$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa File: 98b76af4-cda3-3d94-9551-677ba0cc353a.roa (raw, json) Hash identifier: MYQWos9e1bGbEFdrMs3NQSWtGtP9pHzUKLTm+n1Bt5E= Subject key identifier: 7C:9E:97:FC:EC:5C:DD:C2:5F:D7:1C:E3:F9:60:B1:8B:04:18:E8:B1 Certificate issuer: /CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Certificate serial: 010D0C9F4328584F3FAD342D8AA717CDDFBADC00 Authority key identifier: AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 394907 IP address blocks: 159.242.32.0/19 maxlen: 24 172.83.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:34:2d:8a:a7:17:cd:df:ba:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=639ad492-0ddf-4d98-b5e1-97bf22b40cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:f4:1b:d6:43:3f:21:a7:94:51:40:4f:b7: 9f:a5:de:8b:75:99:5d:16:20:83:f4:d8:21:69:36: 73:51:11:c6:71:9a:d2:c5:df:b6:de:cf:d7:3b:e4: 7f:d0:64:47:fb:ff:11:36:4e:4c:9f:af:9a:0f:d7: e9:1e:3a:cd:18:a1:ab:9f:8d:e2:bd:6f:89:e1:66: 12:ac:5d:af:41:ca:bd:1d:de:63:44:b7:c3:f5:9b: a4:cf:9d:4c:31:a7:f7:84:e9:b7:e5:14:f7:53:3e: 86:c2:e8:86:05:92:5c:62:72:3f:b9:c4:73:73:db: 30:a8:a2:36:75:10:07:7e:5b:82:19:34:51:a8:86: 33:27:20:d5:db:52:76:08:7f:c6:3a:77:92:13:dc: fa:4f:8d:5f:26:81:89:12:11:f0:82:e8:ed:8d:a7: df:8e:c0:ed:a7:ed:aa:50:a5:f4:22:26:b4:cb:18: fc:76:93:ca:8c:79:5b:f3:6c:f5:6c:0c:49:b3:b0: ec:35:bf:e3:b3:7e:e4:00:bc:02:a7:b5:d2:e0:ee: dd:0e:34:c0:82:b6:e8:34:5d:ef:6a:28:a7:ab:fe: 7b:5f:d9:47:6a:87:cf:51:ac:67:64:d2:07:0e:fe: fb:05:26:20:63:32:da:bd:ed:d7:b2:04:cd:27:01: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9E:97:FC:EC:5C:DD:C2:5F:D7:1C:E3:F9:60:B1:8B:04:18:E8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl X509v3 Authority Key Identifier: keyid:AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer sbgp-ipAddrBlock: critical IPv4: 159.242.32.0/19 172.83.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:08:a8:fa:35:a7:6f:4c:c9:b4:6d:32:30:3c:9f:b7:5d:2a: 5b:42:47:49:c4:a3:37:cb:0d:45:9f:49:29:2d:28:83:35:57: 9a:02:33:78:16:ee:21:b2:ce:14:f1:8d:09:8b:ef:ab:58:0d: d0:0d:2a:d0:f3:ed:ce:3f:1e:29:9b:4e:f5:1c:69:a3:04:91: fe:cb:60:0f:5b:3a:95:a4:04:48:10:c4:a2:30:18:9e:60:11: 20:27:58:52:2d:9b:cd:85:95:08:d1:f4:8c:c6:a3:08:03:2b: 51:03:0c:0f:e4:02:a1:6f:fc:d9:45:15:ce:87:87:07:05:1c: 75:80:9c:e4:87:13:72:50:01:d3:f9:e9:0b:70:e9:0b:c9:02: 94:64:d3:fd:97:42:a2:f9:1b:ec:6d:cc:a2:3b:27:51:53:6c: 28:7d:68:9d:ea:20:cf:e9:ce:cd:6f:a4:6f:49:15:e7:31:02: 61:b0:c0:65:87:14:40:d5:39:64:cb:5f:04:a7:62:76:7a:5a: a9:33:7b:64:63:d6:b0:fd:3e:3a:d3:65:a9:2a:29:2e:b4:0c: a7:9c:79:57:66:19:0d:4d:4b:69:66:c7:58:21:32:fb:90:49: 07:84:c1:98:47:6c:2c:c6:71:26:99:a0:08:43:a6:df:65:9b: 31:38:8b:65 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8/rTQtiqcXzd+63AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyYmQ1OTEtYjQ1ZS00N2M2LTkzZjktODNmYjRhOTVl OWI0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjM5YWQ0OTItMGRkZi00ZDk4LWI1ZTEtOTdiZjIyYjQwY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynr0G9ZDPyGnlFFAT7efpd6LdZldFiCD9Ngh aTZzURHGcZrSxd+23s/XO+R/0GRH+/8RNk5Mn6+aD9fpHjrNGKGrn43ivW+J4WYS rF2vQcq9Hd5jRLfD9Zukz51MMaf3hOm35RT3Uz6GwuiGBZJcYnI/ucRzc9swqKI2 dRAHfluCGTRRqIYzJyDV21J2CH/GOneSE9z6T41fJoGJEhHwgujtjaffjsDtp+2q UKX0Iia0yxj8dpPKjHlb82z1bAxJs7DsNb/js37kALwCp7XS4O7dDjTAgrboNF3v aiinq/57X9lHaofPUaxnZNIHDv77BSYgYzLave3XsgTNJwFJfwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHyel/zsXN3CX9cc4/lgsYsEGOixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJi ZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2ZiNGE5NWU5YjQvOThiNzZhZjQtY2RhMy0z ZDk0LTk1NTEtNjc3YmEwY2MzNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMyYmQ1OTEtYjQ1ZS00N2M2LTkz ZjktODNmYjRhOTVlOWI0L2FjMmJkNTkxLWI0NWUtNDdjNi05M2Y5LTgzZmI0YTk1 ZTliNC5jcmwwHwYDVR0jBBgwFoAUrkV0DK5IF50KgFEaRlvQhMawl4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJiZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2Zi NGE5NWU5YjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFn/IgAwQE rFMQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEMIqPo1p29MybRtMjA8n7ddKltCR0nEozfLDUWfSSktKIM1 V5oCM3gW7iGyzhTxjQmL76tYDdANKtDz7c4/HimbTvUcaaMEkf7LYA9bOpWkBEgQ xKIwGJ5gESAnWFItm82FlQjR9IzGowgDK1EDDA/kAqFv/NlFFc6HhwcFHHWAnOSH E3JQAdP56Qtw6QvJApRk0/2XQqL5G+xtzKI7J1FTbCh9aJ3qIM/pzs1vpG9JFecx AmGwwGWHFEDVOWTLXwSnYnZ6Wqkze2Rj1rD9PjrTZakqKS60DKeceVdmGQ1NS2lm x1ghMvuQSQeEwZhHbCzGcSaZoAhDpt9lmzE4i2U= -----END CERTIFICATE-----Generated at Sat Oct 10 12:34:29 2026 by rpki-client