$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa File: 21dde924-2599-39f1-b3dd-3e7314f62d6d.roa (raw, json) Hash identifier: gokkr7P6N9kwSoTDJaRR4PbkdepDTGkILC33lbJHx7w= Subject key identifier: 9C:DF:DB:5D:BF:AB:D8:FC:B6:36:47:42:38:A0:9E:CA:24:1E:85:98 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D86954596BE65A74CDDCFF480 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 3300 IP address blocks: 72.29.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:45:96:be:65:a7:4c:dd:cf:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=e3a1e105-a8a5-43b6-8c5a-73b3b6a7f25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:a0:5f:31:2c:95:c4:5f:f0:02:99:b3:8d: ab:23:31:26:4f:1e:fd:a3:b9:b7:b4:5f:ac:37:d6: d1:7d:bf:19:35:13:dc:05:23:ab:58:9d:01:8f:2c: 19:d2:f2:84:d2:eb:34:63:d4:ba:9a:9d:8c:55:50: e5:0e:fe:72:12:f5:e9:20:c9:ec:9a:71:bd:eb:d3: 55:2f:dd:cc:3c:85:81:4f:97:f4:91:d6:96:37:ca: a9:44:00:84:fe:37:bb:44:4a:37:82:87:3a:8a:4a: a7:d0:d4:c4:e3:fc:b9:dd:a5:d5:43:bf:38:c2:71: 8e:58:9a:4f:d6:44:61:ba:ab:09:99:a8:d9:9e:c0: ea:a5:4b:fe:ea:08:e5:f0:12:97:d0:5a:f2:af:34: 09:a9:bd:fe:36:1c:8c:55:85:96:90:5c:d8:da:ce: 82:56:86:fe:32:01:c6:20:64:56:2c:a5:4c:13:73: c8:a1:7c:2d:dd:4c:2a:be:e0:45:51:cc:ac:bc:ac: d3:8a:b4:39:9f:c4:f0:b6:43:c4:5f:4a:b1:08:be: 82:a7:8e:b5:ed:74:a0:b3:3d:bc:4f:8c:e0:47:e7: be:2d:66:61:06:dd:58:e1:53:d1:cf:a9:b2:d5:be: 2c:97:25:72:65:7f:9b:13:9d:16:87:e4:b0:f5:2e: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DF:DB:5D:BF:AB:D8:FC:B6:36:47:42:38:A0:9E:CA:24:1E:85:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 72.29.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:83:8e:0c:ba:0c:88:d7:db:b6:a7:57:3c:9b:2c:33:c5:78: f1:90:41:66:66:08:ce:25:fe:fd:72:a0:8f:24:d9:d9:82:dd: db:08:8b:f0:56:6d:f3:9f:45:1a:77:c8:9c:41:d8:71:39:d4: 89:2d:01:02:4e:7f:10:64:76:f0:74:24:df:e1:ad:67:b7:11: f1:1f:60:8c:bb:69:1a:47:8f:e5:ef:8f:72:0a:b7:db:40:4e: a3:4a:22:95:10:a0:6c:76:16:61:ba:b3:ec:dc:c5:b7:fb:02: ec:8c:10:0b:ad:99:e1:0f:e8:f7:37:0a:1f:26:1b:63:dc:86: 73:94:5b:4f:cb:c9:62:dd:a6:63:a5:c2:87:c5:a4:55:b8:e8: 92:de:28:a1:3d:93:fe:1d:27:6e:3b:c1:a0:4a:de:de:7a:f1: bb:6c:52:7f:d9:f2:1f:a7:13:2d:34:b1:87:1a:8f:41:7b:89: 18:f2:28:6a:33:d8:ac:74:66:4d:27:82:ac:f5:1b:ad:06:b7: 98:cd:12:08:47:56:42:06:70:00:3f:4b:17:3f:6c:90:5d:f7: 0a:c9:39:29:51:1d:42:ee:87:9b:dd:e8:c6:ed:e1:d7:21:2e: e7:98:06:48:80:73:13:dd:9f:c2:ef:8a:82:e4:e3:b2:f0:a9: 7d:71:9b:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUWWvmWnTN3P9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZTNhMWUxMDUtYThhNS00M2I2LThjNWEtNzNiM2I2YTdmMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi12gXzEslcRf8AKZs42rIzEmTx79o7m3tF+s N9bRfb8ZNRPcBSOrWJ0BjywZ0vKE0us0Y9S6mp2MVVDlDv5yEvXpIMnsmnG969NV L93MPIWBT5f0kdaWN8qpRACE/je7REo3goc6ikqn0NTE4/y53aXVQ784wnGOWJpP 1kRhuqsJmajZnsDqpUv+6gjl8BKX0FryrzQJqb3+NhyMVYWWkFzY2s6CVob+MgHG IGRWLKVME3PIoXwt3UwqvuBFUcysvKzTirQ5n8TwtkPEX0qxCL6Cp4617XSgsz28 T4zgR+e+LWZhBt1Y4VPRz6my1b4slyVyZX+bE50Wh+Sw9S5tcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzf212/q9j8tjZHQjignsokHoWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMjFkZGU5MjQtMjU5OS0z OWYxLWIzZGQtM2U3MzE0ZjYyZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGODjgy6DIjX27anVzybLDPFePGQQWZmCM4l/v1yoI8k2dmC3dsIi/BW bfOfRRp3yJxB2HE51IktAQJOfxBkdvB0JN/hrWe3EfEfYIy7aRpHj+Xvj3IKt9tA TqNKIpUQoGx2FmG6s+zcxbf7AuyMEAutmeEP6Pc3Ch8mG2PchnOUW0/LyWLdpmOl wofFpFW46JLeKKE9k/4dJ247waBK3t568btsUn/Z8h+nEy00sYcaj0F7iRjyKGoz 2Kx0Zk0ngqz1G60Gt5jNEghHVkIGcAA/Sxc/bJBd9wrJOSlRHULuh5vd6Mbt4dch LueYBkiAcxPdn8LvioLk47LwqX1xm28= -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:37 2026 by rpki-client