$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa File: f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa (raw, json) Hash identifier: olYK6NShP3NZZlqSXpaIh1KC8DCugBnisG9AJfs2Nwk= Subject key identifier: C4:AC:94:93:B3:71:C5:CC:41:AA:57:81:5E:94:80:87:08:D0:4D:A1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EAD1C5D9F69C183DA5ACAE280 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 13335 IP address blocks: 150.48.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:5d:9f:69:c1:83:da:5a:ca:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=92234535-3ac3-4e4c-bcb7-21a52463b616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f4:8c:98:f6:85:58:55:39:54:cb:ec:df:32: 4d:7c:e0:90:63:c3:c4:00:1e:c2:86:93:5e:9a:1d: 29:1e:b0:49:6c:5d:59:b7:08:0d:e3:57:bc:9c:c2: 4f:4a:5c:11:cb:24:76:87:c3:27:76:8c:80:52:21: 77:ef:98:70:9d:d4:4a:c1:72:d1:20:56:d6:72:53: 9d:5b:c0:49:2e:f1:bd:83:a2:de:1f:c8:9e:df:f7: b6:70:7a:16:68:93:91:ec:37:62:90:07:5f:dd:6b: 18:13:e8:50:bb:60:de:3c:4e:f6:16:d5:c2:34:da: db:f7:4d:1a:f7:7f:55:18:69:c0:d8:fd:e5:eb:ce: 43:71:7d:c1:d2:6f:b7:11:fe:52:56:45:ff:76:4e: 94:a5:69:82:22:74:27:7c:c4:c8:5a:60:5c:05:ee: 10:3a:1d:7b:4e:49:8a:e8:38:31:f0:5a:83:00:3d: f7:a3:08:38:94:e5:8e:b8:a6:43:37:d6:ea:b6:66: ec:0b:2a:67:5c:09:59:84:6a:c3:de:92:93:80:fe: 98:f7:b1:61:24:bd:5e:2c:78:90:88:5a:0d:65:de: 1a:9b:ac:96:7b:21:e5:49:ef:41:23:29:36:da:1f: 94:5a:01:44:e1:c4:1b:c2:20:5c:32:e3:4f:48:e1: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AC:94:93:B3:71:C5:CC:41:AA:57:81:5E:94:80:87:08:D0:4D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f0daa8e4-3fb8-3efa-b959-8af2ca7a4412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1a:d8:d0:78:38:0b:0b:fb:47:e3:09:05:7e:f0:b4:fc:24: be:d5:dd:eb:ab:18:90:7e:d9:88:2e:b4:b1:60:b6:f3:46:17: d0:ac:0c:4e:44:60:b8:38:ab:9d:4b:9f:25:fa:6a:eb:c7:1a: c6:e7:5c:aa:fe:ac:06:1f:c0:41:6f:4d:84:10:0b:3b:4b:f7: dc:5b:77:ec:75:ea:92:d0:d5:a2:08:e1:37:4b:9b:47:11:32: a8:0d:83:d6:c6:89:f8:9b:74:ee:21:5f:4d:0e:43:c9:1d:1b: e6:3f:69:bd:9e:38:22:5e:2d:c8:e5:3f:45:75:82:58:b1:e1: 17:89:b5:8e:8a:4f:7a:77:4d:a6:d0:8c:4c:ed:f0:32:d4:ac: ef:0c:57:b7:9a:e0:74:33:d5:7c:97:19:25:d4:9a:10:2d:16: 9d:0d:32:d3:b2:3b:8b:c0:4e:b5:96:cf:8a:cd:61:86:1b:ba: 6d:50:e6:87:d7:92:60:1a:f9:71:33:7d:31:d0:fa:37:5d:29: 78:de:4d:71:c2:0e:ff:74:b5:83:78:72:c3:3d:02:6e:1f:10: 65:da:ab:98:88:49:d4:65:08:36:30:e1:4d:da:4c:44:22:92: 4a:2a:05:6c:b1:3d:8e:db:77:50:49:6c:bc:6d:61:bb:c0:79: c3:df:f9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHF2facGD2lrK4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk OTIyMzQ1MzUtM2FjMy00ZTRjLWJjYjctMjFhNTI0NjNiNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfSMmPaFWFU5VMvs3zJNfOCQY8PEAB7ChpNe mh0pHrBJbF1ZtwgN41e8nMJPSlwRyyR2h8MndoyAUiF375hwndRKwXLRIFbWclOd W8BJLvG9g6LeH8ie3/e2cHoWaJOR7DdikAdf3WsYE+hQu2DePE72FtXCNNrb900a 939VGGnA2P3l685DcX3B0m+3Ef5SVkX/dk6UpWmCInQnfMTIWmBcBe4QOh17TkmK 6Dgx8FqDAD33owg4lOWOuKZDN9bqtmbsCypnXAlZhGrD3pKTgP6Y97FhJL1eLHiQ iFoNZd4am6yWeyHlSe9BIyk22h+UWgFE4cQbwiBcMuNPSOENPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSslJOzccXMQapXgV6UgIcI0E2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjBkYWE4ZTQtM2ZiOC0z ZWZhLWI5NTktOGFmMmNhN2E0NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAljCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoa2NB4OAsL+0fjCQV+8LT8JL7V3eurGJB+2YgutLFgtvNGF9CsDE5E YLg4q51LnyX6auvHGsbnXKr+rAYfwEFvTYQQCztL99xbd+x16pLQ1aII4TdLm0cR MqgNg9bGifibdO4hX00OQ8kdG+Y/ab2eOCJeLcjlP0V1glix4ReJtY6KT3p3TabQ jEzt8DLUrO8MV7ea4HQz1XyXGSXUmhAtFp0NMtOyO4vATrWWz4rNYYYbum1Q5ofX kmAa+XEzfTHQ+jddKXjeTXHCDv90tYN4csM9Am4fEGXaq5iISdRlCDYw4U3aTEQi kkoqBWyxPY7bd1BJbLxtYbvAecPf+SA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:43:33 2026 by rpki-client