$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4e7761-7cd8-37a6-a784-51e842fb2c19.roa File: ff4e7761-7cd8-37a6-a784-51e842fb2c19.roa (raw, json) Hash identifier: IL3nnjuJr1Q542k6LkXIYgg9LWyZ36r6oLGMRwzvgWI= Subject key identifier: 35:99:A9:1B:2A:FB:7E:11:54:EC:4D:00:F5:A7:9F:EC:C2:E9:25:86 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584A89A627D5E2A0FF37135C4000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4e7761-7cd8-37a6-a784-51e842fb2c19.roa Signing time: Wed 16 Jul 2025 13:01:03 +0000 ROA not before: Wed 16 Jul 2025 13:01:03 +0000 ROA not after: Tue 14 Oct 2025 13:01:03 +0000 asID: 13335 IP address blocks: 150.48.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:89:a6:27:d5:e2:a0:ff:37:13:5c:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jul 16 13:01:03 2025 GMT Not After : Oct 14 13:01:03 2025 GMT Subject: CN=52ccda2c-dfff-40da-b045-1aadb7585767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:0d:6b:b7:e2:fc:b8:ad:32:ca:28:45:72: ac:73:bc:56:db:2d:19:ac:de:6e:b2:23:39:88:51: 35:63:c7:65:02:7b:41:a8:e3:0e:9c:59:cf:14:97: 5f:9d:47:a2:02:10:f9:13:18:b3:0f:06:ad:a8:3b: 4c:9a:2b:b7:7c:c5:73:c7:c8:3d:e5:33:d0:8d:ee: d8:b3:0e:a7:ab:ea:bb:37:c7:ce:2c:a1:32:21:09: 69:64:c3:62:d1:d4:cd:ce:6d:bc:43:63:f1:49:46: d3:f0:97:71:41:71:20:5b:3d:77:22:eb:62:5b:19: 86:ba:ec:75:a7:43:f6:fe:93:f9:71:54:60:b4:36: 1d:12:bc:08:d4:42:8d:c1:0d:05:95:57:2b:3b:b5: b9:ca:a2:dd:8b:7e:54:ab:79:8a:be:6b:e7:c9:cf: c7:d0:4a:9c:b9:a2:df:88:97:88:c2:62:95:31:88: 1e:31:1f:f4:79:6a:01:ce:eb:4c:47:e9:16:af:5e: da:ab:7a:b2:7e:14:09:81:0b:e4:2a:13:20:38:d2: c2:0c:47:22:93:e6:9e:64:0b:73:5f:44:10:b9:c6: 63:4d:7e:65:22:9e:7a:23:2a:7d:fc:23:af:52:41: c9:69:55:71:2a:24:a5:20:07:5d:f6:07:b8:4f:61: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:99:A9:1B:2A:FB:7E:11:54:EC:4D:00:F5:A7:9F:EC:C2:E9:25:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ff4e7761-7cd8-37a6-a784-51e842fb2c19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 150.48.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:38:51:f6:7c:6f:ee:ec:80:48:5f:47:77:c6:90:99:43:7f: 74:07:a2:5f:dd:61:b7:87:9a:1c:8a:88:7f:32:e0:3b:1a:20: ac:cb:04:47:d1:96:bb:d9:62:e2:1c:56:21:cd:d9:f1:f0:81: 79:59:4a:aa:a4:7e:70:20:ed:50:e1:5d:f5:52:58:44:e1:9c: 3a:eb:d7:17:6c:ca:82:b7:28:1c:55:97:41:c8:08:fb:3d:5b: 8c:e8:f7:73:c4:a3:74:08:2d:b8:74:ce:66:bf:ad:ea:dd:c1: 00:a6:18:69:1b:42:a9:5b:02:cc:d8:e8:5b:40:2a:24:a2:a1: 2b:05:a5:c9:01:7a:8d:38:04:f4:59:ed:9a:bb:57:ae:33:56: 1a:cc:69:a2:67:13:2e:d2:0a:92:e7:6f:5e:3b:e5:5c:ae:91: 9c:8e:32:e6:b1:78:65:18:a1:b1:ef:f3:0e:b4:84:51:3e:22: b7:b7:c6:d0:26:71:20:03:3f:13:7c:e7:8d:db:38:8a:56:22: 3f:09:58:5b:7a:60:dc:ab:a1:4b:b6:2a:59:18:79:1a:75:6a: d5:7f:08:53:61:aa:7c:41:36:6a:48:8a:a3:83:16:5d:66:78: b9:48:67:fb:de:c0:fe:67:ca:cc:5d:e2:b8:59:b8:58:ff:b8: 01:5f:1a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJpifV4qD/NxNcQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk NTJjY2RhMmMtZGZmZi00MGRhLWIwNDUtMWFhZGI3NTg1NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDANa7fi/LitMsooRXKsc7xW2y0ZrN5usiM5 iFE1Y8dlAntBqOMOnFnPFJdfnUeiAhD5ExizDwatqDtMmiu3fMVzx8g95TPQje7Y sw6nq+q7N8fOLKEyIQlpZMNi0dTNzm28Q2PxSUbT8JdxQXEgWz13IutiWxmGuux1 p0P2/pP5cVRgtDYdErwI1EKNwQ0FlVcrO7W5yqLdi35Uq3mKvmvnyc/H0EqcuaLf iJeIwmKVMYgeMR/0eWoBzutMR+kWr17aq3qyfhQJgQvkKhMgONLCDEcik+aeZAtz X0QQucZjTX5lIp56Iyp9/COvUkHJaVVxKiSlIAdd9ge4T2FfoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWZqRsq+34RVOxNAPWnn+zC6SWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmY0ZTc3NjEtN2NkOC0z N2E2LWE3ODQtNTFlODQyZmIyYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCljCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk4UfZ8b+7sgEhfR3fGkJlDf3QHol/dYbeHmhyKiH8y4DsaIKzLBEfR lrvZYuIcViHN2fHwgXlZSqqkfnAg7VDhXfVSWEThnDrr1xdsyoK3KBxVl0HICPs9 W4zo93PEo3QILbh0zma/rerdwQCmGGkbQqlbAszY6FtAKiSioSsFpckBeo04BPRZ 7Zq7V64zVhrMaaJnEy7SCpLnb1475VyukZyOMuaxeGUYobHv8w60hFE+Ire3xtAm cSADPxN8543bOIpWIj8JWFt6YNyroUu2KlkYeRp1atV/CFNhqnxBNmpIiqODFl1m eLlIZ/vewP5nysxd4rhZuFj/uAFfGtA= -----END CERTIFICATE-----Generated at Mon Aug 4 01:33:51 2025 by rpki-client