$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa File: 8acbc2c9-7125-34b8-a346-13cd157a460f.roa (raw, json) Hash identifier: aI1ydVaBothmURjMuIkC/WECK+BW3nSakBbXUG7vEwc= Subject key identifier: 75:22:6D:23:19:4D:EC:9D:94:D1:DB:41:65:CC:50:2D:3B:AE:8D:EE Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584F15CCF188D6FE9E0DDD843900 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 26744 IP address blocks: 150.252.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:f1:88:d6:fe:9e:0d:dd:84:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=0b351b96-6af7-4378-b58a-410d8952e659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:95:ec:85:1d:39:59:2d:58:cd:6d:04:18:a8: 8a:80:50:93:dc:87:8c:a6:2d:4c:3e:a7:1a:d6:b9: ed:1b:5c:81:81:f9:4d:d2:6d:7f:7f:6f:ad:c9:71: 04:6b:92:4b:27:34:53:13:d9:a6:40:a6:2f:bf:cd: 14:e2:35:d7:a5:4e:44:5c:f5:b6:2e:28:1b:f7:79: 2a:be:f5:d1:4d:b0:6c:0a:31:d6:a9:3e:72:3a:c5: 88:dc:ad:4c:2a:6f:1e:90:c3:b1:13:b9:a7:bf:83: 63:b7:ff:74:09:70:23:49:34:7e:9f:43:86:e6:a2: 17:5b:b8:86:b2:36:57:5a:ea:12:b9:d8:2c:bc:6c: b6:79:0d:6a:6b:80:60:b9:1f:92:7c:6f:db:23:a3: eb:b5:c3:f6:f7:ae:7d:99:f8:00:d8:15:99:21:43: 95:05:b6:c9:e4:47:71:97:f6:1e:4a:f2:90:ae:93: f5:93:21:12:ad:b3:ab:bb:55:2f:11:9e:3c:17:7b: 70:4a:a7:f1:82:c7:0c:2d:d5:0e:27:87:e1:19:f4: dc:ca:c2:5f:e0:ca:4b:ff:19:dc:ac:35:3c:86:03: 6f:e5:84:d1:5b:50:8a:5c:56:4b:0d:96:d7:aa:95: f8:08:05:ee:50:9e:40:1d:55:74:7e:19:62:bc:84: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:22:6D:23:19:4D:EC:9D:94:D1:DB:41:65:CC:50:2D:3B:AE:8D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/8acbc2c9-7125-34b8-a346-13cd157a460f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d3:c7:5c:3e:9c:76:d2:1b:0e:f3:6a:ec:81:f6:77:d1:90: 16:9e:98:33:1d:32:b2:e8:57:08:8a:05:77:53:3b:73:5f:3a: eb:71:b5:bc:43:a8:c5:45:7e:9b:b6:27:9c:5e:f9:72:7a:36: 0a:96:71:20:1f:bd:6d:eb:59:2d:22:18:f2:97:21:c8:8e:e1: 65:9a:76:17:9d:e6:eb:a6:4b:bd:ea:cf:13:b9:19:6c:bb:74: 75:e8:1e:41:ee:6a:4d:77:f5:b4:0f:09:da:f9:45:7b:84:0b: 40:bc:55:cd:59:e7:28:a2:3c:ae:44:f8:fc:1c:f8:81:21:eb: 68:05:fc:5c:27:5a:41:85:2e:44:1a:d0:c9:a4:25:42:cf:f9: 35:5d:c5:ee:7d:d5:6f:0b:48:43:bf:d6:82:f9:11:01:8f:8e: 16:20:0b:5a:2c:30:de:a7:82:2d:86:44:4e:c8:e9:97:b6:22: 50:5e:05:dc:fb:b2:ed:31:3a:e2:97:f6:14:e4:7f:14:a4:7e: ee:2f:f4:31:60:90:8e:1f:29:6c:c6:a0:e1:3f:e2:f3:09:2e: 7c:58:cf:1f:f4:5f:f3:68:34:3d:77:80:18:7e:f5:a6:d5:09: b2:41:e9:54:38:7d:ab:f5:77:f9:c2:44:88:c0:f6:78:86:65: e2:88:bb:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzPGI1v6eDd2EOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MGIzNTFiOTYtNmFmNy00Mzc4LWI1OGEtNDEwZDg5NTJlNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpXshR05WS1YzW0EGKiKgFCT3IeMpi1MPqca 1rntG1yBgflN0m1/f2+tyXEEa5JLJzRTE9mmQKYvv80U4jXXpU5EXPW2Ligb93kq vvXRTbBsCjHWqT5yOsWI3K1MKm8ekMOxE7mnv4Njt/90CXAjSTR+n0OG5qIXW7iG sjZXWuoSudgsvGy2eQ1qa4BguR+SfG/bI6PrtcP29659mfgA2BWZIUOVBbbJ5Edx l/YeSvKQrpP1kyESrbOru1UvEZ48F3twSqfxgscMLdUOJ4fhGfTcysJf4MpL/xnc rDU8hgNv5YTRW1CKXFZLDZbXqpX4CAXuUJ5AHVV0fhlivITkNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUibSMZTeydlNHbQWXMUC07ro3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvOGFjYmMyYzktNzEyNS0z NGI4LWEzNDYtMTNjZDE1N2E0NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHTx1w+nHbSGw7zauyB9nfRkBaemDMdMrLoVwiKBXdTO3NfOutxtbxD qMVFfpu2J5xe+XJ6NgqWcSAfvW3rWS0iGPKXIciO4WWadhed5uumS73qzxO5GWy7 dHXoHkHuak139bQPCdr5RXuEC0C8Vc1Z5yiiPK5E+Pwc+IEh62gF/FwnWkGFLkQa 0MmkJULP+TVdxe591W8LSEO/1oL5EQGPjhYgC1osMN6ngi2GRE7I6Ze2IlBeBdz7 su0xOuKX9hTkfxSkfu4v9DFgkI4fKWzGoOE/4vMJLnxYzx/0X/NoND13gBh+9abV CbJB6VQ4fav1d/nCRIjA9niGZeKIu70= -----END CERTIFICATE-----Generated at Tue Sep 22 18:20:01 2026 by rpki-client