$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e967b58d-661e-3cf2-9702-981573d9fd6a.roa File: e967b58d-661e-3cf2-9702-981573d9fd6a.roa (raw, json) Hash identifier: gNlIL5ruh+W/CeCF3Hg/fUBQshejRnGbHAqmPc3EMSw= Subject key identifier: 20:DA:95:35:2F:E0:B2:F6:EC:76:3A:3C:A1:94:71:D5:2F:0F:C9:E0 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584BD3306C9E2AABA012711A3BD0 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e967b58d-661e-3cf2-9702-981573d9fd6a.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 150.252.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6c:9e:2a:ab:a0:12:71:1a:3b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=6a453a30-59bc-4bbc-96c9-f8f180e3186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:ae:6d:82:da:a5:66:26:f8:6e:fb:11:ce: f7:33:70:47:13:3f:8f:9f:a1:37:54:aa:9b:48:60: bd:e3:17:93:b4:60:a3:be:b3:96:04:9c:e4:8c:7f: 60:fa:7d:0a:b0:ec:8b:aa:6e:f9:44:bc:c2:ea:54: 2f:50:1d:bc:61:a2:01:c3:a9:28:cb:89:9c:5f:09: 18:5e:b8:06:66:d8:c5:4a:10:f0:4c:36:29:15:d3: 4f:0a:61:d1:c4:05:1f:70:35:aa:ec:f1:44:f7:33: b1:f1:e3:d4:0e:75:d5:07:a5:a3:b4:67:f9:e9:00: 22:70:26:67:c2:7b:6f:e3:81:14:ed:a0:80:0f:d8: 2c:31:f6:ab:ec:f7:88:07:10:51:b1:96:41:ff:d9: de:9e:44:7e:46:48:20:15:31:51:1d:f6:93:92:39: 3c:56:96:e6:9e:79:fc:94:da:17:b9:a1:97:e3:a4: 8a:b8:fa:ad:66:79:16:48:ed:29:ee:be:22:9a:f9: c3:ba:60:53:25:38:f3:02:28:22:f4:f3:dd:74:05: 6b:5f:f4:e3:4b:04:24:d1:59:aa:f2:c2:f1:63:d8: f3:13:5f:74:8b:b5:76:51:f2:49:97:0d:b1:3b:6c: 36:3a:0c:f3:67:c5:9d:43:a6:7d:75:bb:25:50:32: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DA:95:35:2F:E0:B2:F6:EC:76:3A:3C:A1:94:71:D5:2F:0F:C9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/e967b58d-661e-3cf2-9702-981573d9fd6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5b:c4:a5:fb:f6:e3:96:ce:ef:7f:0a:36:78:34:41:c4:80: d2:d0:8e:b9:c9:ff:dc:8c:00:9f:90:01:06:20:73:5f:21:96: 3d:aa:33:2d:3f:28:23:6c:d4:3d:19:15:93:0d:16:f4:f3:67: de:9e:f7:e9:5b:b1:f1:0b:e2:83:72:84:45:a1:a7:a2:bb:bb: ee:99:30:ba:14:94:ee:a6:8a:22:d0:e2:db:dd:1e:03:4c:5e: a5:20:ad:1a:ce:be:c1:2f:4e:5f:55:8f:2f:a3:a3:a5:0e:5e: 29:63:5f:5b:09:92:8b:eb:dd:44:fd:df:de:15:1f:4d:83:97: d4:b7:b9:f1:72:a4:68:4c:91:32:e2:9c:61:3f:0b:b3:57:f9: fb:ae:c5:1a:89:53:1c:86:b7:14:4a:83:0f:f1:6c:81:0f:30: 48:0b:20:e4:66:8f:70:7e:b3:92:0b:d1:89:a7:b2:d1:0d:78: cd:84:9d:0a:d9:a9:3f:92:35:a9:43:53:e2:8f:ea:32:55:3a: 75:34:fb:e1:59:b1:ad:62:28:ca:9f:17:03:5f:0e:ec:91:11: 1c:ce:e7:32:85:17:c4:c8:29:5b:11:5a:14:45:2c:ed:de:1e: a4:89:7d:e1:85:39:aa:4e:a7:60:c7:d6:ba:ea:ca:44:11:a3: fd:f5:c3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGyeKqugEnEaO9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk NmE0NTNhMzAtNTliYy00YmJjLTk2YzktZjhmMTgwZTMxODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0+ubYLapWYm+G77Ec73M3BHEz+Pn6E3VKqb SGC94xeTtGCjvrOWBJzkjH9g+n0KsOyLqm75RLzC6lQvUB28YaIBw6koy4mcXwkY XrgGZtjFShDwTDYpFdNPCmHRxAUfcDWq7PFE9zOx8ePUDnXVB6WjtGf56QAicCZn wntv44EU7aCAD9gsMfar7PeIBxBRsZZB/9nenkR+RkggFTFRHfaTkjk8Vpbmnnn8 lNoXuaGX46SKuPqtZnkWSO0p7r4imvnDumBTJTjzAigi9PPddAVrX/TjSwQk0Vmq 8sLxY9jzE190i7V2UfJJlw2xO2w2OgzzZ8WdQ6Z9dbslUDILJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDalTUv4LL27HY6PKGUcdUvD8ngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZTk2N2I1OGQtNjYxZS0z Y2YyLTk3MDItOTgxNTczZDlmZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVbxKX79uOWzu9/CjZ4NEHEgNLQjrnJ/9yMAJ+QAQYgc18hlj2qMy0/ KCNs1D0ZFZMNFvTzZ96e9+lbsfEL4oNyhEWhp6K7u+6ZMLoUlO6miiLQ4tvdHgNM XqUgrRrOvsEvTl9Vjy+jo6UOXiljX1sJkovr3UT9394VH02Dl9S3ufFypGhMkTLi nGE/C7NX+fuuxRqJUxyGtxRKgw/xbIEPMEgLIORmj3B+s5IL0YmnstENeM2EnQrZ qT+SNalDU+KP6jJVOnU0++FZsa1iKMqfFwNfDuyRERzO5zKFF8TIKVsRWhRFLO3e HqSJfeGFOapOp2DH1rrqykQRo/31w/0= -----END CERTIFICATE-----Generated at Sun Nov 16 22:06:55 2025 by rpki-client