$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e2f7e278-f16d-3808-87f8-455ca138f75e.roa File: e2f7e278-f16d-3808-87f8-455ca138f75e.roa (raw, json) Hash identifier: a51OlKf+ZcUdYG0g2BquyvmLj1sLmnRsSHKIIz9H6Hc= Subject key identifier: 02:9C:DF:99:D0:C1:C0:59:A0:E4:01:DB:33:CA:7C:0D:6C:ED:C3:A5 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306C676F5EBA652C769980 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e2f7e278-f16d-3808-87f8-455ca138f75e.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 150.252.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6c:67:6f:5e:ba:65:2c:76:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=2d4b82ba-9500-4cbf-b7cf-c5581431f998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b4:b1:1e:63:ad:47:e2:71:08:cd:e5:73:57: 3b:cb:6c:04:5f:0e:07:56:95:78:ce:18:cd:94:75: 1e:e3:85:ae:af:ac:ff:bf:ab:3d:16:2b:05:16:c0: 44:62:b9:a2:52:e6:29:45:25:e5:32:25:78:ef:65: 4d:65:f3:8d:e6:c0:7d:e4:02:bc:ff:3e:14:17:53: 4f:09:c3:c1:eb:5f:62:cc:41:ac:12:f2:de:04:67: 58:46:ce:20:4a:5f:bd:04:00:61:1d:aa:00:87:9b: 13:25:0f:30:5e:d4:b5:30:37:04:8d:a2:0f:51:02: 92:76:8e:81:b5:f8:58:f4:47:e7:37:1e:49:db:5c: 7c:b2:12:30:b3:db:c8:2c:a7:84:d4:39:f0:1e:71: 2b:99:20:ab:81:04:ad:e0:fb:74:6c:0c:ee:ae:20: 64:5e:e1:6a:ea:9a:fc:c9:8f:89:91:ae:26:3f:00: 8b:28:70:c4:e6:79:af:e4:3f:82:a5:a0:8a:b3:91: 5a:f1:ae:9e:bd:95:e5:9a:8a:68:1b:32:76:a4:51: 28:b7:41:fb:5e:ce:1c:8f:0d:72:e5:e0:15:b1:a5: 06:8d:c7:24:16:81:0b:cb:0a:27:20:9f:8b:d0:09: 28:4c:df:2b:00:4b:7b:69:54:47:d9:b5:7d:f4:6a: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9C:DF:99:D0:C1:C0:59:A0:E4:01:DB:33:CA:7C:0D:6C:ED:C3:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e2f7e278-f16d-3808-87f8-455ca138f75e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d7:c0:f4:e9:6e:06:a6:92:14:ad:10:86:e4:98:c9:67:5c: 35:81:96:03:56:ab:9d:6a:6b:92:d4:f9:d7:31:79:7d:c8:de: 83:dd:80:cf:d8:bd:78:22:66:f3:2a:ba:ff:60:bb:ff:ed:90: df:1e:84:ac:ff:24:8d:c5:37:77:a5:5f:d2:8e:68:18:c0:78: 7d:c1:97:67:a1:2f:85:4e:6d:24:35:8b:a0:e4:ca:36:03:9b: 66:e5:4e:6d:d6:b5:4d:a8:be:70:67:62:a5:15:7d:6b:14:05: b9:54:eb:8c:44:24:1c:9d:d1:db:38:94:da:93:7a:c6:75:ac: 49:8c:3b:16:8e:ae:0e:85:db:99:e4:eb:dc:2a:fa:98:e6:d0: c3:c7:56:3a:c2:cb:ad:43:23:a1:02:3c:a4:bd:00:a2:42:bc: 1b:6c:9e:2c:77:21:0c:9d:24:f1:6e:c0:d0:b9:bc:4d:9e:b6: 10:dd:71:36:1e:c8:30:7c:6d:44:be:c1:5e:d4:43:2a:f4:63: 9e:1c:d1:aa:82:34:8c:86:72:c6:1d:9e:08:5f:60:33:78:25: 18:f3:7c:18:57:a2:0f:a5:db:40:84:2f:a2:5c:b4:69:f8:22: 8b:cc:00:6c:09:b4:33:ab:c2:df:e6:f3:56:9f:69:d1:9f:71: b1:8b:40:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGxnb166ZSx2mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MmQ0YjgyYmEtOTUwMC00Y2JmLWI3Y2YtYzU1ODE0MzFmOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrSxHmOtR+JxCM3lc1c7y2wEXw4HVpV4zhjN lHUe44Wur6z/v6s9FisFFsBEYrmiUuYpRSXlMiV472VNZfON5sB95AK8/z4UF1NP CcPB619izEGsEvLeBGdYRs4gSl+9BABhHaoAh5sTJQ8wXtS1MDcEjaIPUQKSdo6B tfhY9EfnNx5J21x8shIws9vILKeE1DnwHnErmSCrgQSt4Pt0bAzuriBkXuFq6pr8 yY+Jka4mPwCLKHDE5nmv5D+CpaCKs5Fa8a6evZXlmopoGzJ2pFEot0H7Xs4cjw1y 5eAVsaUGjcckFoELywonIJ+L0AkoTN8rAEt7aVRH2bV99GrPBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKc35nQwcBZoOQB2zPKfA1s7cOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZTJmN2UyNzgtZjE2ZC0z ODA4LTg3ZjgtNDU1Y2ExMzhmNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLXwPTpbgamkhStEIbkmMlnXDWBlgNWq51qa5LU+dcxeX3I3oPdgM/Y vXgiZvMquv9gu//tkN8ehKz/JI3FN3elX9KOaBjAeH3Bl2ehL4VObSQ1i6DkyjYD m2blTm3WtU2ovnBnYqUVfWsUBblU64xEJByd0ds4lNqTesZ1rEmMOxaOrg6F25nk 69wq+pjm0MPHVjrCy61DI6ECPKS9AKJCvBtsnix3IQydJPFuwNC5vE2ethDdcTYe yDB8bUS+wV7UQyr0Y54c0aqCNIyGcsYdnghfYDN4JRjzfBhXog+l20CEL6JctGn4 IovMAGwJtDOrwt/m81afadGfcbGLQGQ= -----END CERTIFICATE-----Generated at Sun Nov 16 22:08:47 2025 by rpki-client