$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa File: 856a6587-3b63-3174-9775-a30ce7def824.roa (raw, json) Hash identifier: ntvIWdUXoIhUvJT0p+lRr3BMmm40Hxo/iaTkSuUvdpQ= Subject key identifier: 07:ED:46:D2:AE:56:06:C1:2E:FF:08:91:EC:1B:FC:6B:D7:36:18:36 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306CAEFFBDBFC21665BE80 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 150.252.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6c:ae:ff:bd:bf:c2:16:65:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=3625cfe6-4a31-400e-a4ad-58887e05094d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:d6:1f:7d:9f:ea:a7:09:27:79:15:3f:59: 4f:f2:23:5f:d7:9d:44:50:7c:83:d1:06:12:78:f5: 2d:6f:3c:43:2b:a1:c9:b7:c9:19:47:ab:2d:f6:98: f6:68:db:4c:db:d6:1e:a3:6d:82:09:06:82:74:5c: fe:e5:5f:5c:46:ce:90:0c:fa:06:56:91:08:79:95: 7c:6c:f8:06:fc:6b:49:49:4a:e8:f7:02:20:04:66: b6:7e:f6:c4:4a:78:f5:60:3c:ed:1e:10:46:af:f5: 81:fc:4d:e4:b5:58:ad:fc:93:03:05:69:5a:1e:9b: 6d:67:3d:71:38:aa:55:53:8c:29:75:6e:82:73:88: f7:1f:e2:24:49:3e:b9:14:91:7c:cd:11:56:82:ef: ee:f0:36:7b:19:fc:77:ea:82:33:23:3f:0e:08:84: cf:d6:bb:57:d2:d0:39:27:90:71:bd:5f:52:2a:e6: be:cd:7c:f2:07:68:11:95:f2:92:ee:88:76:fb:fd: a3:df:6b:9e:7c:5c:15:04:c7:f2:e4:e2:26:3e:c5: ae:10:8a:fb:7c:36:d8:34:31:7d:4e:53:9a:f7:03: 7f:11:0e:b1:98:95:ef:a9:31:49:ff:f0:92:e6:37: 3c:fe:16:12:b4:c3:af:f2:21:eb:95:45:ed:e9:67: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:ED:46:D2:AE:56:06:C1:2E:FF:08:91:EC:1B:FC:6B:D7:36:18:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:79:05:03:98:e9:6f:b4:d0:fd:de:e4:5b:8d:5b:2e:e3:a6: 1a:29:7e:4b:a5:83:6b:31:46:6c:b3:73:0b:98:df:3c:24:9a: a2:d7:46:9e:21:bf:b2:2e:8d:b8:65:2f:fc:d1:46:20:6b:45: 39:ea:96:a5:7c:a6:12:ad:a7:e9:b7:e0:35:fb:85:03:a7:e2: ba:67:91:48:7a:41:34:1f:bd:c6:61:e6:0e:5d:7b:d9:f9:98: 7f:bf:7f:98:c3:45:3c:e3:40:34:4a:8c:12:86:5a:3d:45:22: 25:73:21:fb:51:4e:39:88:ce:39:86:3a:00:9d:64:3f:9d:cf: 05:e6:72:5f:4e:e7:77:42:3b:16:9f:b8:0e:ab:ea:78:e9:7a: 4a:86:ea:34:e2:d1:7a:1f:11:ae:96:d4:79:30:bb:4d:80:67: 37:57:f1:31:01:ee:25:d6:0c:5a:6c:51:a7:22:0f:c8:39:39: d2:05:11:ef:b5:40:42:41:75:84:a5:41:59:18:f3:ff:1d:95: 07:91:d0:21:75:d3:64:46:8b:68:43:ad:fa:a9:99:d0:b0:68: 95:66:f1:08:c5:05:8d:45:5f:ef:53:4c:03:3f:33:b7:6d:91: 7c:d6:0f:ba:42:57:dd:69:21:b1:1b:34:bd:ca:8e:4a:d8:00: 3e:69:36:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGyu/72/whZlvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MzYyNWNmZTYtNGEzMS00MDBlLWE0YWQtNTg4ODdlMDUwOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6DWH32f6qcJJ3kVP1lP8iNf151EUHyD0QYS ePUtbzxDK6HJt8kZR6st9pj2aNtM29Yeo22CCQaCdFz+5V9cRs6QDPoGVpEIeZV8 bPgG/GtJSUro9wIgBGa2fvbESnj1YDztHhBGr/WB/E3ktVit/JMDBWlaHpttZz1x OKpVU4wpdW6Cc4j3H+IkST65FJF8zRFWgu/u8DZ7Gfx36oIzIz8OCITP1rtX0tA5 J5BxvV9SKua+zXzyB2gRlfKS7oh2+/2j32uefFwVBMfy5OImPsWuEIr7fDbYNDF9 TlOa9wN/EQ6xmJXvqTFJ//CS5jc8/hYStMOv8iHrlUXt6WfoewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAftRtKuVgbBLv8Ikewb/GvXNhg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvODU2YTY1ODctM2I2My0z MTc0LTk3NzUtYTMwY2U3ZGVmODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG95BQOY6W+00P3e5FuNWy7jphopfkulg2sxRmyzcwuY3zwkmqLXRp4h v7IujbhlL/zRRiBrRTnqlqV8phKtp+m34DX7hQOn4rpnkUh6QTQfvcZh5g5de9n5 mH+/f5jDRTzjQDRKjBKGWj1FIiVzIftRTjmIzjmGOgCdZD+dzwXmcl9O53dCOxaf uA6r6njpekqG6jTi0XofEa6W1Hkwu02AZzdX8TEB7iXWDFpsUaciD8g5OdIFEe+1 QEJBdYSlQVkY8/8dlQeR0CF102RGi2hDrfqpmdCwaJVm8QjFBY1FX+9TTAM/M7dt kXzWD7pCV91pIbEbNL3KjkrYAD5pNsM= -----END CERTIFICATE-----Generated at Sun Nov 16 22:13:04 2025 by rpki-client