$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa File: 21dde924-2599-39f1-b3dd-3e7314f62d6d.roa (raw, json) Hash identifier: ugnq0laCxs/GTfcV7lrvxYW06XtiZz73Yvmqs87jC7w= Subject key identifier: 13:9E:2E:1B:E9:E1:D4:BD:E5:EF:4E:CF:9A:1E:78:E9:AC:C7:2F:B0 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584CA5F6F943BD13BB0737C293C0 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 3300 IP address blocks: 72.29.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:f9:43:bd:13:bb:07:37:c2:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=6e0baad4-235d-4341-8a60-adedd7600912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:b1:fa:33:a5:d0:5e:b3:7c:51:16:e6:f8: ea:34:15:ef:5b:69:0c:f0:14:de:26:ee:8f:91:60: 2c:97:77:3d:c7:36:13:46:f9:fa:06:f8:22:b0:d0: 7c:d8:f2:ac:f3:e3:94:09:f5:ad:e6:d3:ae:18:58: 4f:39:c8:91:af:ff:4b:3c:35:12:06:70:08:a0:32: b0:c7:84:2f:5d:e9:22:3e:f0:45:8e:be:bf:5f:e6: c4:19:51:65:95:0d:77:d7:0c:b1:15:82:46:9a:35: 84:c2:48:c3:94:b5:6d:6d:da:b8:36:76:82:7a:80: f1:d3:31:bc:f7:48:b8:92:54:23:56:c5:fe:fd:eb: f6:fa:0b:80:c0:cc:ff:06:8c:77:ab:f6:93:eb:d2: 30:58:10:24:d3:2d:88:56:0c:aa:26:e2:6e:c3:4f: 78:33:c0:19:0d:53:ae:b9:43:98:25:3d:60:d0:20: dd:9d:9e:d0:a8:bb:29:3f:ea:35:6b:cc:2d:d0:c2: 0f:f3:fe:69:72:44:5c:6e:e8:dc:ce:53:4c:8b:0e: c5:bf:db:5c:2f:4e:e0:81:f5:18:28:1e:2f:d5:7a: 30:9c:a3:9e:e4:aa:60:f7:eb:82:f9:78:d6:ca:ea: d8:95:35:c1:1e:2e:a7:1f:85:c7:e4:b0:71:3b:98: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9E:2E:1B:E9:E1:D4:BD:E5:EF:4E:CF:9A:1E:78:E9:AC:C7:2F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 72.29.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ee:09:5f:32:6b:d9:98:b2:b9:8c:27:41:cd:7d:3f:fd:49: 24:b1:03:3c:cb:17:14:64:ed:aa:c3:d1:43:e8:8b:aa:a9:c8: f6:6e:c5:84:2a:96:41:2c:c9:ef:e7:ab:4e:40:95:76:63:99: 6a:0f:07:2d:53:42:73:92:57:45:92:6d:fa:62:89:78:3f:d5: c0:5e:51:f7:22:82:9c:57:f6:78:f8:27:26:67:6d:d7:5b:4d: fc:66:75:90:79:62:89:c3:5a:36:09:f1:a9:ed:f8:d2:a3:a3: a5:b3:85:c8:9b:3c:fe:57:c2:ea:72:b6:a4:48:98:47:fc:22: d0:8c:57:c4:94:2d:29:de:23:98:54:3b:3e:7c:71:9e:9c:12: be:33:85:5d:3f:ed:b4:8e:33:80:91:7b:10:61:60:85:4b:1a: 09:47:24:74:49:0a:7f:df:b7:37:de:85:82:1d:8c:94:c1:54: b6:0b:53:a8:7e:7c:1b:ae:f5:26:33:09:aa:63:30:5b:17:97: d2:9a:29:9c:f2:f9:4f:ef:81:6a:e6:ad:18:3f:86:a1:2f:74: d3:60:73:f2:27:88:40:df:a4:0d:3e:32:57:8e:fe:f3:f8:80: e0:38:ea:5a:d6:36:a9:1b:6b:15:1e:98:0c:8c:34:bc:ba:c7: e6:2f:49:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9vlDvRO7BzfCk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NmUwYmFhZDQtMjM1ZC00MzQxLThhNjAtYWRlZGQ3NjAwOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEyx+jOl0F6zfFEW5vjqNBXvW2kM8BTeJu6P kWAsl3c9xzYTRvn6BvgisNB82PKs8+OUCfWt5tOuGFhPOciRr/9LPDUSBnAIoDKw x4QvXekiPvBFjr6/X+bEGVFllQ131wyxFYJGmjWEwkjDlLVtbdq4NnaCeoDx0zG8 90i4klQjVsX+/ev2+guAwMz/Box3q/aT69IwWBAk0y2IVgyqJuJuw094M8AZDVOu uUOYJT1g0CDdnZ7QqLspP+o1a8wt0MIP8/5pckRcbujczlNMiw7Fv9tcL07ggfUY KB4v1XownKOe5Kpg9+uC+XjWyurYlTXBHi6nH4XH5LBxO5iyPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOeLhvp4dS95e9Oz5oeeOmsxy+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMjFkZGU5MjQtMjU5OS0z OWYxLWIzZGQtM2U3MzE0ZjYyZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/uCV8ya9mYsrmMJ0HNfT/9SSSxAzzLFxRk7arD0UPoi6qpyPZuxYQq lkEsye/nq05AlXZjmWoPBy1TQnOSV0WSbfpiiXg/1cBeUfcigpxX9nj4JyZnbddb TfxmdZB5YonDWjYJ8ant+NKjo6WzhcibPP5XwupytqRImEf8ItCMV8SULSneI5hU Oz58cZ6cEr4zhV0/7bSOM4CRexBhYIVLGglHJHRJCn/ftzfehYIdjJTBVLYLU6h+ fBuu9SYzCapjMFsXl9KaKZzy+U/vgWrmrRg/hqEvdNNgc/IniEDfpA0+MleO/vP4 gOA46lrWNqkbaxUemAyMNLy6x+YvSc0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:20 2026 by rpki-client