$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa File: af254d16-e698-393e-9cd3-e39bd484cccd.roa (raw, json) Hash identifier: G9b/IyZnalWR6X1Wr/DYDJpdSOA0aWmUfOZZf06nvEE= Subject key identifier: 40:94:57:2D:B6:34:6C:1D:5F:3C:1F:D0:D5:B5:E3:34:65:2E:66:4A Certificate issuer: /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Certificate serial: 010D0C9F4328584F15CCF1E84824282B27F48480 Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 26744 IP address blocks: 150.252.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:f1:e8:48:24:28:2b:27:f4:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=72cf0f1a-1eb7-47c5-b682-938217519c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:81:d5:fd:a6:75:e8:b5:69:98:5e:e3:98: 7c:19:6e:9f:b7:6c:62:55:f8:19:83:6d:e8:cc:19: 57:c3:b8:71:2e:e0:20:f9:2b:d8:03:af:fd:9d:03: 3f:09:e1:dc:f4:f0:2f:76:6e:41:1a:29:ac:96:41: 03:21:d5:a3:fc:12:40:43:bc:27:b2:60:d3:db:13: 38:04:a1:43:03:42:53:b7:46:89:11:26:93:7e:16: 7b:ef:94:ab:d6:ea:fb:c2:ec:9f:d8:36:ba:0e:29: 55:9a:12:3f:87:01:ab:73:18:7d:28:7d:b7:c7:25: 79:11:95:af:a5:b3:2e:e5:a7:87:38:b1:68:cb:f2: 13:44:f4:3d:31:f9:86:1b:4a:65:ec:a9:60:ef:51: aa:c0:63:e2:e0:9e:9f:c7:01:8f:ff:aa:04:94:c9: 12:7f:c1:ea:bc:3d:bb:08:e7:ff:90:68:37:0a:3a: 8c:4b:95:d8:62:e4:8e:bc:fe:ba:c0:38:7c:30:23: 7f:28:87:9e:5e:88:1f:f3:89:fe:df:15:29:cf:fa: 76:b4:5a:d5:3f:ef:78:c5:19:9d:4e:09:0a:3f:f4: 2f:60:b8:d6:9a:82:ae:8f:c5:ba:62:37:6b:6c:e1: 52:8b:58:ef:bb:d8:18:10:0f:1a:be:95:19:92:13: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:94:57:2D:B6:34:6C:1D:5F:3C:1F:D0:D5:B5:E3:34:65:2E:66:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/af254d16-e698-393e-9cd3-e39bd484cccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl X509v3 Authority Key Identifier: keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer sbgp-ipAddrBlock: critical IPv4: 150.252.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3a:b6:e8:02:cb:b6:04:37:9b:46:2d:16:26:30:7e:3f:f8: ed:a0:d8:ed:99:74:6c:c4:c7:2c:92:20:87:df:7f:65:c3:f5: 08:5e:75:7a:af:0f:eb:e6:2b:20:6d:39:a7:db:20:44:6d:c0: 6e:b0:1c:3e:46:44:60:d3:d5:17:c2:dd:ae:ed:eb:33:fb:57: bb:88:93:d8:50:e0:c6:f4:19:22:18:c3:cb:69:97:d3:ec:2a: f7:f7:90:a6:c0:24:92:2d:36:0e:bf:52:d2:c4:49:9b:ff:52: b4:8e:fe:d8:f7:92:fb:2b:37:d8:8c:d9:44:72:9b:8d:63:14: 73:8e:88:f7:98:b8:88:10:e0:68:cf:90:35:92:0e:da:1a:10: ac:fb:81:90:88:34:b3:82:56:2b:1b:cb:fa:6d:04:8c:b2:9b: b4:6d:af:c4:f6:0a:dd:af:75:08:e5:6c:31:78:e6:fc:b3:61: 73:d3:24:88:ac:91:5e:f4:52:a8:a7:d7:ea:eb:77:40:38:8a: ba:7d:7d:dd:e7:59:04:db:a2:3e:33:ac:f8:f6:a1:b2:e8:55: 91:54:0b:b7:f9:fe:c4:fb:9d:d9:10:6b:19:40:95:aa:57:5e: 0f:32:db:3d:8c:01:c4:a5:2b:22:3b:ed:4d:64:28:84:8d:a3: 41:21:39:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzPHoSCQoKyf0hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz ZjhjMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk NzJjZjBmMWEtMWViNy00N2M1LWI2ODItOTM4MjE3NTE5YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCuB1f2mdei1aZhe45h8GW6ft2xiVfgZg23o zBlXw7hxLuAg+SvYA6/9nQM/CeHc9PAvdm5BGimslkEDIdWj/BJAQ7wnsmDT2xM4 BKFDA0JTt0aJESaTfhZ775Sr1ur7wuyf2Da6DilVmhI/hwGrcxh9KH23xyV5EZWv pbMu5aeHOLFoy/ITRPQ9MfmGG0pl7Klg71GqwGPi4J6fxwGP/6oElMkSf8HqvD27 COf/kGg3CjqMS5XYYuSOvP66wDh8MCN/KIeeXogf84n+3xUpz/p2tFrVP+94xRmd TgkKP/QvYLjWmoKuj8W6YjdrbOFSi1jvu9gYEA8avpUZkhPQcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECUVy22NGwdXzwf0NW14zRlLmZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvYWYyNTRkMTYtZTY5OC0z OTNlLTljZDMtZTM5YmQ0ODRjY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlvzOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU6tugCy7YEN5tGLRYmMH4/+O2g2O2ZdGzExyySIIfff2XD9QhedXqv D+vmKyBtOafbIERtwG6wHD5GRGDT1RfC3a7t6zP7V7uIk9hQ4Mb0GSIYw8tpl9Ps Kvf3kKbAJJItNg6/UtLESZv/UrSO/tj3kvsrN9iM2URym41jFHOOiPeYuIgQ4GjP kDWSDtoaEKz7gZCINLOCVisby/ptBIyym7Rtr8T2Ct2vdQjlbDF45vyzYXPTJIis kV70Uqin1+rrd0A4irp9fd3nWQTboj4zrPj2obLoVZFUC7f5/sT7ndkQaxlAlapX Xg8y2z2MAcSlKyI77U1kKISNo0EhOWg= -----END CERTIFICATE-----Generated at Wed Sep 23 16:26:56 2026 by rpki-client