$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa File: f99b7391-85a3-3cb4-a259-107cd981ef97.roa (raw, json) Hash identifier: yXb7UXBrevKg8ukJENrcQ2/YiaxOhxrBxXUma+T4MPo= Subject key identifier: 8D:F2:C3:09:41:4E:B7:8D:49:58:38:2D:48:0C:0B:A1:F2:7F:25:99 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584AF25684467DE470DBE2549C80 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 15313 IP address blocks: 150.252.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:84:46:7d:e4:70:db:e2:54:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=6cc13435-d18e-4be1-a666-f7dcb52cac31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e5:15:21:47:b4:17:6e:09:69:8d:67:0a:32: 7d:c0:d7:3b:fc:b8:3a:37:6c:e5:66:2a:4e:59:23: bd:17:83:7a:bd:7c:b9:6e:28:f9:02:52:0c:6c:8e: 2f:3b:26:7e:63:b6:27:07:0d:93:03:13:02:df:ae: 16:bf:40:2f:50:af:c0:64:8a:3b:14:d5:0f:8c:d7: ad:86:70:fa:4f:2b:54:76:fc:2c:26:c0:0d:f2:58: 87:ce:af:d9:8b:86:33:f2:aa:2f:99:92:34:42:c4: 35:2f:39:4d:ac:2b:ed:56:ab:2e:05:37:4c:af:c2: 87:2d:e3:82:92:15:d7:cb:0b:f3:cf:6c:a3:cd:13: 63:46:fe:d9:d3:36:53:da:b5:32:dd:d3:7c:46:4d: a9:2a:98:da:56:60:f5:9f:0c:ad:4f:19:16:f7:09: 87:be:4e:98:0f:ae:e7:6d:2d:a4:08:7e:74:48:63: f9:c0:37:f0:ec:1a:bb:bc:88:08:bc:f8:e8:01:7c: 77:a6:86:99:cc:63:d5:f5:01:07:36:d3:b9:75:c0: 21:04:ed:ec:7e:66:fe:9c:84:e6:c9:b2:c5:43:56: 57:28:5d:20:f6:81:d2:72:60:3f:8a:34:e6:7d:51: 31:31:50:f9:68:dc:fe:3f:f5:3f:3e:af:7c:0f:6f: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F2:C3:09:41:4E:B7:8D:49:58:38:2D:48:0C:0B:A1:F2:7F:25:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/f99b7391-85a3-3cb4-a259-107cd981ef97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ce:a9:49:e9:7c:66:22:bc:ac:2a:ce:f5:e6:8c:8d:97:20: 2f:6b:41:48:a0:76:3c:ec:c2:39:2b:c6:85:9b:e8:f2:de:04: 3e:08:c5:12:9c:e1:2a:72:b6:aa:e3:4c:d1:63:ec:95:d3:f4: 64:d5:84:3a:bb:ef:fd:43:c8:b0:7d:73:67:5f:af:86:c2:29: 44:70:2f:8b:e3:fd:67:2d:40:76:a7:8b:5c:9e:f4:80:30:b2: 28:31:0b:6b:d8:e2:c3:1a:57:3a:99:6f:b8:59:74:e8:00:35: f4:8d:fe:66:3c:96:df:53:43:a8:9d:17:57:be:e7:c6:88:ae: 05:88:21:90:d0:07:e2:5e:25:9c:37:a7:30:63:23:ca:7b:37: 31:0c:3e:a8:15:d0:cd:93:13:1d:da:1a:e7:5a:2e:ad:45:ae: de:ec:58:aa:43:be:39:f3:08:52:92:5d:ea:9b:5a:ed:2d:08: 14:28:c4:4b:39:d8:2c:6a:9e:cf:15:5f:0b:6c:57:6f:7a:45: 9f:e2:db:4c:c3:b1:29:86:ca:d1:d9:37:b6:12:b5:49:1c:9f: d4:f3:da:09:2c:f1:c1:b2:70:9b:aa:a8:4b:ba:ea:20:46:78: 01:62:9e:92:55:c7:f6:be:09:9c:95:27:71:12:63:36:8e:a7: 3c:4d:aa:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVoRGfeRw2+JUnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NmNjMTM0MzUtZDE4ZS00YmUxLWE2NjYtZjdkY2I1MmNhYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieUVIUe0F24JaY1nCjJ9wNc7/Lg6N2zlZipO WSO9F4N6vXy5bij5AlIMbI4vOyZ+Y7YnBw2TAxMC364Wv0AvUK/AZIo7FNUPjNet hnD6TytUdvwsJsAN8liHzq/Zi4Yz8qovmZI0QsQ1LzlNrCvtVqsuBTdMr8KHLeOC khXXywvzz2yjzRNjRv7Z0zZT2rUy3dN8Rk2pKpjaVmD1nwytTxkW9wmHvk6YD67n bS2kCH50SGP5wDfw7Bq7vIgIvPjoAXx3poaZzGPV9QEHNtO5dcAhBO3sfmb+nITm ybLFQ1ZXKF0g9oHScmA/ijTmfVExMVD5aNz+P/U/Pq98D29S6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3ywwlBTreNSVg4LUgMC6HyfyWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZjk5YjczOTEtODVhMy0z Y2I0LWEyNTktMTA3Y2Q5ODFlZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADOqUnpfGYivKwqzvXmjI2XIC9rQUigdjzswjkrxoWb6PLeBD4IxRKc 4SpytqrjTNFj7JXT9GTVhDq77/1DyLB9c2dfr4bCKURwL4vj/WctQHani1ye9IAw sigxC2vY4sMaVzqZb7hZdOgANfSN/mY8lt9TQ6idF1e+58aIrgWIIZDQB+JeJZw3 pzBjI8p7NzEMPqgV0M2TEx3aGudaLq1Frt7sWKpDvjnzCFKSXeqbWu0tCBQoxEs5 2Cxqns8VXwtsV296RZ/i20zDsSmGytHZN7YStUkcn9Tz2gks8cGycJuqqEu66iBG eAFinpJVx/a+CZyVJ3ESYzaOpzxNqkY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:27:09 2025 by rpki-client