$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/00b25d71-7605-3d21-b0c7-f4244e93d3f8.roa File: 00b25d71-7605-3d21-b0c7-f4244e93d3f8.roa (raw, json) Hash identifier: Sxi43O8drTf0DdHHUMYbPX+x2frKOaQhQphcmQ7H+Os= Subject key identifier: 7B:DB:E3:BB:E1:44:57:30:35:E2:7B:68:A6:A4:72:DF:CE:A3:B9:C0 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584F4DA28F1D4A2A46C7219C36E3 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/00b25d71-7605-3d21-b0c7-f4244e93d3f8.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 3300 IP address blocks: 63.250.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8f:1d:4a:2a:46:c7:21:9c:36:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=03b91118-391b-4c3e-8f64-88dd1a0c2501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:01:50:a5:da:34:ca:36:51:fe:92:20:b9: 8c:62:c0:c6:0c:e7:4d:9c:08:49:a9:1c:20:b9:d7: e8:5a:d2:38:e3:ad:de:e7:9c:27:1d:5c:76:1b:9e: 20:9d:c6:15:9e:a3:fc:66:78:41:22:a7:62:71:a7: 71:ac:18:29:f6:91:20:4d:ef:00:37:16:4d:9d:02: 39:21:f3:ca:52:6f:62:e7:f1:4a:a7:39:91:0d:79: 1a:c5:d7:b2:2f:90:eb:a1:df:6b:95:1f:b7:68:34: 35:e0:42:cb:28:a7:2b:5a:80:d2:57:05:e4:5f:d4: 93:be:43:28:9f:1c:8e:99:32:c1:18:34:64:61:2f: 6f:34:67:ac:33:d6:2e:2d:06:ac:28:68:89:0f:88: e3:8d:1a:34:ce:20:5d:64:f0:e8:9b:3d:82:15:70: e9:8a:ee:e9:5c:fc:3a:fa:7a:e5:9c:2a:fe:24:24: 27:9e:71:c3:61:35:69:71:f5:5b:99:90:bc:31:7d: 01:af:97:b1:06:69:5c:33:4c:04:05:a7:2b:5c:93: 51:cb:14:8c:70:9e:3a:ae:a8:27:c4:3a:d0:d5:51: ba:9e:b0:f0:3c:e0:40:61:ba:43:51:d1:1d:d4:8d: f9:33:d0:d5:b0:27:35:9f:51:29:64:59:17:15:0e: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DB:E3:BB:E1:44:57:30:35:E2:7B:68:A6:A4:72:DF:CE:A3:B9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/00b25d71-7605-3d21-b0c7-f4244e93d3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 63.250.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3a:dc:3e:0d:2b:41:83:a2:e3:29:59:ef:6e:d4:77:c8:8b: c9:fe:2b:b9:15:ea:09:1f:d0:3f:20:7b:83:50:53:62:52:dc: 12:70:5d:3f:a6:25:de:f9:b3:da:56:c1:ff:9c:e4:1a:bf:e9: e2:92:d3:44:a5:18:d2:90:58:26:fa:e8:fb:25:98:29:e7:5a: 48:28:dc:f8:8a:38:8d:2c:52:0f:51:00:0a:6b:e2:b0:22:61: e8:0a:ba:74:41:be:17:c9:34:0a:b3:4f:64:38:5c:49:75:d8: b4:31:5a:fd:77:c8:8f:63:c3:b6:d0:45:a1:08:99:1b:60:9a: 50:00:19:54:7f:21:e9:34:86:8c:29:ff:4d:59:6c:26:71:7b: 48:25:3a:39:a6:b1:79:5d:5c:30:a0:43:0c:bf:cb:15:26:c3: a9:83:50:5a:1c:fd:73:2f:2b:34:12:89:b0:cf:ed:9e:f0:08: b0:f6:22:0f:88:0a:1c:58:cc:02:b3:a4:3c:1f:82:82:9d:18: 96:39:3a:63:38:52:53:c2:1c:97:e8:ef:c4:f3:26:4e:1b:f8: d8:0d:08:a2:4f:ce:f9:21:52:d3:ee:fe:46:e9:d1:78:fd:30: d8:d4:9f:57:40:72:b6:2f:ba:72:7c:15:4d:67:dc:58:38:ba: fc:e5:46:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noo8dSipGxyGcNuMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk MDNiOTExMTgtMzkxYi00YzNlLThmNjQtODhkZDFhMGMyNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMUBUKXaNMo2Uf6SILmMYsDGDOdNnAhJqRwg udfoWtI4463e55wnHVx2G54gncYVnqP8ZnhBIqdicadxrBgp9pEgTe8ANxZNnQI5 IfPKUm9i5/FKpzmRDXkaxdeyL5Drod9rlR+3aDQ14ELLKKcrWoDSVwXkX9STvkMo nxyOmTLBGDRkYS9vNGesM9YuLQasKGiJD4jjjRo0ziBdZPDomz2CFXDpiu7pXPw6 +nrlnCr+JCQnnnHDYTVpcfVbmZC8MX0Br5exBmlcM0wEBacrXJNRyxSMcJ46rqgn xDrQ1VG6nrDwPOBAYbpDUdEd1I35M9DVsCc1n1EpZFkXFQ74ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvb47vhRFcwNeJ7aKakct/Oo7nAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMDBiMjVkNzEtNzYwNS0z ZDIxLWIwYzctZjQyNDRlOTNkM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/qXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs63D4NK0GDouMpWe9u1HfIi8n+K7kV6gkf0D8ge4NQU2JS3BJwXT+m Jd75s9pWwf+c5Bq/6eKS00SlGNKQWCb66PslmCnnWkgo3PiKOI0sUg9RAApr4rAi YegKunRBvhfJNAqzT2Q4XEl12LQxWv13yI9jw7bQRaEImRtgmlAAGVR/Iek0howp /01ZbCZxe0glOjmmsXldXDCgQwy/yxUmw6mDUFoc/XMvKzQSibDP7Z7wCLD2Ig+I ChxYzAKzpDwfgoKdGJY5OmM4UlPCHJfo78TzJk4b+NgNCKJPzvkhUtPu/kbp0Xj9 MNjUn1dAcrYvunJ8FU1n3Fg4uvzlRvE= -----END CERTIFICATE-----Generated at Sun Oct 11 07:49:44 2026 by rpki-client