$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa File: 1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa (raw, json) Hash identifier: DRnPKRDQeabTQxMVYm7VL62nrFsa1gA89qIcbW0QPQA= Subject key identifier: 22:6A:CF:4E:46:87:13:EE:89:64:85:45:2F:70:FA:93:07:DA:B5:7B Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306C1731CDA3D9145B9280 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 15313 IP address blocks: 150.252.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6c:17:31:cd:a3:d9:14:5b:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=db567daa-600b-4c93-84ff-184bb21c6e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:bb:11:a9:0c:21:31:ee:b8:ca:3f:56:f2: 8f:14:69:c1:b3:d1:56:4e:38:d0:8a:92:c8:a5:a5: e9:80:9d:5a:9b:b9:44:46:37:e2:3a:1c:6c:b6:18: c6:4c:9b:af:fd:5d:10:5a:bb:d9:14:e8:61:73:02: 75:10:49:bb:d5:b3:42:97:78:9b:ec:91:e0:19:3c: e2:5a:d4:1a:e7:0c:f8:1a:bf:b9:34:84:44:11:55: 94:f7:70:e7:68:97:d2:50:bf:0b:c6:b9:70:a6:31: bb:05:91:ae:ae:d6:73:b5:17:41:eb:59:dd:67:cb: 60:3b:c7:da:0e:b7:68:de:8b:66:69:6c:8f:8d:81: 2c:2e:fe:b4:61:56:d3:88:74:a3:02:27:5f:31:8b: 31:73:28:42:f3:c5:2f:65:bc:70:f3:b1:34:da:b7: b2:ec:de:3a:bd:94:8e:98:91:38:ac:c4:2b:ad:5c: 2b:1f:fd:86:67:5a:b7:92:60:61:df:d6:cf:99:d5: bd:bb:a4:37:2e:e6:5a:58:b0:78:eb:58:cb:45:0c: f2:dc:62:10:68:24:95:7e:3d:e6:e8:25:0a:95:fb: b8:81:5c:e7:45:ea:32:19:92:ba:09:38:c4:f6:25: 6e:cd:ef:6c:7e:48:b5:20:cd:a0:88:e1:10:c8:64: 8e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6A:CF:4E:46:87:13:EE:89:64:85:45:2F:70:FA:93:07:DA:B5:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/1d4b81ab-a172-31e6-b5cf-6c3e052b40b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:67:71:52:fc:72:09:ea:da:89:8e:46:eb:44:9d:12:e7:8d: e7:50:94:92:28:d9:46:2b:1a:0d:d3:2e:b1:22:8c:a5:8d:10: eb:c2:76:51:d1:1f:62:d9:5e:a9:0d:1b:72:19:2e:af:e4:00: 7f:d9:2f:df:86:61:80:ef:15:0d:bd:58:78:17:e3:7f:63:36: 0b:bf:f3:ea:fa:e6:b5:4f:5f:3a:bc:63:ac:bc:ed:77:f1:3f: 1c:b2:ef:27:54:d4:5f:75:e8:55:08:97:0f:a6:cf:fb:ba:1e: 0d:d8:ce:3a:9c:05:5f:38:68:4c:bb:9c:c5:ff:ad:c3:be:7c: c1:3b:07:e9:6c:df:2e:2f:29:2f:9c:ee:76:06:bd:3e:c8:3e: 3e:0f:79:f3:a1:41:7a:42:23:ca:a3:2d:06:84:c5:fc:c5:64: 80:35:b0:ea:4f:98:cd:5c:79:e9:c3:27:4b:cd:d9:94:3f:02: 80:58:0d:ba:8c:54:47:d0:34:8f:62:61:98:d4:28:c5:9c:bc: 2d:d1:e7:b1:fb:a2:21:e5:e1:ff:85:a8:dc:54:8c:a1:6c:9f: 58:03:97:49:c2:ac:86:12:35:39:31:fb:92:df:46:f8:18:a4: 26:3e:ce:94:57:fa:ce:6f:53:dd:3c:4c:c5:8b:80:39:82:e4: 89:49:0e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGwXMc2j2RRbkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZGI1NjdkYWEtNjAwYi00YzkzLTg0ZmYtMTg0YmIyMWM2ZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux27EakMITHuuMo/VvKPFGnBs9FWTjjQipLI paXpgJ1am7lERjfiOhxsthjGTJuv/V0QWrvZFOhhcwJ1EEm71bNCl3ib7JHgGTzi WtQa5wz4Gr+5NIREEVWU93DnaJfSUL8LxrlwpjG7BZGurtZztRdB61ndZ8tgO8fa Drdo3otmaWyPjYEsLv60YVbTiHSjAidfMYsxcyhC88UvZbxw87E02rey7N46vZSO mJE4rMQrrVwrH/2GZ1q3kmBh39bPmdW9u6Q3LuZaWLB461jLRQzy3GIQaCSVfj3m 6CUKlfu4gVznReoyGZK6CTjE9iVuze9sfki1IM2giOEQyGSO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJqz05GhxPuiWSFRS9w+pMH2rV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvMWQ0YjgxYWItYTE3Mi0z MWU2LWI1Y2YtNmMzZTA1MmI0MGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNncVL8cgnq2omORutEnRLnjedQlJIo2UYrGg3TLrEijKWNEOvCdlHR H2LZXqkNG3IZLq/kAH/ZL9+GYYDvFQ29WHgX439jNgu/8+r65rVPXzq8Y6y87Xfx Pxyy7ydU1F916FUIlw+mz/u6Hg3YzjqcBV84aEy7nMX/rcO+fME7B+ls3y4vKS+c 7nYGvT7IPj4PefOhQXpCI8qjLQaExfzFZIA1sOpPmM1ceenDJ0vN2ZQ/AoBYDbqM VEfQNI9iYZjUKMWcvC3R57H7oiHl4f+FqNxUjKFsn1gDl0nCrIYSNTkx+5LfRvgY pCY+zpRX+s5vU908TMWLgDmC5IlJDnI= -----END CERTIFICATE-----Generated at Sun Nov 16 22:08:10 2025 by rpki-client