$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/57da2b62-c1fa-37cf-8c07-c2211ba11e0e.roa File: 57da2b62-c1fa-37cf-8c07-c2211ba11e0e.roa (raw, json) Hash identifier: XKaOCZct+Gr/W3Z4HSv2QGvbHBZcbH9FRtsZK+N2B+o= Subject key identifier: C4:AA:B5:60:AB:E1:7C:82:88:BE:BB:BB:B6:E3:29:3C:B7:DC:3B:64 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306B749994A55C037D7680 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/57da2b62-c1fa-37cf-8c07-c2211ba11e0e.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 15313 IP address blocks: 150.252.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6b:74:99:94:a5:5c:03:7d:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=d664a819-0da8-40fb-8c91-50570219c6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:de:e1:f1:8a:4d:91:c0:89:6b:6e:30:da:9b: 6e:54:c2:33:b5:f6:ea:a8:03:09:4a:9e:dd:57:02: 66:51:41:cd:d2:86:8c:67:b2:25:d4:0d:37:ff:7b: b6:f9:77:fc:a9:3e:f2:64:c5:f6:e0:f5:e3:81:ec: 29:79:e6:71:87:c7:52:63:21:8c:14:e9:2d:99:d0: b0:92:14:70:ca:a9:18:af:b0:cc:4a:01:33:71:5a: 08:78:b7:5b:a5:6d:ba:12:7b:a5:2b:fd:6f:86:eb: 03:d8:12:b6:6c:eb:20:9b:1d:da:a8:a4:4a:10:b7: 9b:fd:06:48:e3:87:60:43:b8:d9:8a:e4:72:28:e6: 12:09:01:fc:7b:e8:85:cd:ce:86:19:b4:4d:5d:02: aa:ec:85:3a:80:80:3c:ff:e5:85:7b:91:56:aa:c7: 49:c4:87:94:a9:01:be:61:6a:cd:31:2a:7f:fc:fd: ac:25:61:6b:c8:16:49:31:9c:7f:78:48:c9:4d:e3: 7b:7f:fa:dd:71:92:14:e8:08:c2:d1:f3:3e:ac:88: a0:c8:2e:ab:c0:03:71:48:a6:ae:60:9d:9d:91:9d: 53:5a:8b:dc:b0:8a:33:a8:e1:88:12:dd:37:18:db: ac:e1:6d:27:96:3d:2a:f6:66:4d:af:8e:7c:a9:ee: bc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AA:B5:60:AB:E1:7C:82:88:BE:BB:BB:B6:E3:29:3C:B7:DC:3B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/57da2b62-c1fa-37cf-8c07-c2211ba11e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:84:4c:2f:f4:f9:b7:0a:98:e6:cd:f4:de:89:b2:a7:b1:fe: fb:6d:43:fe:8d:fe:e4:78:88:08:cb:be:cc:b0:21:a3:db:63: 33:d0:81:d4:5f:c3:63:12:91:23:32:9f:6d:06:09:85:4a:37: 29:7e:e0:67:11:db:08:0d:68:65:63:bb:65:1c:3c:02:62:e8: 8e:48:83:79:20:40:06:ce:b5:d6:47:2e:58:19:95:9f:fe:44: 13:54:ff:27:6e:60:42:18:6a:c8:93:f3:64:a5:c3:9a:12:12: e6:d1:d4:58:73:e7:3c:60:32:03:6f:34:6d:19:bc:40:33:cd: b2:3d:ff:b4:20:c8:c2:71:d9:ae:40:47:bd:80:cb:12:d4:3c: aa:2c:02:a1:f3:27:73:d4:f5:fa:a4:46:e9:e5:b5:8e:cc:10: b9:80:c0:9b:38:ca:59:72:1d:7e:c2:5e:66:1a:56:e1:31:e5: e5:3c:13:90:d7:8c:2e:c5:c7:7c:95:ad:9f:04:16:f3:38:c0: 92:64:9e:72:6b:d7:c6:b8:d0:10:7d:af:ee:66:27:e1:4b:fb: f4:83:58:87:3f:0b:12:c0:d4:65:cc:ad:ac:87:a6:4b:31:ce: 15:14:21:80:b1:5c:2c:59:cd:e3:ec:26:5e:e3:c3:41:12:a6: 7d:9d:f8:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGt0mZSlXAN9doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZDY2NGE4MTktMGRhOC00MGZiLThjOTEtNTA1NzAyMTljNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt7h8YpNkcCJa24w2ptuVMIztfbqqAMJSp7d VwJmUUHN0oaMZ7Il1A03/3u2+Xf8qT7yZMX24PXjgewpeeZxh8dSYyGMFOktmdCw khRwyqkYr7DMSgEzcVoIeLdbpW26EnulK/1vhusD2BK2bOsgmx3aqKRKELeb/QZI 44dgQ7jZiuRyKOYSCQH8e+iFzc6GGbRNXQKq7IU6gIA8/+WFe5FWqsdJxIeUqQG+ YWrNMSp//P2sJWFryBZJMZx/eEjJTeN7f/rdcZIU6AjC0fM+rIigyC6rwANxSKau YJ2dkZ1TWovcsIozqOGIEt03GNus4W0nlj0q9mZNr458qe68BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSqtWCr4XyCiL67u7bjKTy33DtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvNTdkYTJiNjItYzFmYS0z N2NmLThjMDctYzIyMTFiYTExZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCETC/0+bcKmObN9N6Jsqex/vttQ/6N/uR4iAjLvsywIaPbYzPQgdRf w2MSkSMyn20GCYVKNyl+4GcR2wgNaGVju2UcPAJi6I5Ig3kgQAbOtdZHLlgZlZ/+ RBNU/yduYEIYasiT82Slw5oSEubR1Fhz5zxgMgNvNG0ZvEAzzbI9/7QgyMJx2a5A R72AyxLUPKosAqHzJ3PU9fqkRunltY7MELmAwJs4yllyHX7CXmYaVuEx5eU8E5DX jC7Fx3yVrZ8EFvM4wJJknnJr18a40BB9r+5mJ+FL+/SDWIc/CxLA1GXMrayHpksx zhUUIYCxXCxZzePsJl7jw0ESpn2d+DI= -----END CERTIFICATE-----Generated at Sun Nov 16 22:08:12 2025 by rpki-client