$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa File: d1691aa9-20b3-37f9-9963-81c845f7e50d.roa (raw, json) Hash identifier: Pdye7Xmgz4NzARTK3oqO/KC/pM98Iy0rmBGy2w58CsQ= Subject key identifier: 0B:7B:85:DD:B6:29:37:76:E6:3B:74:1C:34:96:07:EA:5A:A7:9A:7A Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D7F9A873E9071946B00728300 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 3300 IP address blocks: 198.207.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:87:3e:90:71:94:6b:00:72:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=05a8add3-84d9-4f2d-a7e2-248ae5dbbe90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:c0:e7:a8:cd:ed:bd:38:38:3e:ef:dd:54: fd:f6:a6:10:9a:bc:9d:44:b9:b0:d3:11:0c:5a:a1: 4d:2c:6e:36:7c:74:a9:d9:6a:40:42:0a:44:2a:6b: a3:b2:9d:8a:fc:7b:ca:3c:23:c4:dd:92:c6:ad:a4: 8e:0d:e1:f1:c9:ab:96:4b:31:c9:15:1c:c7:4d:03: f1:dd:9f:47:35:86:9d:8d:b2:5a:d7:38:82:e1:6e: af:97:88:96:16:cc:c2:34:f8:23:0d:0f:0c:fb:13: db:bb:04:60:20:70:24:f6:37:ad:b6:70:87:ad:c2: 66:cc:b3:de:ec:73:cd:f6:81:01:f7:53:6a:b5:a7: 0e:9f:29:2d:c0:31:2d:13:a2:48:f7:9b:70:70:a7: 43:98:01:9d:bb:11:0e:29:f3:d7:cc:07:04:d3:03: 45:af:16:29:01:a2:0b:c3:c0:de:a1:c4:08:9b:3c: 40:12:2b:e8:03:f1:3f:96:0e:83:8e:c0:1e:d7:e3: be:1a:da:0b:19:e6:46:71:5f:c8:cf:08:3e:b9:76: e4:a4:43:34:a1:79:52:bf:6c:87:66:98:d1:26:2e: 9c:49:b5:8e:b8:1f:76:e2:cd:05:98:fc:9c:ff:bb: 60:2a:53:62:02:49:ac:1a:58:dc:37:ad:e2:44:b6: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7B:85:DD:B6:29:37:76:E6:3B:74:1C:34:96:07:EA:5A:A7:9A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/d1691aa9-20b3-37f9-9963-81c845f7e50d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 198.207.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4e:3e:93:82:d2:79:61:81:44:ae:51:b5:8b:e7:07:54:05: 59:c0:c4:9c:fe:bd:b1:12:01:a8:b5:ab:e0:c8:90:58:62:57: c5:71:4b:f5:fc:da:3a:83:44:ec:82:94:79:72:ee:f1:d5:37: 1d:b9:bd:c8:e8:01:d4:4c:bc:09:28:22:ca:e4:c4:dd:e9:3f: 26:1e:80:3e:fb:6e:c0:92:bd:e0:36:60:c4:78:75:b3:e7:ea: 0e:36:09:fc:cd:a5:a6:97:5b:cd:00:fc:a2:b7:01:7a:35:a3: 4a:39:af:7c:e2:d5:26:e3:ee:07:17:5d:a8:af:73:d2:4b:66: 33:90:e6:b9:b4:1d:7b:ac:82:7d:46:4e:7f:c9:8b:3e:1a:2f: 98:65:aa:5c:e3:79:92:25:8c:1f:bd:ed:f8:7f:e0:0c:44:b3: 41:3f:01:3a:25:f7:c6:5c:14:fc:bb:e1:44:7a:28:ce:e1:c7: 4b:4c:1f:2a:1f:4d:a0:b1:0b:36:66:8b:8b:68:be:05:2d:6a: b7:93:26:fd:30:5c:64:99:e9:63:30:93:c0:e2:00:0a:60:4f: 20:cc:95:46:2b:b1:0c:1b:41:1a:94:60:be:d6:22:53:eb:58: 8d:31:9b:11:28:a3:b8:62:89:fa:b5:71:a9:f6:29:a2:26:fc: 9e:b9:fb:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moc+kHGUawBygwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MDVhOGFkZDMtODRkOS00ZjJkLWE3ZTItMjQ4YWU1ZGJiZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkjA56jN7b04OD7v3VT99qYQmrydRLmw0xEM WqFNLG42fHSp2WpAQgpEKmujsp2K/HvKPCPE3ZLGraSODeHxyauWSzHJFRzHTQPx 3Z9HNYadjbJa1ziC4W6vl4iWFszCNPgjDQ8M+xPbuwRgIHAk9jettnCHrcJmzLPe 7HPN9oEB91NqtacOnyktwDEtE6JI95twcKdDmAGduxEOKfPXzAcE0wNFrxYpAaIL w8DeocQImzxAEivoA/E/lg6DjsAe1+O+GtoLGeZGcV/Izwg+uXbkpEM0oXlSv2yH ZpjRJi6cSbWOuB924s0FmPyc/7tgKlNiAkmsGljcN63iRLabpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAt7hd22KTd25jt0HDSWB+pap5p6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvZDE2OTFhYTktMjBiMy0z N2Y5LTk5NjMtODFjODQ1ZjdlNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxs9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJOPpOC0nlhgUSuUbWL5wdUBVnAxJz+vbESAai1q+DIkFhiV8VxS/X8 2jqDROyClHly7vHVNx25vcjoAdRMvAkoIsrkxN3pPyYegD77bsCSveA2YMR4dbPn 6g42CfzNpaaXW80A/KK3AXo1o0o5r3zi1Sbj7gcXXaivc9JLZjOQ5rm0HXusgn1G Tn/Jiz4aL5hlqlzjeZIljB+97fh/4AxEs0E/ATol98ZcFPy74UR6KM7hx0tMHyof TaCxCzZmi4tovgUtareTJv0wXGSZ6WMwk8DiAApgTyDMlUYrsQwbQRqUYL7WIlPr WI0xmxEoo7hiifq1can2KaIm/J65+4Q= -----END CERTIFICATE-----Generated at Fri Apr 17 23:42:08 2026 by rpki-client