$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa File: 21dde924-2599-39f1-b3dd-3e7314f62d6d.roa (raw, json) Hash identifier: Mwey14LNMUq6M9Bcu5roL7a7PsNhHA1V1y/QObPtTrI= Subject key identifier: 49:0C:5E:8C:92:8B:A1:D6:B2:B4:52:3A:79:AD:A1:0E:24:B2:47:CF Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584E66DA099EE5FA6500601DF600 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 3300 IP address blocks: 72.29.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:09:9e:e5:fa:65:00:60:1d:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=6a75decb-b527-4904-8231-d78aeb18ee88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:d6:72:84:02:fe:3b:96:af:55:d1:a2:ba: a9:a2:7a:9d:cf:db:2e:aa:96:b8:bd:28:43:7f:e2: a1:5e:5f:34:eb:4e:eb:09:9c:90:63:a3:3a:a8:ee: 07:71:0a:6d:e7:76:b0:74:2e:a6:81:78:b4:29:6d: d0:e7:e6:ed:0e:0f:a5:8b:e6:6f:9e:37:a9:0e:a8: 9c:29:bf:bb:16:20:ef:0f:b6:b3:9f:85:60:df:61: cb:f1:38:e4:7d:93:ef:01:7b:60:e6:3d:d7:32:79: 94:b9:d9:8c:56:42:d9:40:3a:c9:52:02:80:d5:69: f7:67:43:c8:d0:cd:22:b3:eb:42:6c:ad:1c:8a:11: 5f:14:cb:74:0a:b0:17:10:d6:8c:92:95:a9:ae:7a: 6e:1b:27:06:52:95:37:91:59:87:b7:15:3f:ff:00: 2f:e1:0f:7c:3b:96:50:e6:c3:6d:13:2e:21:72:4a: 3b:08:1c:37:bc:7c:31:4e:2b:d1:1e:a5:90:9e:ee: 27:6b:19:6c:a0:16:33:9b:c1:da:38:fd:93:e1:8a: 5f:b5:bf:0d:bb:33:55:37:88:57:25:b8:2d:0f:db: ff:92:28:4e:23:cd:bd:e5:53:40:25:50:29:0f:a2: dd:73:b9:3a:34:f4:e6:9e:ab:d7:73:73:1d:04:c5: 5b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0C:5E:8C:92:8B:A1:D6:B2:B4:52:3A:79:AD:A1:0E:24:B2:47:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 72.29.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1e:c5:c8:3d:06:52:5e:1c:9e:52:9f:dc:f0:38:a8:eb:41: 79:a0:2d:25:29:58:97:31:3e:70:fa:0a:cf:83:e7:70:06:f7: 3d:a5:96:5d:ad:3c:ce:8f:7f:a1:f8:97:43:f1:02:41:86:c4: c4:3b:6a:a6:41:cc:ba:ed:5e:56:45:9d:ca:f2:1b:9f:4d:18: 21:03:0c:f7:b7:33:a4:04:a9:c5:3c:74:67:37:01:d6:07:66: 9d:36:d5:dc:c1:c0:43:b3:68:9e:fb:e8:7d:83:63:68:06:4d: 57:97:96:26:dd:46:df:d3:d5:7a:ad:6a:05:34:a7:56:67:21: c0:57:67:7b:3e:04:2b:45:fa:e8:06:73:dc:ca:94:67:fb:a6: 06:0b:5e:79:41:f3:d6:56:e7:1b:06:e3:0f:a5:33:dd:ff:b7: 93:36:b9:d3:41:61:cb:d4:45:7b:31:18:6b:1a:3e:ee:b5:ca: 14:21:56:e8:fd:ac:b6:31:a8:48:73:5b:d9:b6:ae:eb:cf:ba: ac:17:ff:2a:92:63:50:27:c4:a8:bc:a7:89:c8:ae:f0:59:e4: d4:63:23:56:71:5f:aa:5c:fe:df:ef:f1:ac:b6:a2:19:24:36: bf:84:4c:2c:6c:e5:d2:4e:84:e0:c3:37:c1:b6:fa:f5:a9:a3: 06:aa:aa:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gme5fplAGAd9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NmE3NWRlY2ItYjUyNy00OTA0LTgyMzEtZDc4YWViMThlZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OLWcoQC/juWr1XRorqponqdz9suqpa4vShD f+KhXl80607rCZyQY6M6qO4HcQpt53awdC6mgXi0KW3Q5+btDg+li+ZvnjepDqic Kb+7FiDvD7azn4Vg32HL8TjkfZPvAXtg5j3XMnmUudmMVkLZQDrJUgKA1Wn3Z0PI 0M0is+tCbK0cihFfFMt0CrAXENaMkpWprnpuGycGUpU3kVmHtxU//wAv4Q98O5ZQ 5sNtEy4hcko7CBw3vHwxTivRHqWQnu4naxlsoBYzm8HaOP2T4Ypftb8NuzNVN4hX JbgtD9v/kihOI8295VNAJVApD6Ldc7k6NPTmnqvXc3MdBMVbgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkMXoySi6HWsrRSOnmtoQ4kskfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMjFkZGU5MjQtMjU5OS0z OWYxLWIzZGQtM2U3MzE0ZjYyZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgexcg9BlJeHJ5Sn9zwOKjrQXmgLSUpWJcxPnD6Cs+D53AG9z2lll2t PM6Pf6H4l0PxAkGGxMQ7aqZBzLrtXlZFncryG59NGCEDDPe3M6QEqcU8dGc3AdYH Zp021dzBwEOzaJ776H2DY2gGTVeXlibdRt/T1XqtagU0p1ZnIcBXZ3s+BCtF+ugG c9zKlGf7pgYLXnlB89ZW5xsG4w+lM93/t5M2udNBYcvURXsxGGsaPu61yhQhVuj9 rLYxqEhzW9m2ruvPuqwX/yqSY1AnxKi8p4nIrvBZ5NRjI1ZxX6pc/t/v8ay2ohkk Nr+ETCxs5dJOhODDN8G2+vWpowaqqvY= -----END CERTIFICATE-----Generated at Thu Jul 23 23:29:46 2026 by rpki-client