$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa File: 856a6587-3b63-3174-9775-a30ce7def824.roa (raw, json) Hash identifier: 6Sfx54o/2z7HIys5HOs9QVf7niA93Ob1dLvHv0dwp4Q= Subject key identifier: 9E:0C:C2:5D:B2:69:81:89:48:EE:09:2B:F9:27:2B:61:53:46:7F:31 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584F15CCF1AD2634E23FF1F4ACE0 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 26744 IP address blocks: 150.252.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:f1:ad:26:34:e2:3f:f1:f4:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=6a5ef76f-4b5a-48fb-80e0-dba55f243a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:cd:9b:89:01:70:54:a0:5b:c4:d2:ea:b4: 91:a6:c8:94:43:e3:36:4c:a6:a5:64:60:b3:3b:c2: 22:07:3c:d8:95:d0:ff:56:31:80:4e:81:55:78:1d: 1c:5c:f0:80:9a:15:8c:fd:ac:67:3b:7a:6a:db:44: 1d:b8:ac:19:ce:49:79:c8:ea:50:3e:1d:93:03:0e: 15:41:5b:59:16:32:a2:56:28:ff:e7:55:62:31:48: de:ae:5e:ec:31:c9:dd:0d:b7:5b:08:4e:a0:e6:c0: d5:3a:ec:46:66:af:60:a2:d4:2b:28:9a:20:fc:b3: 6e:e0:36:41:cf:1d:8f:31:91:43:cc:7e:30:7b:fd: bb:2c:5d:6c:f5:55:39:ec:3f:75:31:6b:2f:c1:1a: 48:ab:0a:d3:1c:ca:b1:b0:cc:55:75:ae:95:c5:fa: d8:81:57:18:33:0d:33:ee:3e:7c:aa:c4:64:cf:a0: a0:8c:03:e1:cc:5d:95:14:99:46:00:82:75:b9:22: 5d:01:be:54:7b:21:0a:82:c4:c4:9a:6c:07:72:62: dd:72:4a:3f:d3:c4:f0:ee:33:34:19:70:5f:ec:12: ed:5c:f4:59:fa:b1:2c:70:56:03:63:a4:b7:9f:8f: 43:57:47:3f:81:22:d8:4a:39:45:7d:24:44:7f:ea: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0C:C2:5D:B2:69:81:89:48:EE:09:2B:F9:27:2B:61:53:46:7F:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d6:d4:39:bd:cd:48:91:e6:61:96:3c:d0:37:18:af:6d:3f: 5e:6c:73:a9:8d:96:2c:0c:c9:66:81:8a:6d:d7:63:a9:c3:4e: af:39:eb:f4:46:71:1b:4e:18:4c:86:32:4c:3e:d5:c9:f2:92: 2e:a4:bd:1b:29:50:ab:46:9e:a9:ac:25:c5:97:d8:e1:2a:6c: 27:ef:1a:43:e7:60:77:3d:05:9f:99:6d:0a:f0:ef:85:9c:2d: ef:31:5c:dd:5d:1e:0a:b9:50:f7:3a:98:4a:6a:23:f0:60:1f: 0f:b7:0f:a9:24:80:2c:82:17:48:60:5c:a8:05:ba:73:ab:08: 81:6d:7e:2b:56:7b:50:5f:11:90:67:b9:a1:c8:7c:2b:3a:3c: e7:86:16:c3:67:4d:5d:4e:9c:bd:b6:59:e0:57:f8:42:c8:b5: bb:71:b9:e1:60:6a:f2:b9:d7:55:c4:59:f7:51:7e:c5:28:0d: 84:14:4b:89:9e:eb:6b:9d:4f:2c:31:bd:d5:ce:fa:f5:c1:a7: 0a:63:1f:44:c0:5b:2e:20:15:3d:92:82:73:fd:6f:c4:52:24: b6:1a:02:8a:64:97:da:99:88:59:f7:8e:f2:f1:a5:6f:3f:7d: 3e:cb:66:17:f1:7f:ab:cd:6b:8f:c0:5b:7e:5b:4d:f2:5b:d2: bc:8b:e5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzPGtJjTiP/H0rOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk NmE1ZWY3NmYtNGI1YS00OGZiLTgwZTAtZGJhNTVmMjQzYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvXNm4kBcFSgW8TS6rSRpsiUQ+M2TKalZGCz O8IiBzzYldD/VjGAToFVeB0cXPCAmhWM/axnO3pq20QduKwZzkl5yOpQPh2TAw4V QVtZFjKiVij/51ViMUjerl7sMcndDbdbCE6g5sDVOuxGZq9gotQrKJog/LNu4DZB zx2PMZFDzH4we/27LF1s9VU57D91MWsvwRpIqwrTHMqxsMxVda6VxfrYgVcYMw0z 7j58qsRkz6CgjAPhzF2VFJlGAIJ1uSJdAb5UeyEKgsTEmmwHcmLdcko/08Tw7jM0 GXBf7BLtXPRZ+rEscFYDY6S3n49DV0c/gSLYSjlFfSREf+qv3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4Mwl2yaYGJSO4JK/knK2FTRn8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvODU2YTY1ODctM2I2My0z MTc0LTk3NzUtYTMwY2U3ZGVmODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfW1Dm9zUiR5mGWPNA3GK9tP15sc6mNliwMyWaBim3XY6nDTq856/RG cRtOGEyGMkw+1cnyki6kvRspUKtGnqmsJcWX2OEqbCfvGkPnYHc9BZ+ZbQrw74Wc Le8xXN1dHgq5UPc6mEpqI/BgHw+3D6kkgCyCF0hgXKgFunOrCIFtfitWe1BfEZBn uaHIfCs6POeGFsNnTV1OnL22WeBX+ELItbtxueFgavK511XEWfdRfsUoDYQUS4me 62udTywxvdXO+vXBpwpjH0TAWy4gFT2SgnP9b8RSJLYaAopkl9qZiFn3jvLxpW8/ fT7LZhfxf6vNa4/AW35bTfJb0ryL5aI= -----END CERTIFICATE-----Generated at Thu Sep 24 15:26:12 2026 by rpki-client