$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa File: a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa (raw, json) Hash identifier: iQH/NKyH6Yf0fLgPqafXoTvOt+v6KhvHorFpg2hYDQY= Subject key identifier: 68:FA:17:AA:19:92:50:DF:E6:7F:44:67:3C:69:04:96:26:AF:71:A5 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584D93254F811399576DBFC81F00 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 15313 IP address blocks: 150.252.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:4f:81:13:99:57:6d:bf:c8:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=e20c4ac0-5aa2-4420-aed2-b5d2a1281786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:18:a5:56:49:92:e6:ee:68:0e:c6:ea:19: 83:5e:ef:db:d4:a9:fa:88:10:d0:af:cc:b2:09:fa: 30:17:78:d6:86:b6:0d:3b:0b:ab:46:ca:ae:a4:3e: 59:3b:df:f3:97:4c:96:d5:7d:81:58:2b:d4:77:4e: 42:01:70:32:48:7b:f7:09:c2:84:d4:68:60:0d:af: af:e2:5d:b0:3c:bc:57:91:f7:d5:78:a3:64:49:6e: 9a:b8:a0:36:4d:a8:42:f1:2d:3a:da:a5:88:4b:d4: 0b:3f:d6:96:7c:56:c5:c7:0b:90:5a:42:1e:77:dd: d3:1e:a7:5f:7c:85:ed:07:98:1a:31:8e:fc:6f:7e: 80:d0:a7:dc:86:dc:54:63:d3:0b:f8:2b:85:01:61: 7f:4f:04:35:37:7f:05:f5:39:c7:f6:bb:6a:34:73: 42:56:09:f1:1a:bd:4b:72:1f:16:a3:51:57:10:30: 44:2c:b2:53:02:d6:32:58:de:0c:cd:d7:fc:6d:62: 1b:20:ce:48:4c:6c:0a:3b:4f:74:68:6f:11:a8:f4: 23:37:76:11:bd:23:ae:5e:eb:73:cb:4c:6d:3d:28: 36:3e:57:bf:44:df:d4:78:09:87:0d:a7:07:e5:81: 2b:6d:55:80:aa:3a:12:75:bd:4e:56:48:2c:e1:f8: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:17:AA:19:92:50:DF:E6:7F:44:67:3C:69:04:96:26:AF:71:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/a9bcbc84-a116-3b19-9bd9-c40a4001f050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3e:c7:f1:38:66:56:ac:bc:73:f4:70:2c:39:9e:34:37:af: a2:6a:1b:17:50:85:83:2f:d1:b6:1d:9c:53:bd:4b:b6:07:f5: bc:24:5c:a1:7f:f9:0d:42:af:b4:dc:0c:a1:2d:5e:74:8b:38: b1:82:00:2b:59:b6:59:6e:25:f5:3f:64:19:2c:a2:38:0a:53: 1c:6b:cb:66:ea:4a:72:59:10:8a:cb:e4:3f:60:df:27:35:0c: 2e:41:05:96:9f:74:9b:da:5a:80:0f:41:bf:d2:d7:41:5d:a6: 4c:cf:f1:a0:15:24:c8:ca:fb:eb:d5:0a:bf:6b:67:06:4c:c6: a1:fd:96:d7:78:82:07:c7:da:d7:e8:63:fb:2c:24:a2:63:f1: bc:e2:bb:d0:42:6f:52:0f:0a:f0:2c:a9:f5:f4:27:c8:00:d0: fc:7b:2a:5d:72:bc:f8:4a:69:dd:a7:65:73:77:d0:81:09:83: 0d:56:a6:05:c4:d0:ed:1d:84:61:fb:ed:55:5c:ff:e1:18:2a: 67:17:21:49:b4:b8:d6:ba:88:50:9e:bf:c9:f0:fb:d9:00:9f: e5:1a:17:36:fd:96:36:57:6b:2b:5b:e8:3c:c8:70:5e:c9:7e: 8d:d4:00:51:ef:62:a8:e6:90:70:84:10:32:6e:e9:bf:36:1b: 25:ed:d2:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJU+BE5lXbb/IHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZTIwYzRhYzAtNWFhMi00NDIwLWFlZDItYjVkMmExMjgxNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluoYpVZJkubuaA7G6hmDXu/b1Kn6iBDQr8yy CfowF3jWhrYNOwurRsqupD5ZO9/zl0yW1X2BWCvUd05CAXAySHv3CcKE1GhgDa+v 4l2wPLxXkffVeKNkSW6auKA2TahC8S062qWIS9QLP9aWfFbFxwuQWkIed93THqdf fIXtB5gaMY78b36A0KfchtxUY9ML+CuFAWF/TwQ1N38F9TnH9rtqNHNCVgnxGr1L ch8Wo1FXEDBELLJTAtYyWN4Mzdf8bWIbIM5ITGwKO090aG8RqPQjN3YRvSOuXutz y0xtPSg2Ple/RN/UeAmHDacH5YErbVWAqjoSdb1OVkgs4fjwsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj6F6oZklDf5n9EZzxpBJYmr3GlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvYTliY2JjODQtYTExNi0z YjE5LTliZDktYzQwYTQwMDFmMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8+x/E4ZlasvHP0cCw5njQ3r6JqGxdQhYMv0bYdnFO9S7YH9bwkXKF/ +Q1Cr7TcDKEtXnSLOLGCACtZtlluJfU/ZBksojgKUxxry2bqSnJZEIrL5D9g3yc1 DC5BBZafdJvaWoAPQb/S10FdpkzP8aAVJMjK++vVCr9rZwZMxqH9ltd4ggfH2tfo Y/ssJKJj8bziu9BCb1IPCvAsqfX0J8gA0Px7Kl1yvPhKad2nZXN30IEJgw1WpgXE 0O0dhGH77VVc/+EYKmcXIUm0uNa6iFCev8nw+9kAn+UaFzb9ljZXaytb6DzIcF7J fo3UAFHvYqjmkHCEEDJu6b82GyXt0iA= -----END CERTIFICATE-----Generated at Fri May 1 17:04:00 2026 by rpki-client