$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/77f1414e-58d3-318c-a14a-da35cce34728.roa File: 77f1414e-58d3-318c-a14a-da35cce34728.roa (raw, json) Hash identifier: wsBy20qvmqrtV0yG/FSMm/i1MKLt+ll51wFmG+clTjM= Subject key identifier: 1E:37:4F:18:46:55:9D:A6:FF:04:84:F5:97:F8:94:3D:59:26:19:88 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D316F6E0FACD4841335818DC0 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/77f1414e-58d3-318c-a14a-da35cce34728.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 3300 IP address blocks: 192.157.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6e:0f:ac:d4:84:13:35:81:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=768742ed-1ad8-4d18-bad7-1b26784ecdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:24:a9:c4:6d:c5:4e:5f:36:83:a3:58:3d:a5: a8:6c:95:49:e9:6a:8a:a5:b2:70:cf:83:80:e1:e7: e1:6a:83:91:5f:65:bf:f6:3f:d7:08:c2:20:cb:b9: 16:bc:ab:64:4f:7b:0b:5f:fa:ea:2c:6a:46:09:02: 35:b0:fb:cb:ea:ac:e7:f8:5b:d2:23:3b:2a:b0:21: cf:ea:6e:47:2d:f2:e8:23:59:af:27:35:24:f5:28: a9:e9:79:ea:9c:a3:a5:0d:54:a2:78:38:2c:36:c6: 30:0b:4e:fc:dc:cd:e0:55:16:0f:bf:56:8f:ba:67: a6:fd:01:51:0f:43:b8:fe:61:e6:fc:97:86:4f:3c: e9:ba:90:47:1a:2f:47:2d:92:cd:a7:d0:a1:de:44: b2:f5:8a:85:80:32:f7:4d:cd:52:42:90:ec:3b:9c: ab:19:fc:93:44:6a:8d:a1:3b:47:3b:95:99:a3:51: 6b:eb:08:0e:09:27:13:66:5f:f7:60:8e:75:b7:15: 8a:c9:d1:08:22:f3:06:e5:92:dd:04:56:e9:6e:2b: 81:1a:d8:06:99:54:21:2f:03:de:b9:93:d1:e6:d0: f7:d8:a3:87:dd:fa:14:f4:1f:c4:d7:2c:a7:7e:9a: 9a:c7:1a:fe:47:ba:6c:ef:cc:e8:93:e3:00:32:c0: bd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:4F:18:46:55:9D:A6:FF:04:84:F5:97:F8:94:3D:59:26:19:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/77f1414e-58d3-318c-a14a-da35cce34728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:af:57:55:f6:7d:14:de:0f:21:91:44:a7:40:f7:b2:70:42: 9a:94:04:a7:19:d8:15:71:de:c0:e2:ff:7d:df:2a:f1:4c:15: 70:3e:3a:58:68:85:a5:d3:eb:4a:2a:fd:a2:61:f5:7a:c0:d8: 9f:1e:37:93:8d:e1:b8:fd:2f:2f:07:46:57:9f:e7:88:5d:c5: 1d:37:98:84:87:60:db:a0:1b:e4:3a:d5:6b:c1:8b:57:96:74: 55:88:c2:2c:4b:a5:d7:86:61:e8:e7:ea:52:4c:b8:45:24:84: de:98:4b:8c:59:1b:a2:8e:af:1f:be:23:c9:84:e8:b7:c4:38: a6:fa:9a:24:58:e9:bd:9f:a7:36:8b:70:83:77:f6:60:bc:51: f0:a9:71:97:82:d7:cf:77:e2:75:83:6e:a0:54:67:99:ab:e9: 51:ef:f4:7b:c0:b5:27:9f:04:27:8e:53:ca:34:28:4f:8b:0f: c1:ec:7b:f8:6a:24:4f:fc:10:98:f2:19:42:5f:af:4f:1a:b1: e5:f6:9e:a1:73:1a:be:44:fa:e6:f9:86:83:f2:f8:c2:c1:75: d8:bd:1f:77:13:8c:83:df:41:7a:0a:4e:52:ec:36:de:2b:30: 99:be:81:72:d6:62:98:b5:8a:41:65:0c:b4:4e:12:83:1b:f6: 74:fe:fe:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb24PrNSEEzWBjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NzY4NzQyZWQtMWFkOC00ZDE4LWJhZDctMWIyNjc4NGVjZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCSpxG3FTl82g6NYPaWobJVJ6WqKpbJwz4OA 4efhaoORX2W/9j/XCMIgy7kWvKtkT3sLX/rqLGpGCQI1sPvL6qzn+FvSIzsqsCHP 6m5HLfLoI1mvJzUk9Sip6XnqnKOlDVSieDgsNsYwC0783M3gVRYPv1aPumem/QFR D0O4/mHm/JeGTzzpupBHGi9HLZLNp9Ch3kSy9YqFgDL3Tc1SQpDsO5yrGfyTRGqN oTtHO5WZo1Fr6wgOCScTZl/3YI51txWKydEIIvMG5ZLdBFbpbiuBGtgGmVQhLwPe uZPR5tD32KOH3foU9B/E1yynfpqaxxr+R7ps78zok+MAMsC9IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB43TxhGVZ2m/wSE9Zf4lD1ZJhmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvNzdmMTQxNGUtNThkMy0z MThjLWExNGEtZGEzNWNjZTM0NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJ2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACivV1X2fRTeDyGRRKdA97JwQpqUBKcZ2BVx3sDi/33fKvFMFXA+Olho haXT60oq/aJh9XrA2J8eN5ON4bj9Ly8HRlef54hdxR03mISHYNugG+Q61WvBi1eW dFWIwixLpdeGYejn6lJMuEUkhN6YS4xZG6KOrx++I8mE6LfEOKb6miRY6b2fpzaL cIN39mC8UfCpcZeC18934nWDbqBUZ5mr6VHv9HvAtSefBCeOU8o0KE+LD8Hse/hq JE/8EJjyGUJfr08aseX2nqFzGr5E+ub5hoPy+MLBddi9H3cTjIPfQXoKTlLsNt4r MJm+gXLWYpi1ikFlDLROEoMb9nT+/jg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:46:07 2026 by rpki-client