$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/41bae3c9-59a4-3347-b59d-fd4b5a12a273.roa File: 41bae3c9-59a4-3347-b59d-fd4b5a12a273.roa (raw, json) Hash identifier: y+iwkLZd6Ng5QYXEFVJtN1bnXIbkPhk9K05nLGcJIBo= Subject key identifier: 81:31:1B:6D:61:C1:D7:94:A1:96:98:A7:32:71:AC:8D:2E:85:DC:48 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306B8567253D6C58B31600 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/41bae3c9-59a4-3347-b59d-fd4b5a12a273.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 15313 IP address blocks: 150.252.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6b:85:67:25:3d:6c:58:b3:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=a24cad45-ca59-4e57-b9dc-09e5e21e90fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:63:86:fb:45:90:41:4b:5f:3e:15:aa:7e: b4:3c:51:0b:8e:1b:c1:d2:fc:90:16:1d:97:12:4d: 43:a1:24:6d:83:be:68:e8:0f:41:d9:eb:e2:b7:30: 1e:8b:84:23:88:10:5f:6c:58:d6:64:c1:bb:44:ac: cf:6d:63:81:61:97:df:f1:49:0d:fd:7a:1b:d0:0b: 88:6e:9b:84:0e:a2:f2:74:f1:fa:ab:91:92:94:01: fa:71:c4:b7:f7:15:2a:44:0d:15:36:bc:28:55:01: 50:c8:00:61:2e:12:09:36:17:00:84:ec:ea:e4:d6: 92:1e:3b:51:1c:ba:fc:5c:e1:df:50:4c:0f:9f:b8: d3:80:1b:b9:1a:95:1c:ed:a5:3c:a7:89:2a:62:61: 6d:3b:fa:d0:1d:e2:0e:19:fd:76:bf:d5:5d:b9:5e: 7f:64:f1:3b:ce:09:31:72:fd:be:f1:b6:f6:6c:49: ed:c7:fe:13:5a:ef:6e:ab:a9:62:96:0c:ef:1a:e3: 21:e7:ad:67:6f:f7:41:35:87:fa:d9:24:86:6a:61: 68:5f:33:6c:3b:d7:fb:87:34:67:78:26:58:b5:4d: 4b:0e:8e:32:cf:b6:af:34:86:df:a6:c9:4c:fc:a4: 8a:1b:0e:ad:4d:39:ac:d5:5c:69:47:03:0e:a3:ea: 2f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:31:1B:6D:61:C1:D7:94:A1:96:98:A7:32:71:AC:8D:2E:85:DC:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/41bae3c9-59a4-3347-b59d-fd4b5a12a273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:74:71:98:05:6e:3e:62:d9:a3:5d:19:b9:82:8c:62:96:b7: d8:2c:c0:16:c1:a7:6f:86:d2:ed:4c:f5:81:ce:93:aa:6c:e7: 31:c6:5b:7a:91:8f:72:76:03:46:3d:40:70:18:e8:08:db:c3: 47:ad:d4:d3:27:ce:60:0b:ad:a3:a8:d3:9f:dc:b3:ba:51:6c: cf:75:8f:2d:ea:78:ff:27:b6:35:4f:9e:5a:66:d3:a8:a6:92: 6b:84:53:d5:73:ac:3d:9a:b3:56:5b:71:72:d3:f2:04:49:c3: 27:16:79:cf:6c:9c:e9:51:53:d0:4c:7c:81:e0:17:08:6d:1d: 39:4b:cd:dd:ac:02:c9:78:af:81:4f:d9:98:89:37:43:60:89: 19:cb:36:a1:4a:6e:62:f0:09:00:26:d8:9c:1e:2a:31:32:29: 6b:95:a2:4f:a8:f3:ba:27:69:3c:fc:5e:65:7c:fa:48:22:7c: 58:56:41:87:f2:18:51:78:44:fb:f3:fe:83:84:dd:0f:6c:47: 64:47:1a:48:b7:ae:ad:bd:44:2a:60:ea:d5:f5:6f:8e:25:4b: 9c:ad:db:43:10:3b:3b:6f:21:57:27:74:e5:2a:65:76:21:6b: 47:76:a0:eb:e4:e2:de:7c:be:9c:e5:6a:b3:c6:bb:e6:23:cb: 9d:a4:4e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGuFZyU9bFizFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk YTI0Y2FkNDUtY2E1OS00ZTU3LWI5ZGMtMDllNWUyMWU5MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfJjhvtFkEFLXz4Vqn60PFELjhvB0vyQFh2X Ek1DoSRtg75o6A9B2evitzAei4QjiBBfbFjWZMG7RKzPbWOBYZff8UkN/Xob0AuI bpuEDqLydPH6q5GSlAH6ccS39xUqRA0VNrwoVQFQyABhLhIJNhcAhOzq5NaSHjtR HLr8XOHfUEwPn7jTgBu5GpUc7aU8p4kqYmFtO/rQHeIOGf12v9VduV5/ZPE7zgkx cv2+8bb2bEntx/4TWu9uq6lilgzvGuMh561nb/dBNYf62SSGamFoXzNsO9f7hzRn eCZYtU1LDo4yz7avNIbfpslM/KSKGw6tTTms1VxpRwMOo+ovrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIExG21hwdeUoZaYpzJxrI0uhdxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvNDFiYWUzYzktNTlhNC0z MzQ3LWI1OWQtZmQ0YjVhMTJhMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp0cZgFbj5i2aNdGbmCjGKWt9gswBbBp2+G0u1M9YHOk6ps5zHGW3qR j3J2A0Y9QHAY6Ajbw0et1NMnzmALraOo05/cs7pRbM91jy3qeP8ntjVPnlpm06im kmuEU9VzrD2as1ZbcXLT8gRJwycWec9snOlRU9BMfIHgFwhtHTlLzd2sAsl4r4FP 2ZiJN0NgiRnLNqFKbmLwCQAm2JweKjEyKWuVok+o87onaTz8XmV8+kgifFhWQYfy GFF4RPvz/oOE3Q9sR2RHGki3rq29RCpg6tX1b44lS5yt20MQOztvIVcndOUqZXYh a0d2oOvk4t58vpzlarPGu+Yjy52kTkM= -----END CERTIFICATE-----Generated at Sun Nov 16 22:06:57 2025 by rpki-client