WscCnp8zxEuijy1RCOdgYH Nx4W2DFmD/7aez+lp/+HEWtAmNFUoJV+WrAay5ORU5PcbtFgC1jiTb1F+MTVeWp4 Y1Le2ALa8XPcXwZTAFnrpmzdFNSwuISqPPAKIzSAhuXx5ejGNI5qFbNc1JMiHasw aFAL3K6S6iR7bi71dihEV6LCNp80xXp7V9ZF/tyJ9E+UzpjcMrt8HfGIJgHJ7vTz z5trK45pywocGqMx4cYWCYs/1cDflXg= -----END CERTIFICATE-----Generated at Wed Nov 5 04:14:02 2025 by rpki-client