$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/0d23e48e-5a11-34d2-9728-6bf663630c9e.roa File: 0d23e48e-5a11-34d2-9728-6bf663630c9e.roa (raw, json) Hash identifier: Aoytnroh/1nhwPTn6DdI+18b/h6E1ASj8aA1iJZO7bY= Subject key identifier: 99:E8:AE:AE:05:E1:CD:64:BD:DC:64:7C:78:20:5D:F8:73:60:8B:BF Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584F79ADD40D121F76FD322AEEA0 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/0d23e48e-5a11-34d2-9728-6bf663630c9e.roa Signing time: Mon 12 Oct 2026 07:38:30 +0000 ROA not before: Mon 12 Oct 2026 07:38:30 +0000 ROA not after: Sun 10 Jan 2027 08:38:30 +0000 asID: 212556 IP address blocks: 192.157.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:79:ad:d4:0d:12:1f:76:fd:32:2a:ee:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Oct 12 07:38:30 2026 GMT Not After : Jan 10 08:38:30 2027 GMT Subject: CN=5dbfd575-4fd9-42b0-9a9f-0703c4cb25b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:a1:e1:dd:f8:6d:a8:33:c2:c7:f3:34:fb: fc:ac:05:a5:d3:d4:c9:d7:ba:64:2d:4b:15:ef:78: a6:65:b6:bc:98:e0:62:29:8d:de:86:3e:06:35:7c: ba:da:97:33:97:9d:69:6b:8e:38:b0:08:9b:cc:2e: a5:51:22:50:a2:6e:71:f1:b9:37:6d:ce:4c:eb:00: 09:76:dd:91:35:3a:15:0d:1c:76:74:01:51:cf:e1: c3:46:c7:a1:22:db:06:84:c4:8c:71:68:0a:e0:1f: 5a:5b:55:15:99:f6:d4:0d:52:3e:d2:0f:fc:94:74: 34:99:46:95:00:47:9a:ea:35:bd:90:92:69:61:81: c2:b1:e4:1c:ca:a1:37:f8:fc:75:d9:d6:f4:41:ee: c9:b6:fd:30:50:48:53:ff:d8:55:2d:66:7b:33:4c: 71:88:ce:c0:9c:c2:da:c6:e9:20:d9:e1:8a:c4:4c: 1e:2e:10:2c:5e:6c:6c:d1:d1:1e:9d:ae:60:c0:3d: d4:0c:f8:e5:4a:35:be:9e:74:8b:bf:e1:f5:00:88: 54:9d:86:15:1e:05:6b:dd:08:21:e0:ea:16:55:a8: 7b:5a:af:bd:2d:62:82:29:13:da:92:db:de:1e:3e: df:be:58:fe:0c:c5:90:7d:d5:0d:ca:30:2f:c5:02: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E8:AE:AE:05:E1:CD:64:BD:DC:64:7C:78:20:5D:F8:73:60:8B:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/0d23e48e-5a11-34d2-9728-6bf663630c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e3:26:7c:40:37:46:9f:15:84:43:dd:39:6d:6e:4e:47:90: e5:26:fd:cf:dd:17:0a:ac:4e:1d:84:eb:a0:ba:79:30:b6:77: 4a:25:65:6a:64:7b:71:fa:ee:0f:44:d5:a7:3c:4e:ad:2f:7d: 14:d6:ba:a0:c7:d2:c4:6c:05:53:12:0e:83:f4:4a:2f:8f:c1: 0c:79:5b:d3:13:71:67:28:71:8d:13:8c:05:eb:4a:80:71:45: 76:fc:73:0e:48:d5:7a:ab:aa:74:f7:eb:c7:94:98:bc:55:af: 46:66:46:e5:80:82:d6:76:51:9a:cf:90:20:87:a5:dd:94:0a: 58:92:78:81:cd:b4:23:01:07:ca:14:a2:90:a4:bc:00:0a:1e: 41:49:a1:9c:1c:7a:fe:bb:b5:21:27:23:bc:a0:d1:f1:d2:91: 9f:60:1d:59:fd:a2:69:46:72:12:45:97:25:d6:59:b8:4d:48: 04:84:7c:aa:7e:1d:ed:65:b5:46:ba:0b:ae:a4:bb:7a:cd:52: b2:b5:4a:cc:c2:03:5a:bd:4f:22:3f:f2:3f:4a:59:48:e9:cd: 26:30:0d:e6:c5:f6:c2:32:44:9b:5c:8b:06:d6:9d:6e:34:fb: 4e:f2:b1:c4:83:a1:c7:e5:bc:fd:3f:85:cf:a2:5f:ef:0b:65: f7:ca:d4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE95rdQNEh92/TIq7qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MTAxMjA3MzgzMFoXDTI3MDExMDA4MzgzMFowLzEtMCsGA1UEAxMk NWRiZmQ1NzUtNGZkOS00MmIwLTlhOWYtMDcwM2M0Y2IyNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQCh4d34bagzwsfzNPv8rAWl09TJ17pkLUsV 73imZba8mOBiKY3ehj4GNXy62pczl51pa444sAibzC6lUSJQom5x8bk3bc5M6wAJ dt2RNToVDRx2dAFRz+HDRsehItsGhMSMcWgK4B9aW1UVmfbUDVI+0g/8lHQ0mUaV AEea6jW9kJJpYYHCseQcyqE3+Px12db0Qe7Jtv0wUEhT/9hVLWZ7M0xxiM7AnMLa xukg2eGKxEweLhAsXmxs0dEena5gwD3UDPjlSjW+nnSLv+H1AIhUnYYVHgVr3Qgh 4OoWVah7Wq+9LWKCKRPaktveHj7fvlj+DMWQfdUNyjAvxQJ5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnorq4F4c1kvdxkfHggXfhzYIu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMGQyM2U0OGUtNWExMS0z NGQyLTk3MjgtNmJmNjYzNjMwYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbjJnxAN0afFYRD3Tltbk5HkOUm/c/dFwqsTh2E66C6eTC2d0olZWpk e3H67g9E1ac8Tq0vfRTWuqDH0sRsBVMSDoP0Si+PwQx5W9MTcWcocY0TjAXrSoBx RXb8cw5I1XqrqnT368eUmLxVr0ZmRuWAgtZ2UZrPkCCHpd2UCliSeIHNtCMBB8oU opCkvAAKHkFJoZwcev67tSEnI7yg0fHSkZ9gHVn9omlGchJFlyXWWbhNSASEfKp+ He1ltUa6C66ku3rNUrK1SszCA1q9TyI/8j9KWUjpzSYwDebF9sIyRJtciwbWnW40 +07yscSDocflvP0/hc+iX+8LZffK1O0= -----END CERTIFICATE-----Generated at Wed Oct 14 17:50:17 2026 by rpki-client