$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3fa74bf9-08ac-3d1e-9a93-3e6a2e7c62d7.roa File: 3fa74bf9-08ac-3d1e-9a93-3e6a2e7c62d7.roa (raw, json) Hash identifier: xjAsneZXanjOdf0PPINS87J8WlouR6X0p2j6DhjJkyE= Subject key identifier: A4:9F:AA:BB:EA:BB:D9:C8:18:72:49:47:C8:C7:9A:9A:62:C9:BB:1C Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306C4AB8A9264E47674480 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3fa74bf9-08ac-3d1e-9a93-3e6a2e7c62d7.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 150.252.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6c:4a:b8:a9:26:4e:47:67:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=1a2ba676-c592-4668-9427-237d2dbfec8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:5f:82:39:07:37:ff:e9:01:a9:ce:3b:3a: 4c:73:e3:9a:15:a2:dd:05:5a:5f:45:92:6f:3c:f7: 26:07:4a:7d:fb:c9:17:20:e7:92:6b:ef:18:e5:c0: 7c:39:3a:fc:8c:72:89:cd:68:db:57:a0:53:e1:5a: 99:5e:45:1b:b8:df:14:fd:55:3f:16:c3:6b:72:08: d9:e5:5d:ec:a7:a3:a9:39:ab:b4:54:c7:bd:ab:03: 46:c5:12:00:f6:42:c8:a7:fa:90:87:fd:be:cf:77: 45:20:48:0c:e7:d1:c2:49:bd:8b:48:52:a7:c7:a8: 5c:34:8b:24:27:d4:cc:a4:81:54:fd:c0:3e:a3:05: 2a:4c:09:09:09:2f:a4:fc:6b:ef:75:7b:dc:2d:8e: 3c:30:17:c7:6d:1f:03:6f:3f:a5:02:8d:55:04:94: b3:62:f2:22:fb:bd:d7:b8:c3:21:2e:a2:15:25:8b: 0d:27:34:08:f6:9d:63:fd:47:ec:9b:e7:78:99:28: 0e:7e:8d:b0:17:b0:88:a4:e9:be:e6:b7:fe:91:ce: 1f:8b:f4:53:5c:54:e7:f5:1a:9c:2e:66:19:98:74: 1d:d4:14:0a:ac:19:58:86:e3:9b:e3:8f:01:4d:41: 12:a2:65:04:57:d2:1b:27:bf:a1:ce:01:3a:e0:1a: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:AA:BB:EA:BB:D9:C8:18:72:49:47:C8:C7:9A:9A:62:C9:BB:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3fa74bf9-08ac-3d1e-9a93-3e6a2e7c62d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e6:83:ba:b8:b6:5b:d4:37:f6:f5:be:3f:12:24:4c:3f:37: cc:95:bb:19:a7:ce:95:91:10:dd:96:fc:0e:9e:e4:01:84:d6: 5c:47:e0:36:19:89:43:55:00:80:d9:c6:6e:55:a7:f2:c7:a9: 69:37:30:dd:1a:b1:44:e7:1a:ee:3f:28:d0:e6:a0:f5:7c:0c: 5e:46:65:44:be:7c:d9:14:4f:0e:b8:7e:e8:37:30:56:75:b1: 72:53:5d:fd:fa:49:55:4a:4f:b2:9d:f4:9a:5c:80:b6:09:b4: fe:91:ae:6c:6d:c2:24:74:c3:f2:93:70:42:c3:2b:05:a1:e0: 16:c8:c9:ac:a0:28:ef:d2:b4:b2:1d:d7:51:9d:4d:94:c9:c6: e6:8d:ab:bb:c2:ea:97:ae:e8:73:31:3b:a7:0f:d7:4d:a7:d2: 30:7e:64:4f:2c:36:2d:28:7e:27:73:49:ed:fa:38:af:fd:bb: 90:5f:5d:e1:08:6e:79:0d:8e:14:4d:bf:c4:81:94:4e:80:ac: 82:64:a8:fc:5c:08:d6:79:b8:90:8d:29:96:9c:b5:f5:4a:77: f9:de:e6:24:30:32:8d:be:83:6b:93:23:21:cd:1d:2d:0b:8e: be:88:0d:78:ab:49:5c:49:13:43:ec:08:3e:88:1d:f4:fe:1f: de:1a:a7:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGxKuKkmTkdnRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MWEyYmE2NzYtYzU5Mi00NjY4LTk0MjctMjM3ZDJkYmZlYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp29fgjkHN//pAanOOzpMc+OaFaLdBVpfRZJv PPcmB0p9+8kXIOeSa+8Y5cB8OTr8jHKJzWjbV6BT4VqZXkUbuN8U/VU/FsNrcgjZ 5V3sp6OpOau0VMe9qwNGxRIA9kLIp/qQh/2+z3dFIEgM59HCSb2LSFKnx6hcNIsk J9TMpIFU/cA+owUqTAkJCS+k/GvvdXvcLY48MBfHbR8Dbz+lAo1VBJSzYvIi+73X uMMhLqIVJYsNJzQI9p1j/Ufsm+d4mSgOfo2wF7CIpOm+5rf+kc4fi/RTXFTn9Rqc LmYZmHQd1BQKrBlYhuOb448BTUESomUEV9IbJ7+hzgE64BqWawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSfqrvqu9nIGHJJR8jHmppiybscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvM2ZhNzRiZjktMDhhYy0z ZDFlLTlhOTMtM2U2YTJlN2M2MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClvzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHmg7q4tlvUN/b1vj8SJEw/N8yVuxmnzpWREN2W/A6e5AGE1lxH4DYZ iUNVAIDZxm5Vp/LHqWk3MN0asUTnGu4/KNDmoPV8DF5GZUS+fNkUTw64fug3MFZ1 sXJTXf36SVVKT7Kd9JpcgLYJtP6RrmxtwiR0w/KTcELDKwWh4BbIyaygKO/StLId 11GdTZTJxuaNq7vC6peu6HMxO6cP102n0jB+ZE8sNi0ofidzSe36OK/9u5BfXeEI bnkNjhRNv8SBlE6ArIJkqPxcCNZ5uJCNKZactfVKd/ne5iQwMo2+g2uTIyHNHS0L jr6IDXirSVxJE0PsCD6IHfT+H94apx0= -----END CERTIFICATE-----Generated at Sun Nov 16 22:06:44 2025 by rpki-client