$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2ed8f3f4-4c8e-3785-b6a5-4ef45ef51b6d.roa File: 2ed8f3f4-4c8e-3785-b6a5-4ef45ef51b6d.roa (raw, json) Hash identifier: 22e7YI3UdSwqaQXHxichUlPdlzzv+qFg/GCAvqEOvL8= Subject key identifier: 3C:22:D2:F0:F0:7D:93:C7:23:55:AE:6F:9A:02:0B:68:0B:AC:03:BA Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D6EDA61BE2BE9D8CC51047C00 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2ed8f3f4-4c8e-3785-b6a5-4ef45ef51b6d.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 3300 IP address blocks: 198.207.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:61:be:2b:e9:d8:cc:51:04:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=7b3619f4-a06f-410e-910e-ab21939cae02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:dd:31:8c:6d:f7:7d:d8:27:88:91:63:4a: f0:16:ef:d0:8e:fd:0d:33:74:eb:2a:ab:17:f1:15: c7:91:00:4e:02:b1:17:d0:9c:cd:0e:d6:7b:21:75: 42:2d:89:55:9b:f0:f8:40:4b:d1:ca:ba:11:fa:0e: 9d:78:bf:d4:ac:ce:72:34:db:1e:99:57:68:f6:c0: e3:7d:c6:96:8d:74:62:98:55:51:0a:5b:d1:bc:77: 55:b3:dc:e9:c1:4d:f3:eb:a4:19:73:09:e1:32:c4: 0a:e9:21:a1:38:b4:81:27:44:1e:1d:5f:22:63:cb: 88:13:fc:6c:84:07:00:0a:a6:62:bd:39:d7:35:d7: c3:6c:a1:a8:4f:a8:af:86:47:3d:fd:62:b8:f8:a9: a1:32:bc:99:65:f5:fe:56:a4:ea:84:f8:ec:5e:75: 67:d5:a3:ff:9b:2c:bb:e0:d0:dc:46:3e:0d:fd:21: 5a:02:6b:ec:73:45:42:fd:24:19:a3:4c:0b:77:35: 1d:f2:f1:40:53:58:06:2c:31:09:2b:fd:ce:2d:cd: d9:4c:b4:6a:3f:b1:05:6f:f7:eb:48:9b:b6:8e:50: 70:4b:fc:2f:c1:b9:4a:58:ca:f0:b0:85:53:f1:d2: 55:f5:52:d9:1c:d9:9f:54:7e:bf:e1:68:51:e5:88: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:22:D2:F0:F0:7D:93:C7:23:55:AE:6F:9A:02:0B:68:0B:AC:03:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2ed8f3f4-4c8e-3785-b6a5-4ef45ef51b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 198.207.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:14:43:c9:af:53:d4:d6:fc:8f:fa:3a:20:d2:db:12:99:55: e2:75:20:f4:5b:77:44:53:d4:83:7e:bf:b9:74:36:c7:94:e3: 9d:5c:43:38:1c:05:33:3b:8c:59:6f:98:6f:ca:6a:cd:a1:86: 30:9f:28:65:1c:c9:1f:99:4b:25:78:40:2c:f7:39:5c:10:40: 80:de:84:07:66:bb:fd:ca:27:80:c7:fa:49:5b:b3:7a:c1:4a: ac:84:c2:6f:44:f0:8f:3f:b0:a5:e6:9e:f0:bb:81:3c:05:3f: 60:7c:70:5b:95:e5:fd:1a:4b:d8:55:e2:2d:47:f3:d4:ea:9e: 63:d7:ee:21:33:f3:20:39:d3:1d:12:68:0a:79:54:33:5c:0e: 83:9a:31:8e:7d:c6:9a:7a:92:10:92:cd:a4:57:2d:1f:f7:8d: 6e:a9:33:ae:5f:b4:7a:09:e6:54:ca:17:55:95:b0:d4:3a:a9: 3b:37:4a:f2:7c:ba:27:8d:8f:c6:dd:a4:2d:4b:23:25:67:ab: 7c:9c:3b:d6:2a:de:7c:1a:63:8b:c6:ed:05:aa:51:64:11:3a: 17:88:77:3d:6e:37:70:8e:7e:47:44:a8:22:ba:67:df:ff:f2: 78:11:cb:ec:04:9f:86:33:47:f7:2c:90:f4:23:81:20:ee:93: 26:94:cc:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mG+K+nYzFEEfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk N2IzNjE5ZjQtYTA2Zi00MTBlLTkxMGUtYWIyMTkzOWNhZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMPdMYxt933YJ4iRY0rwFu/Qjv0NM3TrKqsX 8RXHkQBOArEX0JzNDtZ7IXVCLYlVm/D4QEvRyroR+g6deL/UrM5yNNsemVdo9sDj fcaWjXRimFVRClvRvHdVs9zpwU3z66QZcwnhMsQK6SGhOLSBJ0QeHV8iY8uIE/xs hAcACqZivTnXNdfDbKGoT6ivhkc9/WK4+KmhMryZZfX+VqTqhPjsXnVn1aP/myy7 4NDcRj4N/SFaAmvsc0VC/SQZo0wLdzUd8vFAU1gGLDEJK/3OLc3ZTLRqP7EFb/fr SJu2jlBwS/wvwblKWMrwsIVT8dJV9VLZHNmfVH6/4WhR5YhDKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwi0vDwfZPHI1Wub5oCC2gLrAO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMmVkOGYzZjQtNGM4ZS0z Nzg1LWI2YTUtNGVmNDVlZjUxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxs9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcUQ8mvU9TW/I/6OiDS2xKZVeJ1IPRbd0RT1IN+v7l0NseU451cQzgc BTM7jFlvmG/Kas2hhjCfKGUcyR+ZSyV4QCz3OVwQQIDehAdmu/3KJ4DH+klbs3rB SqyEwm9E8I8/sKXmnvC7gTwFP2B8cFuV5f0aS9hV4i1H89TqnmPX7iEz8yA50x0S aAp5VDNcDoOaMY59xpp6khCSzaRXLR/3jW6pM65ftHoJ5lTKF1WVsNQ6qTs3SvJ8 uieNj8bdpC1LIyVnq3ycO9Yq3nwaY4vG7QWqUWQROheIdz1uN3COfkdEqCK6Z9// 8ngRy+wEn4YzR/cskPQjgSDukyaUzFA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:37:15 2026 by rpki-client