$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa File: ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa (raw, json) Hash identifier: ve4gL8Tk3W5WxwHvXa7phEtJNudvvsDT9dIYWrFfXyA= Subject key identifier: F5:4A:48:B3:65:41:BF:DB:BE:42:64:AB:48:13:BA:33:7A:B5:A2:A3 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584AF256838B776B9629B3E69780 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 15313 IP address blocks: 150.252.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:83:8b:77:6b:96:29:b3:e6:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=1ee26470-e219-4ba2-a4db-bfe41bb6c7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:e6:4f:dd:03:2e:c1:95:90:85:3e:23:73: 34:06:7b:b2:70:a9:be:f6:06:cb:1e:e9:f9:4d:df: de:77:bd:a6:55:1c:8e:3a:9a:a7:32:35:65:8a:0c: 7f:49:70:00:74:ad:61:32:c5:e4:4e:58:40:eb:59: fd:43:81:94:d0:72:9e:ea:d1:ea:c7:7f:45:1b:95: 43:4c:34:d4:24:97:cb:fb:cd:bb:ea:08:5c:8f:89: d4:88:ac:41:77:92:fd:81:db:01:6a:5e:c3:8b:d2: 2f:35:db:46:e9:8a:68:84:7e:a2:25:c9:fb:24:24: ad:57:29:dd:41:b1:b4:da:db:f0:0f:7b:23:95:43: 54:95:63:a4:5b:78:29:14:64:7e:0f:49:58:5f:ef: db:e6:54:9c:e9:0d:8e:4e:79:75:1a:bb:8e:18:70: bb:af:e8:17:cf:96:e3:df:5a:ac:58:d0:5d:88:57: 73:82:02:a9:c7:0d:16:f2:af:f2:83:cb:9c:d9:e0: 09:9e:1e:e1:4b:fe:a8:0f:34:9a:9c:40:96:0e:89: 97:c1:32:76:72:19:5e:47:a9:c9:e5:28:31:63:9c: 15:e4:c6:dc:41:bc:b5:23:cb:c7:cd:9e:2c:ab:3f: 52:3e:8b:ae:89:a8:01:8c:57:52:e3:c4:34:80:ff: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4A:48:B3:65:41:BF:DB:BE:42:64:AB:48:13:BA:33:7A:B5:A2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ce7fbd7a-a0d6-3051-9091-597749aa0f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cc:52:9d:b5:3b:4f:0a:a3:67:c6:7d:12:17:31:ef:33:c9: 86:36:32:82:0c:9d:9e:86:ed:fd:92:44:a4:2e:96:d8:d7:d2: f2:6d:ef:fc:a8:8a:7a:81:99:b8:4b:8d:57:14:47:28:7c:53: e6:5a:11:f8:dd:c6:07:62:30:31:02:51:79:3d:44:b0:e1:59: 95:58:23:ec:a3:78:21:94:ee:91:fd:65:18:de:16:15:62:c2: 5b:2a:f0:25:c0:77:7f:07:0c:3d:bd:f7:28:9a:32:db:22:21: da:91:19:d4:38:56:68:c6:92:32:40:a2:03:cc:fa:16:d9:03: 33:e9:d7:c2:11:91:32:21:59:a2:cc:e2:e5:ee:c1:04:02:2c: f4:61:3e:96:68:de:39:81:aa:d8:38:c7:97:33:2e:2b:12:b8: 93:e2:9d:98:78:f9:33:50:b5:4f:99:31:ea:44:b4:1b:b2:c5: 9f:71:54:51:c2:0a:44:93:d7:95:ff:10:a5:06:5f:15:ca:d0: ef:dd:39:8a:b6:0b:87:b7:ea:d4:2e:6a:e3:3d:56:6f:6d:30: d5:e5:28:ce:1d:d0:34:42:2b:5b:a6:be:3a:e6:c0:5f:69:47: e5:91:f3:80:c0:d9:e8:ec:e9:6f:91:82:8c:1d:95:c0:52:91: 62:f3:28:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoOLd2uWKbPml4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MWVlMjY0NzAtZTIxOS00YmEyLWE0ZGItYmZlNDFiYjZjN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w/mT90DLsGVkIU+I3M0BnuycKm+9gbLHun5 Td/ed72mVRyOOpqnMjVligx/SXAAdK1hMsXkTlhA61n9Q4GU0HKe6tHqx39FG5VD TDTUJJfL+8276ghcj4nUiKxBd5L9gdsBal7Di9IvNdtG6YpohH6iJcn7JCStVynd QbG02tvwD3sjlUNUlWOkW3gpFGR+D0lYX+/b5lSc6Q2OTnl1GruOGHC7r+gXz5bj 31qsWNBdiFdzggKpxw0W8q/yg8uc2eAJnh7hS/6oDzSanECWDomXwTJ2chleR6nJ 5SgxY5wV5MbcQby1I8vHzZ4sqz9SPouuiagBjFdS48Q0gP/CqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVKSLNlQb/bvkJkq0gTujN6taKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvY2U3ZmJkN2EtYTBkNi0z MDUxLTkwOTEtNTk3NzQ5YWEwZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLMUp21O08Ko2fGfRIXMe8zyYY2MoIMnZ6G7f2SRKQultjX0vJt7/yo inqBmbhLjVcURyh8U+ZaEfjdxgdiMDECUXk9RLDhWZVYI+yjeCGU7pH9ZRjeFhVi wlsq8CXAd38HDD299yiaMtsiIdqRGdQ4VmjGkjJAogPM+hbZAzPp18IRkTIhWaLM 4uXuwQQCLPRhPpZo3jmBqtg4x5czLisSuJPinZh4+TNQtU+ZMepEtBuyxZ9xVFHC CkST15X/EKUGXxXK0O/dOYq2C4e36tQuauM9Vm9tMNXlKM4d0DRCK1umvjrmwF9p R+WR84DA2ejs6W+RgowdlcBSkWLzKIA= -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:36 2025 by rpki-client