$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa File: 989d0448-cf0d-3fdf-a782-65bf875466d4.roa (raw, json) Hash identifier: enWI9HwmkQo1zF66kAOj73cMkROSq0k3aii1bgSVHOE= Subject key identifier: 1B:82:BC:58:B9:EF:64:3C:B0:EF:2F:D0:3D:EE:DF:65:A6:D3:76:DF Certificate issuer: /CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a Certificate serial: 010D0C9F4328584DB1DAD2E1A912392F07A067C0 Authority key identifier: 10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 395497 IP address blocks: 23.166.152.0/24 maxlen: 32 2602:f9d6::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:d2:e1:a9:12:39:2f:07:a0:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=7fe7f684-5de3-48c7-92eb-e5a3213be5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:aa:f3:2d:78:d4:bb:d7:a3:9c:76:23:6c: b0:be:44:26:71:35:0a:2c:49:1b:fe:b6:1c:56:f1: ed:47:dd:b8:27:22:26:3f:f9:23:66:17:d6:d9:fe: fc:59:21:b0:a5:6c:60:c2:67:e8:43:0f:b0:2a:e3: b6:aa:b9:b0:0c:ae:cc:16:af:5a:5d:d1:01:5a:41: d4:8b:64:03:a2:ab:fb:d7:3a:8b:66:be:eb:81:19: b7:95:9f:16:f6:a9:69:7a:2d:78:b9:cd:e0:31:52: 81:e4:fd:ef:02:51:04:b8:3b:39:ed:a0:10:fa:ff: 09:f5:dd:1b:59:37:34:93:7f:df:fc:a4:a4:3c:16: e6:a5:36:d9:8d:ab:fa:ad:c8:2d:2f:d4:ec:45:da: 8c:3a:ac:27:86:82:7b:da:24:22:52:bf:ae:4e:70: af:0c:7d:d2:5a:82:79:b1:e3:51:38:37:bf:76:86: 0b:34:d2:68:54:ce:77:32:40:84:c8:70:38:07:93: 60:58:fe:e2:6e:2e:29:2f:25:bf:db:cc:d4:54:90: e4:d2:ae:fc:24:27:8b:ca:50:7b:01:34:ec:8a:f1: 84:9d:42:2f:a4:5d:0a:96:8e:e9:f3:c5:22:1a:e5: bd:09:ce:93:65:2f:52:90:cf:e0:74:86:0b:5c:df: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:82:BC:58:B9:EF:64:3C:B0:EF:2F:D0:3D:EE:DF:65:A6:D3:76:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl X509v3 Authority Key Identifier: keyid:10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer sbgp-ipAddrBlock: critical IPv4: 23.166.152.0/24 IPv6: 2602:f9d6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:36:bd:45:22:b4:b6:03:25:3f:83:35:5e:be:5c:07:98:57: 05:fb:b2:b0:38:c6:c6:3b:94:36:bc:ef:9f:43:fd:1b:2f:13: ba:64:d4:8d:61:ef:b7:15:9f:a0:4f:d0:03:75:33:66:61:70: 55:6d:1d:1b:9c:a3:5d:60:02:a3:ed:d6:da:19:6a:e6:b0:cc: 27:02:02:28:24:5b:bc:34:c2:63:76:45:ea:ec:de:e2:5e:4c: fe:99:fd:41:83:e5:14:54:c4:a8:d6:fe:46:13:4d:00:bd:ae: 53:5c:38:4d:63:af:19:cb:21:e5:17:28:f3:20:5d:07:5c:78: 1f:dc:93:12:ad:bc:12:50:e4:a9:a9:30:a5:2a:c1:89:5d:26: c4:6f:4f:9a:27:b9:6b:58:77:7b:7f:ad:99:e1:ad:6e:c4:10: 01:30:fa:09:0d:6b:78:90:0e:6b:ca:24:77:f5:55:10:af:74: 76:c1:09:43:25:59:44:46:92:a6:3b:ff:2c:bb:a1:97:4a:a9: b9:ba:03:b2:e5:4e:03:21:c2:90:1e:54:03:72:5a:58:02:1a: 57:90:15:db:8b:06:1f:f1:df:a8:01:44:cd:60:5d:ef:54:cb: ec:ee:23:f6:d0:57:36:f8:dd:9e:b8:09:d0:b5:83:84:8e:28: 1b:66:ec:b7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2x2tLhqRI5LwegZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJiNjBmYTItOGMxZC00YTM4LWJkY2YtMTVmNTNmMjc2 YzVhMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk N2ZlN2Y2ODQtNWRlMy00OGM3LTkyZWItZTVhMzIxM2JlNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFGq8y141LvXo5x2I2ywvkQmcTUKLEkb/rYc VvHtR924JyImP/kjZhfW2f78WSGwpWxgwmfoQw+wKuO2qrmwDK7MFq9aXdEBWkHU i2QDoqv71zqLZr7rgRm3lZ8W9qlpei14uc3gMVKB5P3vAlEEuDs57aAQ+v8J9d0b WTc0k3/f/KSkPBbmpTbZjav6rcgtL9TsRdqMOqwnhoJ72iQiUr+uTnCvDH3SWoJ5 seNRODe/doYLNNJoVM53MkCEyHA4B5NgWP7ibi4pLyW/28zUVJDk0q78JCeLylB7 ATTsivGEnUIvpF0Klo7p88UiGuW9Cc6TZS9SkM/gdIYLXN9pTwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBuCvFi572Q8sO8v0D3u32Wm03bfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYmI2 MGZhMi04YzFkLTRhMzgtYmRjZi0xNWY1M2YyNzZjNWEvOTg5ZDA0NDgtY2YwZC0z ZmRmLWE3ODItNjViZjg3NTQ2NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWJiNjBmYTItOGMxZC00YTM4LWJk Y2YtMTVmNTNmMjc2YzVhL2FiYjYwZmEyLThjMWQtNGEzOC1iZGNmLTE1ZjUzZjI3 NmM1YS5jcmwwHwYDVR0jBBgwFoAUEGXqQKCr/AYVNe7VUztpd59c24EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYmI2MGZhMi04YzFkLTRhMzgtYmRjZi0xNWY1 M2YyNzZjNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6aYMA4E AgACMAgDBgAmAvnWADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQNr1FIrS2AyU/gzVevlwHmFcF+7KwOMbG O5Q2vO+fQ/0bLxO6ZNSNYe+3FZ+gT9ADdTNmYXBVbR0bnKNdYAKj7dbaGWrmsMwn AgIoJFu8NMJjdkXq7N7iXkz+mf1Bg+UUVMSo1v5GE00Ava5TXDhNY68ZyyHlFyjz IF0HXHgf3JMSrbwSUOSpqTClKsGJXSbEb0+aJ7lrWHd7f62Z4a1uxBABMPoJDWt4 kA5ryiR39VUQr3R2wQlDJVlERpKmO/8su6GXSqm5ugOy5U4DIcKQHlQDclpYAhpX kBXbiwYf8d+oAUTNYF3vVMvs7iP20Fc2+N2euAnQtYOEjigbZuy3 -----END CERTIFICATE-----Generated at Wed May 13 11:45:45 2026 by rpki-client