$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa File: 6a37db04-c374-339b-a7c3-989e21aa23f4.roa (raw, json) Hash identifier: 6OMz/L+k0z9Ew0UskgNjbjkmOHA2dQv2BtRMM/T843c= Subject key identifier: 67:D7:B8:E7:AE:91:40:E8:9B:18:E3:80:56:F7:CA:8B:32:C2:1A:6A Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584D75D52A41856B3CC240604080 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 399668 IP address blocks: 172.98.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2a:41:85:6b:3c:c2:40:60:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=738985bd-94ff-4896-a5ff-b966fcccee02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:71:4f:15:42:77:55:4f:4d:5a:17:ef:35: 28:bd:f2:4f:3f:19:ce:c3:79:36:9e:e4:3e:18:b9: 37:cc:75:31:4b:57:d9:8f:44:bc:88:38:8e:4c:f3: 82:58:e3:a8:58:c1:c2:e7:55:f9:62:11:39:06:31: 61:04:30:ad:e3:04:ba:0b:14:d5:6f:3a:c2:25:c5: 26:d5:39:2a:8e:8a:4d:86:c0:e4:02:c8:ef:a9:97: 3f:8b:8b:a0:7f:7c:80:19:f1:2f:05:06:a8:58:83: c9:b3:f0:38:d9:de:a3:3c:73:bc:29:c6:e8:00:b6: 38:a3:9d:6c:f8:bb:b8:c7:4f:30:7b:76:6f:b0:8e: a9:8b:3e:0c:06:b3:ec:ef:dc:24:c6:b5:d3:1a:03: 74:3a:a9:d0:be:2b:35:19:7b:8d:d2:b4:72:ea:e9: d1:5c:b2:aa:f7:27:2b:9e:ae:b1:da:05:89:4b:97: 91:de:89:ce:82:90:12:65:c4:6d:85:0d:3b:55:59: 10:f4:b0:40:64:9b:c6:ef:e6:fa:4d:f9:05:51:37: d6:c1:48:1a:00:ef:5f:c9:84:53:29:86:db:e0:d4: 5b:b8:fa:cb:d6:bb:e6:79:ca:5f:d2:92:24:96:52: 81:c2:2e:ed:29:4a:0d:f9:dc:f5:4a:4b:ac:6c:ab: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D7:B8:E7:AE:91:40:E8:9B:18:E3:80:56:F7:CA:8B:32:C2:1A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/6a37db04-c374-339b-a7c3-989e21aa23f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: 172.98.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:00:02:dc:8e:27:52:b7:31:61:09:e7:20:82:1f:b1:22:2d: c6:66:08:bb:a3:08:e0:b7:79:f2:09:f6:7b:ac:7e:10:0f:75: 40:6e:db:60:39:f7:de:1d:aa:64:b3:75:b2:f1:b6:78:41:1c: 20:f5:17:20:e4:94:f9:55:5c:f6:6d:24:6c:a1:fe:c6:cb:b5: 82:84:6f:76:f7:48:ac:77:13:80:d4:00:79:ec:1c:6c:01:2a: 8c:c0:4a:72:f8:69:18:dd:55:ff:c9:a6:40:50:ec:06:58:36: 4d:65:ce:b2:7a:97:07:1f:5b:ef:e2:d9:1e:79:7a:d2:73:f0: c3:33:9f:62:7d:5e:f1:af:93:49:5e:17:e5:ed:31:ef:fc:96: 15:e9:59:44:8d:b5:3e:41:0a:92:81:47:b8:1c:99:ee:fb:ca: 3f:3a:6f:bf:07:36:db:76:41:9e:35:3c:8d:a6:e4:5d:d8:9a: 27:78:85:d4:b2:9f:be:e3:4b:92:82:08:07:59:d7:e3:08:88: 14:77:b7:4d:e0:92:95:5d:07:d0:94:86:d9:7d:4c:12:b5:a5: e3:0e:bf:74:98:0e:b0:6e:5e:bb:63:8f:6f:70:3f:ce:e7:18: 36:58:de:38:b2:d4:1f:29:58:22:1c:18:93:78:e1:11:3a:1d: 03:9d:75:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111SpBhWs8wkBgQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NzM4OTg1YmQtOTRmZi00ODk2LWE1ZmYtYjk2NmZjY2NlZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFpxTxVCd1VPTVoX7zUovfJPPxnOw3k2nuQ+ GLk3zHUxS1fZj0S8iDiOTPOCWOOoWMHC51X5YhE5BjFhBDCt4wS6CxTVbzrCJcUm 1TkqjopNhsDkAsjvqZc/i4ugf3yAGfEvBQaoWIPJs/A42d6jPHO8KcboALY4o51s +Lu4x08we3ZvsI6piz4MBrPs79wkxrXTGgN0OqnQvis1GXuN0rRy6unRXLKq9ycr nq6x2gWJS5eR3onOgpASZcRthQ07VVkQ9LBAZJvG7+b6TfkFUTfWwUgaAO9fyYRT KYbb4NRbuPrL1rvmecpf0pIkllKBwi7tKUoN+dz1SkusbKs5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfXuOeukUDomxjjgFb3yosywhpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvNmEzN2RiMDQtYzM3NC0z MzliLWE3YzMtOTg5ZTIxYWEyM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsAAtyOJ1K3MWEJ5yCCH7EiLcZmCLujCOC3efIJ9nusfhAPdUBu22A5 994dqmSzdbLxtnhBHCD1FyDklPlVXPZtJGyh/sbLtYKEb3b3SKx3E4DUAHnsHGwB KozASnL4aRjdVf/JpkBQ7AZYNk1lzrJ6lwcfW+/i2R55etJz8MMzn2J9XvGvk0le F+XtMe/8lhXpWUSNtT5BCpKBR7gcme77yj86b78HNtt2QZ41PI2m5F3Ymid4hdSy n77jS5KCCAdZ1+MIiBR3t03gkpVdB9CUhtl9TBK1peMOv3SYDrBuXrtjj29wP87n GDZY3jiy1B8pWCIcGJN44RE6HQOdddE= -----END CERTIFICATE-----Generated at Sat Apr 18 01:42:28 2026 by rpki-client