$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/28135522-43eb-3455-b5fd-6bc57f5865ea.roa File: 28135522-43eb-3455-b5fd-6bc57f5865ea.roa (raw, json) Hash identifier: tenTazpjX/UOzbSxg84nBniuD8IaklQ4I5E5941n4FM= Subject key identifier: 87:86:F5:E7:14:F7:FD:98:DF:D5:37:CB:F1:85:08:86:69:4E:79:5D Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584F79ADD821B617018CC4925080 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/28135522-43eb-3455-b5fd-6bc57f5865ea.roa Signing time: Mon 12 Oct 2026 07:38:32 +0000 ROA not before: Mon 12 Oct 2026 07:38:32 +0000 ROA not after: Sun 10 Jan 2027 08:38:32 +0000 asID: 212556 IP address blocks: 192.157.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:79:ad:d8:21:b6:17:01:8c:c4:92:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Oct 12 07:38:32 2026 GMT Not After : Jan 10 08:38:32 2027 GMT Subject: CN=dd400fac-28bf-41f5-858a-9c39df41c09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:71:ac:d8:3d:78:cd:19:40:fa:d2:45:0f: d6:b8:70:50:63:43:31:0c:3c:17:b6:35:6c:b8:1e: ec:ff:c7:b6:50:23:7f:85:ce:45:9e:63:20:80:b3: d6:94:71:89:90:15:7b:79:28:94:f5:d9:50:df:14: 9f:55:de:66:3d:71:1a:2f:b5:6d:98:4e:bf:0d:68: 94:9b:2f:5e:23:30:16:01:3f:1f:5a:22:e0:13:d7: fa:45:dd:83:5c:73:d0:00:3b:56:23:48:9c:0a:af: c4:e1:a8:2b:74:3f:43:76:0f:4f:12:99:11:35:81: 9a:6f:12:91:e4:16:13:e9:7c:41:84:89:3c:7d:0c: d0:f7:25:72:e4:7b:8b:54:57:5d:2d:c9:cf:14:43: b0:c5:77:00:bf:b9:9e:fe:8c:ed:fe:40:3e:99:d8: 9c:15:2c:a3:7d:d1:2c:a3:17:d6:8f:ba:d3:3f:8a: 7d:4a:19:04:14:23:e4:1d:21:c6:fc:e5:ed:a5:14: 72:b1:de:b5:8a:50:f5:6d:2b:30:af:d9:d9:f1:2a: 03:0f:a1:94:14:21:14:b6:04:6e:e1:00:f7:90:b0: dc:44:cc:aa:f0:be:bb:c7:23:ca:95:4e:0c:0c:9e: 7b:33:3b:21:52:67:c4:e7:f3:a7:03:93:1d:d5:b4: 6a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:86:F5:E7:14:F7:FD:98:DF:D5:37:CB:F1:85:08:86:69:4E:79:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/28135522-43eb-3455-b5fd-6bc57f5865ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c0:e5:4b:4a:14:d4:8a:31:7f:17:27:27:80:17:b0:0d:30: ae:09:49:bb:3e:f3:96:75:d5:d2:1f:56:ec:92:1b:81:2a:e3: e8:7f:e5:09:20:53:fe:6e:93:9b:ca:c3:4c:f0:01:39:dd:a3: 7f:14:8b:76:53:88:f3:8c:f4:3c:68:ef:f6:d8:ae:92:21:30: 5f:17:a4:57:70:03:cf:6e:19:dc:e9:9c:b7:ce:a0:b8:b9:29: b6:cd:a1:d1:c4:8e:5d:d3:45:fb:27:08:d5:13:ea:04:cf:1c: 23:c4:d2:e6:d2:e8:be:83:55:42:08:d5:e1:7b:fb:e2:30:59: c2:5c:6f:76:03:83:01:6f:f2:c8:85:95:3d:0a:14:98:c5:2a: 8e:53:65:32:0f:4c:d1:68:f9:3c:f9:6c:0b:4c:c9:f2:01:45: b3:11:e0:9b:d9:c7:37:74:81:41:f3:28:3c:12:27:49:75:10: 32:ab:ad:9d:76:8a:ad:9e:cf:50:0e:45:c4:b1:af:4d:e8:09: 37:20:fe:c4:0a:6f:37:4c:c8:73:7d:f4:45:bd:52:9a:bd:10: 02:6f:f3:4c:0e:ba:95:1a:a1:7c:00:ba:67:60:27:d0:38:45: f0:72:06:19:fc:a2:24:71:27:14:4f:cb:1c:03:72:4a:f1:c6: fa:86:ec:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE95rdghthcBjMSSUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MTAxMjA3MzgzMloXDTI3MDExMDA4MzgzMlowLzEtMCsGA1UEAxMk ZGQ0MDBmYWMtMjhiZi00MWY1LTg1OGEtOWMzOWRmNDFjMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqtxrNg9eM0ZQPrSRQ/WuHBQY0MxDDwXtjVs uB7s/8e2UCN/hc5FnmMggLPWlHGJkBV7eSiU9dlQ3xSfVd5mPXEaL7VtmE6/DWiU my9eIzAWAT8fWiLgE9f6Rd2DXHPQADtWI0icCq/E4agrdD9Ddg9PEpkRNYGabxKR 5BYT6XxBhIk8fQzQ9yVy5HuLVFddLcnPFEOwxXcAv7me/ozt/kA+mdicFSyjfdEs oxfWj7rTP4p9ShkEFCPkHSHG/OXtpRRysd61ilD1bSswr9nZ8SoDD6GUFCEUtgRu 4QD3kLDcRMyq8L67xyPKlU4MDJ57MzshUmfE5/OnA5Md1bRqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeG9ecU9/2Y39U3y/GFCIZpTnldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMjgxMzU1MjItNDNlYi0z NDU1LWI1ZmQtNmJjNTdmNTg2NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJ2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHA5UtKFNSKMX8XJyeAF7ANMK4JSbs+85Z11dIfVuySG4Eq4+h/5Qkg U/5uk5vKw0zwATndo38Ui3ZTiPOM9Dxo7/bYrpIhMF8XpFdwA89uGdzpnLfOoLi5 KbbNodHEjl3TRfsnCNUT6gTPHCPE0ubS6L6DVUII1eF7++IwWcJcb3YDgwFv8siF lT0KFJjFKo5TZTIPTNFo+Tz5bAtMyfIBRbMR4JvZxzd0gUHzKDwSJ0l1EDKrrZ12 iq2ez1AORcSxr03oCTcg/sQKbzdMyHN99EW9Upq9EAJv80wOupUaoXwAumdgJ9A4 RfByBhn8oiRxJxRPyxwDckrxxvqG7MQ= -----END CERTIFICATE-----Generated at Wed Oct 14 17:50:30 2026 by rpki-client