$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa File: 856a6587-3b63-3174-9775-a30ce7def824.roa (raw, json) Hash identifier: y3guJoMNu81n9UhGVBqYsE3XlLpxuVIetVXtAWLtUZQ= Subject key identifier: D7:55:29:66:53:77:FE:46:74:6A:A4:9E:56:DC:A0:B6:4F:E2:3E:03 Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584CB28733AD495232E84EA07900 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 26744 IP address blocks: 150.252.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:33:ad:49:52:32:e8:4e:a0:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=e90c5464-077f-4507-b5c5-c4b55e50f164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:a4:00:1b:c7:9e:3f:b1:d5:5a:fc:8d:b9: 86:60:45:e2:1e:2a:fd:18:36:6b:63:42:35:30:82: 27:20:f9:7f:1e:a3:e8:5b:99:1c:b6:e9:a8:90:8a: 1d:96:4f:c8:f0:15:55:53:10:20:db:ee:03:a4:92: 6a:bd:88:6a:ae:3a:ab:ab:07:92:2d:3e:0a:46:f3: fc:53:55:39:a9:a4:58:18:3a:03:e3:6b:e4:3d:4c: 32:2d:8f:56:c0:de:91:f7:2e:fc:0a:5e:0f:51:2d: 95:5e:af:0b:cb:20:98:8b:82:df:28:df:94:22:b7: 52:5e:69:db:5c:81:91:e6:7e:4d:70:4d:1d:32:5b: c3:69:30:83:21:3b:03:e9:12:31:b1:aa:ec:35:df: 9a:1c:1f:88:36:58:fa:b0:cf:48:7d:92:c4:9b:dd: 74:65:a7:9c:a8:1f:4b:e6:6f:c2:bd:97:95:bb:54: d3:1b:45:fc:3b:74:ee:90:c3:1a:98:77:b6:49:21: 2b:30:f0:8a:d5:ef:22:61:da:9b:eb:60:13:6f:d7: 58:46:f9:b5:33:1f:9c:b6:97:4b:5d:75:0b:07:3b: 83:9a:3b:ac:d4:c7:c7:c3:38:47:31:a6:d9:06:1a: 3c:2d:09:5b:0e:d4:d1:c1:65:b5:f8:d8:71:04:c0: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:55:29:66:53:77:FE:46:74:6A:A4:9E:56:DC:A0:B6:4F:E2:3E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/856a6587-3b63-3174-9775-a30ce7def824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4d:b4:6e:b7:ed:1e:f2:b6:08:e0:61:18:69:2c:f9:da:64: e5:ff:9b:f6:6c:db:70:c3:07:1d:aa:73:59:bc:91:c7:1d:d6: 97:00:b0:d0:0f:54:e5:6b:f6:7d:64:6f:f1:25:40:a2:d6:39: 04:75:5e:61:27:6d:dc:4b:ae:44:9d:f3:01:5b:bf:01:38:d6: ba:f5:b7:78:95:d2:c9:20:36:48:44:c8:dc:6e:d9:d3:58:77: 82:4b:71:97:49:49:21:8c:16:7b:1c:e4:52:2d:bf:ef:50:be: ae:e5:1c:d0:63:6d:07:c4:43:66:18:46:dc:5d:a0:97:8c:99: 9d:49:e0:1e:df:b9:c8:11:41:0f:98:71:29:23:d4:7d:94:3f: 7d:a8:5b:82:fd:cd:17:8e:9f:b0:bf:6c:24:60:d3:b5:5c:94: 86:5f:a2:e5:03:6d:e9:fe:a8:fd:df:1f:bd:b7:f9:9a:6c:8e: 6e:67:53:74:03:7a:fd:31:9f:fc:9c:38:70:c9:c5:0e:b1:fa: fb:70:23:fe:38:ba:68:31:04:f9:cc:57:e5:83:1d:99:2f:ce: f3:ab:7b:0c:67:17:d6:42:bc:4e:47:88:17:e2:a9:40:29:67: 05:74:aa:ee:65:98:6a:c8:6c:0b:57:b1:7a:c6:96:07:79:d6: 25:da:a4:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzOtSVIy6E6geQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTkwYzU0NjQtMDc3Zi00NTA3LWI1YzUtYzRiNTVlNTBmMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/2kABvHnj+x1Vr8jbmGYEXiHir9GDZrY0I1 MIInIPl/HqPoW5kctumokIodlk/I8BVVUxAg2+4DpJJqvYhqrjqrqweSLT4KRvP8 U1U5qaRYGDoD42vkPUwyLY9WwN6R9y78Cl4PUS2VXq8LyyCYi4LfKN+UIrdSXmnb XIGR5n5NcE0dMlvDaTCDITsD6RIxsarsNd+aHB+INlj6sM9IfZLEm910ZaecqB9L 5m/CvZeVu1TTG0X8O3TukMMamHe2SSErMPCK1e8iYdqb62ATb9dYRvm1Mx+ctpdL XXULBzuDmjus1MfHwzhHMabZBho8LQlbDtTRwWW1+NhxBMCvlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdVKWZTd/5GdGqknlbcoLZP4j4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvODU2YTY1ODctM2I2My0z MTc0LTk3NzUtYTMwY2U3ZGVmODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhNtG637R7ytgjgYRhpLPnaZOX/m/Zs23DDBx2qc1m8kccd1pcAsNAP VOVr9n1kb/ElQKLWOQR1XmEnbdxLrkSd8wFbvwE41rr1t3iV0skgNkhEyNxu2dNY d4JLcZdJSSGMFnsc5FItv+9Qvq7lHNBjbQfEQ2YYRtxdoJeMmZ1J4B7fucgRQQ+Y cSkj1H2UP32oW4L9zReOn7C/bCRg07VclIZfouUDben+qP3fH723+Zpsjm5nU3QD ev0xn/ycOHDJxQ6x+vtwI/44umgxBPnMV+WDHZkvzvOrewxnF9ZCvE5HiBfiqUAp ZwV0qu5lmGrIbAtXsXrGlgd51iXapMo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:24 2026 by rpki-client