$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa File: c08b5e33-b653-3f50-b395-3e30e69a2601.roa (raw, json) Hash identifier: TeUy0xVloWcGgeQbD0AwmerdGBefih+PoO6a0bnTpl4= Subject key identifier: F8:1B:6E:6A:42:5E:32:7D:1D:D9:1F:D4:2B:57:1B:4F:B5:40:5B:6E Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D316F6E22226E16BCC025CC80 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 3300 IP address blocks: 192.157.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6e:22:22:6e:16:bc:c0:25:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=b3a235fb-d79d-4ca2-afdf-48a69e40ffa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:47:6d:64:80:dd:e3:e4:b1:19:fa:66:09:26: 9a:92:fb:fe:f8:33:4d:d3:05:44:33:88:4c:72:07: 58:52:bc:43:ec:6e:dc:6e:6c:36:14:1c:aa:d4:d5: b6:c2:b3:96:a6:0b:f8:d1:71:f4:81:f3:f3:0e:cc: 5a:c7:e2:b9:57:94:5e:24:68:8c:25:31:04:bb:80: 4d:78:9f:56:7d:de:29:10:c3:83:76:bc:f7:d2:36: a9:3e:c7:4c:ac:33:a7:f4:38:7f:06:43:c3:ff:df: 01:14:9c:40:91:ad:69:d2:86:05:77:6f:00:1f:1a: 7d:36:e5:d4:b7:c3:ba:6e:2b:7b:35:59:68:68:f7: 0e:63:f3:71:62:78:19:a5:c0:88:22:e8:a2:44:b3: 48:7f:2d:ae:00:d6:f6:84:17:21:6f:8a:0a:74:48: 71:d8:76:41:3b:5a:e6:44:dc:7c:00:0d:58:38:6a: 23:88:c3:44:87:a1:86:b1:e7:07:a8:87:e4:cf:21: 49:49:35:0a:64:99:3f:7d:53:60:08:2f:6b:d3:2e: ff:db:b4:e8:b4:ad:eb:6a:fb:c2:fc:92:0f:ac:cf: b7:7a:55:2e:0c:24:a7:b0:d3:25:4f:7a:24:00:c7: cc:ef:e0:9e:c5:34:6f:d2:4d:c6:2d:66:39:86:3d: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1B:6E:6A:42:5E:32:7D:1D:D9:1F:D4:2B:57:1B:4F:B5:40:5B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:de:38:87:f6:41:2e:71:f3:5b:54:fb:7b:f0:0c:e4:20:10: d4:76:7b:65:9c:39:06:6c:26:64:1e:14:a0:56:61:b5:de:32: 00:ee:00:ec:2c:0b:d7:f8:5c:1e:06:34:a8:d0:3b:a4:1d:ad: df:4b:d7:0b:7c:80:54:06:a2:97:e1:6b:11:a1:0a:15:a3:76: e1:0a:06:16:c5:22:77:77:e8:c5:05:48:b2:cc:13:b4:97:37: 61:9f:c8:62:aa:64:e1:85:0a:b7:17:79:99:f6:68:84:49:8d: 6d:c9:e1:33:04:ce:3f:eb:af:ef:ee:39:8f:ae:eb:df:d1:55: a8:05:4d:12:56:43:eb:31:94:ce:f2:d8:75:67:f6:70:03:cc: 30:4d:b8:b3:13:7a:bb:dc:89:d7:1e:ec:f9:45:86:4b:ed:8f: f8:1a:22:1d:9c:0a:00:bc:1c:36:e5:9a:a0:a0:41:79:0d:dc: 66:f6:13:73:86:47:b6:32:0b:7b:ac:4b:56:b0:df:11:c9:bd: b8:33:6b:a4:5d:9b:0a:7b:2d:cb:62:04:68:64:c4:91:4e:32: 85:d1:0b:59:ae:ea:9b:b1:fe:47:d3:bf:ec:3e:d7:f6:e2:e3: ac:65:08:f6:8d:89:49:e3:ca:95:4c:6d:25:cc:3a:53:ab:a7: 66:b2:d2:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb24iIm4WvMAlzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk YjNhMjM1ZmItZDc5ZC00Y2EyLWFmZGYtNDhhNjllNDBmZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0dtZIDd4+SxGfpmCSaakvv++DNN0wVEM4hM cgdYUrxD7G7cbmw2FByq1NW2wrOWpgv40XH0gfPzDsxax+K5V5ReJGiMJTEEu4BN eJ9Wfd4pEMODdrz30japPsdMrDOn9Dh/BkPD/98BFJxAka1p0oYFd28AHxp9NuXU t8O6bit7NVloaPcOY/NxYngZpcCIIuiiRLNIfy2uANb2hBchb4oKdEhx2HZBO1rm RNx8AA1YOGojiMNEh6GGsecHqIfkzyFJSTUKZJk/fVNgCC9r0y7/27TotK3ravvC /JIPrM+3elUuDCSnsNMlT3okAMfM7+CexTRv0k3GLWY5hj082wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgbbmpCXjJ9Hdkf1CtXG0+1QFtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYzA4YjVlMzMtYjY1My0z ZjUwLWIzOTUtM2UzMGU2OWEyNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJ2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTeOIf2QS5x81tU+3vwDOQgENR2e2WcOQZsJmQeFKBWYbXeMgDuAOws C9f4XB4GNKjQO6Qdrd9L1wt8gFQGopfhaxGhChWjduEKBhbFInd36MUFSLLME7SX N2GfyGKqZOGFCrcXeZn2aIRJjW3J4TMEzj/rr+/uOY+u69/RVagFTRJWQ+sxlM7y 2HVn9nADzDBNuLMTervcidce7PlFhkvtj/gaIh2cCgC8HDblmqCgQXkN3Gb2E3OG R7YyC3usS1aw3xHJvbgza6Rdmwp7LctiBGhkxJFOMoXRC1mu6pux/kfTv+w+1/bi 46xlCPaNiUnjypVMbSXMOlOrp2ay0qo= -----END CERTIFICATE-----Generated at Thu Mar 26 21:04:11 2026 by rpki-client