$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/7dc652a4-4048-3d88-a9f4-80f818c6a44f.roa File: 7dc652a4-4048-3d88-a9f4-80f818c6a44f.roa (raw, json) Hash identifier: 1u7FM9MBgUQyMEnY+IVeLn4nNU1RwbQTBT4ItTWS6z4= Subject key identifier: 42:BA:92:B1:46:F5:12:07:3F:46:D8:B3:B8:3A:30:BE:C8:68:F4:04 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306CF1AE240FBD5EA16680 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/7dc652a4-4048-3d88-a9f4-80f818c6a44f.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 150.252.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6c:f1:ae:24:0f:bd:5e:a1:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=d23bd271-b536-432d-808f-885246b9dab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:4f:5b:f4:dd:c2:38:37:33:29:f7:90:71: f5:7c:ee:51:46:a8:ac:78:c5:17:51:a5:06:61:31: c8:ad:f8:15:d3:93:76:63:6c:dc:40:c6:73:52:40: 2e:f7:95:ed:a7:ca:43:cc:fc:3a:c4:b5:72:33:e8: 46:f1:ee:96:4f:e7:86:0e:e4:5f:f0:c6:5b:f7:70: a0:c2:f0:87:30:22:bd:39:10:d5:35:eb:0a:15:4a: 5e:7c:c9:50:34:a4:12:dd:c2:04:c9:cc:8b:53:a0: cb:4e:69:61:0c:b1:08:dc:16:a7:ba:24:9a:a9:fb: e0:e3:a4:dc:3c:fc:81:15:7f:dc:1d:88:75:03:18: a9:d4:2c:6d:6e:41:03:b4:4e:bc:0f:62:0d:49:d7: bd:3a:6b:3a:c3:80:6e:75:3c:8c:28:9e:a6:9f:cd: 29:f4:8c:36:b6:a6:c1:9c:61:79:96:76:e1:29:4e: 51:83:f3:34:52:0d:dd:5b:40:3f:65:99:57:8a:31: ed:5c:34:8a:ca:9d:34:fc:29:02:c4:b6:74:e0:0a: 9e:56:e8:09:c2:07:7e:b6:6e:32:50:8d:e3:b3:33: fe:78:33:e1:a3:0f:6a:b1:c5:65:c6:51:ed:d3:71: 37:d0:2d:70:59:6b:7d:cb:0c:ea:e9:53:30:05:6e: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BA:92:B1:46:F5:12:07:3F:46:D8:B3:B8:3A:30:BE:C8:68:F4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/7dc652a4-4048-3d88-a9f4-80f818c6a44f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5a:5e:39:1d:0f:1c:4a:9f:1f:91:d0:ce:3c:4c:ed:b8:f1: ad:58:a9:f4:2f:1e:f0:1b:b5:45:d0:c0:b4:fd:af:d4:66:b2: 1e:c5:c7:bc:46:96:0c:91:97:8f:0b:0a:ad:5d:15:52:8f:a7: 7c:1e:d3:79:3c:db:96:81:dd:fa:14:41:b5:dd:64:6f:f7:7b: 7e:c9:80:18:b8:77:5c:a8:c1:da:b0:63:55:a4:ab:3f:17:0f: f5:1c:5c:fb:79:b7:1c:2c:6b:c5:a1:a0:c5:a7:e6:91:b1:61: e5:eb:ec:de:6f:65:46:ce:ee:ce:de:07:0c:99:f0:42:0d:81: fd:3d:92:97:83:88:1f:6a:36:ec:24:c3:cb:82:6f:f3:c2:35: 95:df:fa:d7:1c:49:5a:09:2c:92:09:6c:27:08:52:a6:f5:35: ce:11:e0:99:df:ae:e9:35:5b:00:af:d4:e2:aa:d4:a0:84:4f: cb:7f:8a:50:fe:8b:6c:ea:e3:c7:7f:45:bf:a5:e1:88:16:b1: 2b:54:52:3e:b9:3e:b9:d7:03:11:31:54:1c:bf:3c:45:91:30: 11:04:5e:45:24:21:cc:80:e4:11:59:88:8d:a9:43:96:26:3c: 9a:6c:68:9f:26:a6:ad:f3:26:77:ad:2c:55:29:ec:0f:8e:2b: d3:9b:74:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGzxriQPvV6hZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZDIzYmQyNzEtYjUzNi00MzJkLTgwOGYtODg1MjQ2YjlkYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjypPW/Tdwjg3Myn3kHH1fO5RRqiseMUXUaUG YTHIrfgV05N2Y2zcQMZzUkAu95Xtp8pDzPw6xLVyM+hG8e6WT+eGDuRf8MZb93Cg wvCHMCK9ORDVNesKFUpefMlQNKQS3cIEycyLU6DLTmlhDLEI3BanuiSaqfvg46Tc PPyBFX/cHYh1Axip1CxtbkEDtE68D2INSde9Oms6w4BudTyMKJ6mn80p9Iw2tqbB nGF5lnbhKU5Rg/M0Ug3dW0A/ZZlXijHtXDSKyp00/CkCxLZ04AqeVugJwgd+tm4y UI3jszP+eDPhow9qscVlxlHt03E30C1wWWt9ywzq6VMwBW7czQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK6krFG9RIHP0bYs7g6ML7IaPQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvN2RjNjUyYTQtNDA0OC0z ZDg4LWE5ZjQtODBmODE4YzZhNDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVaXjkdDxxKnx+R0M48TO248a1YqfQvHvAbtUXQwLT9r9Rmsh7Fx7xG lgyRl48LCq1dFVKPp3we03k825aB3foUQbXdZG/3e37JgBi4d1yowdqwY1Wkqz8X D/UcXPt5txwsa8WhoMWn5pGxYeXr7N5vZUbO7s7eBwyZ8EINgf09kpeDiB9qNuwk w8uCb/PCNZXf+tccSVoJLJIJbCcIUqb1Nc4R4Jnfruk1WwCv1OKq1KCET8t/ilD+ i2zq48d/Rb+l4YgWsStUUj65PrnXAxExVBy/PEWRMBEEXkUkIcyA5BFZiI2pQ5Ym PJpsaJ8mpq3zJnetLFUp7A+OK9ObdNM= -----END CERTIFICATE-----Generated at Sun Nov 16 22:06:57 2025 by rpki-client