$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/47e7bc57-6df6-3fd3-97fa-6308422f2f39.roa File: 47e7bc57-6df6-3fd3-97fa-6308422f2f39.roa (raw, json) Hash identifier: WmgJnMwOg9aY58VONUGEiE5aoYYTy1AQ0MmxfJbHEII= Subject key identifier: C2:8F:BD:9F:13:9E:46:94:0E:26:DC:16:9A:AE:FE:AD:2F:7C:8E:30 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306CC0549528F2AC353340 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/47e7bc57-6df6-3fd3-97fa-6308422f2f39.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 150.252.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6c:c0:54:95:28:f2:ac:35:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=2db352cd-be7f-4047-a55e-97c8fb06c874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e3:8d:d5:c7:d2:d6:f4:3d:da:d3:23:ed:72: fc:d9:7f:ec:56:ad:5a:89:78:87:f7:f4:6e:d1:f4: 53:19:e8:b9:6f:33:aa:ab:4e:b2:4a:57:1b:63:b0: d9:46:35:6e:e8:ef:7a:bc:d4:f6:26:ca:f4:e0:de: 93:92:90:8e:8a:ca:e7:97:6d:4b:d8:38:1a:f3:df: 81:67:1c:d1:cf:dd:fc:87:d7:9a:74:02:63:2c:4a: 2e:bb:65:ba:6d:2f:5d:c2:60:7e:39:b8:a3:dd:74: a5:5f:3f:24:94:19:25:f5:9c:81:37:2e:bb:e0:37: 21:37:dc:98:6f:44:93:3c:95:01:32:c0:90:08:4f: 16:58:13:53:cf:b3:cf:6c:78:71:c8:b6:77:9f:ee: f0:88:62:0d:34:76:ee:b3:6c:e9:a8:03:f5:d9:19: e3:7b:2d:a6:94:e8:4c:68:a2:ce:ab:22:fd:19:4e: 74:15:c5:b1:86:dc:40:a3:f0:41:6b:40:17:5d:51: d7:78:73:00:3b:a7:18:93:df:ea:72:d7:fc:ee:c8: a5:83:81:0d:22:7c:9e:cd:39:39:e2:be:15:e5:e4: 63:1e:7b:24:43:66:ae:1d:9f:56:45:36:9a:8b:9c: 7e:f9:57:f9:af:5c:16:68:75:4f:4d:ec:6c:2c:ff: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8F:BD:9F:13:9E:46:94:0E:26:DC:16:9A:AE:FE:AD:2F:7C:8E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/47e7bc57-6df6-3fd3-97fa-6308422f2f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7a:81:5c:6f:1c:42:f3:43:d6:19:b0:da:ca:1f:7e:57:5e: b5:c4:d5:a0:33:df:41:99:85:b2:e4:dd:a3:9f:f6:f7:0f:0a: 24:49:da:33:23:b6:d9:e4:95:83:50:47:c0:3e:b7:b3:e8:0b: 55:de:a4:d1:a4:ec:d7:5d:af:3d:96:e5:3a:41:63:ab:5c:af: 87:db:53:d2:79:ad:c7:03:98:69:28:9a:18:21:e9:e6:11:80: 89:13:8b:02:6d:7b:29:a1:1c:6f:d8:65:fe:8d:f1:60:70:95: 51:01:1b:ed:0c:d8:69:68:7a:1f:9e:44:cd:04:8a:d0:a4:91: 29:dd:b7:11:38:4a:6e:f6:cb:1d:99:f2:21:2c:1a:e3:46:dd: a4:26:20:29:49:7d:d8:3c:a4:ea:c8:74:cd:02:51:c7:f0:3f: 54:d3:7c:5a:f7:a4:09:7e:2e:a6:59:21:f0:f6:d0:f0:e7:81: f1:fa:29:b7:1d:a6:48:04:6a:cd:80:87:da:4d:76:ba:ef:37: 48:de:55:15:d6:ea:61:28:72:0b:b6:4f:25:c3:8d:f4:d4:e4: c5:c7:1a:87:bd:0e:b4:69:0e:95:18:66:f0:a4:fc:16:13:91: 9d:e9:a9:f3:6d:9b:79:03:45:ce:c5:a7:d2:49:64:e9:fd:41: ef:b8:08:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGzAVJUo8qw1M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MmRiMzUyY2QtYmU3Zi00MDQ3LWE1NWUtOTdjOGZiMDZjODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OON1cfS1vQ92tMj7XL82X/sVq1aiXiH9/Ru 0fRTGei5bzOqq06ySlcbY7DZRjVu6O96vNT2Jsr04N6TkpCOisrnl21L2Dga89+B ZxzRz938h9eadAJjLEouu2W6bS9dwmB+Obij3XSlXz8klBkl9ZyBNy674DchN9yY b0STPJUBMsCQCE8WWBNTz7PPbHhxyLZ3n+7wiGINNHbus2zpqAP12Rnjey2mlOhM aKLOqyL9GU50FcWxhtxAo/BBa0AXXVHXeHMAO6cYk9/qctf87silg4ENInyezTk5 4r4V5eRjHnskQ2auHZ9WRTaai5x++Vf5r1wWaHVPTexsLP+Y6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKPvZ8TnkaUDibcFpqu/q0vfI4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvNDdlN2JjNTctNmRmNi0z ZmQzLTk3ZmEtNjMwODQyMmYyZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClvzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN6gVxvHELzQ9YZsNrKH35XXrXE1aAz30GZhbLk3aOf9vcPCiRJ2jMj ttnklYNQR8A+t7PoC1XepNGk7Nddrz2W5TpBY6tcr4fbU9J5rccDmGkomhgh6eYR gIkTiwJteymhHG/YZf6N8WBwlVEBG+0M2Gloeh+eRM0EitCkkSndtxE4Sm72yx2Z 8iEsGuNG3aQmIClJfdg8pOrIdM0CUcfwP1TTfFr3pAl+LqZZIfD20PDngfH6Kbcd pkgEas2Ah9pNdrrvN0jeVRXW6mEocgu2TyXDjfTU5MXHGoe9DrRpDpUYZvCk/BYT kZ3pqfNtm3kDRc7Fp9JJZOn9Qe+4CBg= -----END CERTIFICATE-----Generated at Sun Nov 16 22:08:09 2025 by rpki-client