$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa File: da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa (raw, json) Hash identifier: 0nhdNz3DFbzjGLAEXMI7sJtBL5Y6BZXonW2diD16Ha8= Subject key identifier: 76:88:EE:7C:AC:BE:E3:EF:B3:5B:28:69:9E:05:4E:D3:39:1A:A5:3D Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BCD9B18495AA8639CEF18C7C0 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 393740 IP address blocks: 206.180.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:18:49:5a:a8:63:9c:ef:18:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=55f4d8a0-f3c5-487e-8e78-2ff8d894047d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d0:b6:60:e1:49:ab:c2:a9:bf:e1:f2:56:a2: db:c4:a2:a1:b6:c7:c0:b5:76:f0:89:0b:70:ef:de: d6:57:41:26:e1:b9:87:78:bd:57:ac:8a:4f:5a:0f: 17:e6:3c:ad:91:3e:ee:79:d8:78:54:8c:55:dd:64: 90:6d:f8:73:22:30:43:25:a4:f3:68:ea:d4:f7:ed: 2c:d0:dd:49:cc:63:1e:49:7b:da:15:5d:30:c8:59: 59:34:1c:bd:d1:d9:f3:56:f5:6d:20:fa:3d:2d:71: 81:d8:04:7f:8c:64:c2:09:d8:9f:be:07:82:79:1c: 78:d0:63:7e:a7:c3:49:a2:3c:17:34:6f:7a:12:94: ab:09:da:22:4f:58:17:b4:96:70:98:71:90:eb:61: 87:d8:98:cb:75:05:aa:2c:1d:d5:63:67:47:1f:1b: 3c:6d:71:73:e4:b9:78:1c:10:a2:b7:73:b1:0c:14: b9:1a:8d:e6:81:0d:99:fb:24:e6:2d:e4:d3:06:47: 54:17:5c:48:56:4a:02:6f:57:9f:ad:86:27:93:c3: 25:a4:ac:48:56:85:1b:bd:11:77:0c:54:f5:c2:46: 9e:b6:c0:f6:24:e0:21:83:ee:46:a7:a6:95:e4:49: d7:33:2f:6a:e3:88:b6:bd:f0:c6:cd:ea:bb:96:0f: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:88:EE:7C:AC:BE:E3:EF:B3:5B:28:69:9E:05:4E:D3:39:1A:A5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/da7d95c7-cbbf-3f13-8505-5f1f47811e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 206.180.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7c:15:4d:62:ee:5c:c5:8c:18:b3:71:23:42:8e:20:e5:ff: 81:2b:8d:f7:ba:b3:c4:ff:14:2e:eb:4f:c0:05:41:2a:2f:3b: d3:ef:34:95:5c:a9:0b:d6:6d:dd:4c:2e:e3:bd:5e:04:89:6f: e6:75:53:4a:8d:78:53:99:9f:db:a5:91:da:74:b0:68:7b:21: e4:45:87:70:8c:79:79:99:f6:27:74:24:50:94:d7:7e:78:8c: 9b:72:95:59:5f:82:1e:e1:b2:f5:db:26:26:ac:f6:33:26:d2: 49:75:41:c4:71:46:46:59:6e:42:87:9c:c2:03:8b:5d:00:35: 70:40:44:be:6b:78:6c:1e:e2:62:a7:45:64:ca:4f:c5:07:c4: af:eb:d1:84:06:97:c5:3d:15:87:4e:98:d1:1b:72:37:7a:8f: 70:ef:7d:48:3c:b4:9a:a6:d4:1e:61:fb:ec:ec:79:c9:41:9c: 93:44:bb:21:ed:86:b1:ae:17:a6:a2:24:3d:81:41:76:31:20: 35:51:aa:0e:9d:6f:d6:18:32:1a:d2:9d:a3:73:8d:47:8b:7d: d8:43:63:b7:0a:36:1c:96:01:94:ea:0b:23:1e:b9:3d:5b:5c: 8d:8c:72:fd:52:6f:f9:1e:57:79:cf:9d:89:1c:95:fe:34:28: 39:6b:54:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxhJWqhjnO8Yx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTVmNGQ4YTAtZjNjNS00ODdlLThlNzgtMmZmOGQ4OTQwNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9C2YOFJq8Kpv+HyVqLbxKKhtsfAtXbwiQtw 797WV0Em4bmHeL1XrIpPWg8X5jytkT7uedh4VIxV3WSQbfhzIjBDJaTzaOrU9+0s 0N1JzGMeSXvaFV0wyFlZNBy90dnzVvVtIPo9LXGB2AR/jGTCCdifvgeCeRx40GN+ p8NJojwXNG96EpSrCdoiT1gXtJZwmHGQ62GH2JjLdQWqLB3VY2dHHxs8bXFz5Ll4 HBCit3OxDBS5Go3mgQ2Z+yTmLeTTBkdUF1xIVkoCb1efrYYnk8MlpKxIVoUbvRF3 DFT1wkaetsD2JOAhg+5Gp6aV5EnXMy9q44i2vfDGzeq7lg/uFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaI7nysvuPvs1soaZ4FTtM5GqU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZGE3ZDk1YzctY2JiZi0z ZjEzLTg1MDUtNWYxZjQ3ODExZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzrSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ8FU1i7lzFjBizcSNCjiDl/4Erjfe6s8T/FC7rT8AFQSovO9PvNJVc qQvWbd1MLuO9XgSJb+Z1U0qNeFOZn9ulkdp0sGh7IeRFh3CMeXmZ9id0JFCU1354 jJtylVlfgh7hsvXbJias9jMm0kl1QcRxRkZZbkKHnMIDi10ANXBARL5reGwe4mKn RWTKT8UHxK/r0YQGl8U9FYdOmNEbcjd6j3DvfUg8tJqm1B5h++zseclBnJNEuyHt hrGuF6aiJD2BQXYxIDVRqg6db9YYMhrSnaNzjUeLfdhDY7cKNhyWAZTqCyMeuT1b XI2Mcv1Sb/keV3nPnYkclf40KDlrVOY= -----END CERTIFICATE-----Generated at Sun Nov 16 22:06:53 2025 by rpki-client