$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/822a8e10-9b33-33ff-b0b0-5da593fa3d73.roa File: 822a8e10-9b33-33ff-b0b0-5da593fa3d73.roa (raw, json) Hash identifier: 6f+Y4NQw9WwSz7pZP5kU1r3FsAdbFbBJHfg+kTqCqOU= Subject key identifier: 01:FF:EC:A9:E3:35:A7:17:9C:7C:BB:17:7E:5D:71:E9:8F:4B:4D:AE Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584F79AD9354545F7870E443C300 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/822a8e10-9b33-33ff-b0b0-5da593fa3d73.roa Signing time: Mon 12 Oct 2026 07:38:00 +0000 ROA not before: Mon 12 Oct 2026 07:38:00 +0000 ROA not after: Sun 10 Jan 2027 08:38:00 +0000 asID: 49182 IP address blocks: 192.157.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:79:ad:93:54:54:5f:78:70:e4:43:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Oct 12 07:38:00 2026 GMT Not After : Jan 10 08:38:00 2027 GMT Subject: CN=8dcf5681-3215-4f9d-9146-376e5fa0a59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:c1:1b:ba:b9:ad:c8:37:68:98:16:03:bc: f5:98:e2:19:ef:2b:9b:e9:c4:c1:3d:03:74:b5:9f: 95:40:b5:47:5c:92:80:fb:c1:a5:f8:40:29:b4:14: b6:47:24:2a:85:bd:79:71:1f:a3:4c:f0:68:e2:3d: 80:de:87:b0:c3:b6:a0:93:e8:6a:e0:4e:f4:86:31: b3:a2:0d:44:e7:86:00:73:0f:7c:a1:ae:df:b1:af: 29:e6:2f:9a:7a:2a:a7:91:1a:67:2c:14:31:e9:17: 4e:18:07:ee:51:19:53:a6:c4:3a:49:2c:d1:41:9b: 94:e7:bb:64:e8:0c:ca:a2:61:89:68:7e:9b:26:19: a0:06:85:3a:fa:54:00:57:19:c1:c7:16:ea:33:b5: e8:1e:7a:41:fd:15:6a:80:16:b2:32:74:66:04:aa: ce:d2:d3:cb:9a:6e:e3:59:ed:75:8b:cc:17:16:b2: a3:e5:15:15:d5:d1:21:2b:8d:3a:6f:9b:de:31:fa: c5:1d:65:f8:44:89:ba:3f:6b:6e:cb:d4:8b:12:57: be:f1:c4:75:fd:8c:3e:bc:fd:37:37:63:51:d2:3e: 69:06:15:1a:eb:b3:be:dc:0b:83:22:24:13:45:36: e6:6e:30:3d:22:6a:16:b1:e3:2d:ba:5e:43:c0:4d: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FF:EC:A9:E3:35:A7:17:9C:7C:BB:17:7E:5D:71:E9:8F:4B:4D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/822a8e10-9b33-33ff-b0b0-5da593fa3d73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:3a:bd:ab:7a:3d:a0:b8:6e:45:c2:43:e5:c5:4c:5d:5c:e8: d6:02:f8:c9:fc:b3:6a:eb:b0:df:40:74:3b:90:1c:2a:13:24: d2:2b:64:6b:cd:31:b6:bf:35:26:23:87:0b:27:97:99:96:3c: c5:a7:33:70:ed:55:f0:74:0e:11:c5:00:8b:97:d1:f8:a7:bf: 51:6d:bc:26:92:ca:bc:cc:d7:f2:a4:eb:f7:a2:eb:e8:67:b1: 73:01:b5:e2:f1:54:06:7e:7b:5a:dd:34:d0:1e:f0:9b:61:e0: 83:ce:a0:94:04:24:31:00:0c:4d:6a:8a:56:b0:e9:25:0d:b6: b3:8e:c3:88:3e:aa:27:57:7c:6a:10:55:9a:66:ba:8b:43:29: 45:e0:ad:7a:e9:0e:f8:fe:6c:04:40:28:5b:b6:21:18:68:58: 6b:5e:6b:e5:d2:da:72:5e:ba:5d:c0:ad:22:0a:c7:4e:5b:0c: 5c:4a:e1:20:c8:04:33:12:c6:73:79:15:65:d9:f2:47:47:2a: 7b:56:e7:19:6f:02:a7:5b:13:31:80:c8:79:8a:c0:99:5e:0f: 8b:86:30:d6:c6:a7:9d:4d:39:44:19:c5:e1:c7:b1:8d:0c:93: bb:98:b2:14:4d:01:c2:90:01:9c:7e:c5:90:8e:fe:7b:22:85: fb:af:01:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE95rZNUVF94cORDwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MTAxMjA3MzgwMFoXDTI3MDExMDA4MzgwMFowLzEtMCsGA1UEAxMk OGRjZjU2ODEtMzIxNS00ZjlkLTkxNDYtMzc2ZTVmYTBhNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEPBG7q5rcg3aJgWA7z1mOIZ7yub6cTBPQN0 tZ+VQLVHXJKA+8Gl+EAptBS2RyQqhb15cR+jTPBo4j2A3oeww7agk+hq4E70hjGz og1E54YAcw98oa7fsa8p5i+aeiqnkRpnLBQx6RdOGAfuURlTpsQ6SSzRQZuU57tk 6AzKomGJaH6bJhmgBoU6+lQAVxnBxxbqM7XoHnpB/RVqgBayMnRmBKrO0tPLmm7j We11i8wXFrKj5RUV1dEhK406b5veMfrFHWX4RIm6P2tuy9SLEle+8cR1/Yw+vP03 N2NR0j5pBhUa67O+3AuDIiQTRTbmbjA9ImoWseMtul5DwE2YWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH/7KnjNacXnHy7F35dcemPS02uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvODIyYThlMTAtOWIzMy0z M2ZmLWIwYjAtNWRhNTkzZmEzZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY6vat6PaC4bkXCQ+XFTF1c6NYC+Mn8s2rrsN9AdDuQHCoTJNIrZGvN Mba/NSYjhwsnl5mWPMWnM3DtVfB0DhHFAIuX0finv1FtvCaSyrzM1/Kk6/ei6+hn sXMBteLxVAZ+e1rdNNAe8Jth4IPOoJQEJDEADE1qilaw6SUNtrOOw4g+qidXfGoQ VZpmuotDKUXgrXrpDvj+bARAKFu2IRhoWGtea+XS2nJeul3ArSIKx05bDFxK4SDI BDMSxnN5FWXZ8kdHKntW5xlvAqdbEzGAyHmKwJleD4uGMNbGp51NOUQZxeHHsY0M k7uYshRNAcKQAZx+xZCO/nsihfuvAZA= -----END CERTIFICATE-----Generated at Wed Oct 14 11:47:04 2026 by rpki-client