$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/16e2ba31-9672-3e9d-9871-43b1b4a17f4e.roa File: 16e2ba31-9672-3e9d-9871-43b1b4a17f4e.roa (raw, json) Hash identifier: WD9XTApk6YsEEYDROb+au/9BwIU9ehc6cDptX3BL5K8= Subject key identifier: B3:DE:1B:07:C1:74:69:70:E2:F9:D7:5C:29:07:8D:F7:AC:A0:C3:8A Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D8E6DC7E153447C7D298ECE40 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/16e2ba31-9672-3e9d-9871-43b1b4a17f4e.roa Signing time: Sun 19 Apr 2026 08:27:33 +0000 ROA not before: Sun 19 Apr 2026 08:27:33 +0000 ROA not after: Sat 18 Jul 2026 08:27:33 +0000 asID: 3300 IP address blocks: 63.250.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:6d:c7:e1:53:44:7c:7d:29:8e:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Apr 19 08:27:33 2026 GMT Not After : Jul 18 08:27:33 2026 GMT Subject: CN=844f9003-66a8-486e-bd4e-18909c3a09e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1a:b0:65:e1:67:3d:62:d9:d5:eb:05:b0:2c: d7:ee:25:35:39:35:bb:70:88:c8:ee:2f:84:b1:23: 6b:75:64:11:b4:49:6c:8f:fd:34:92:f5:15:43:5d: ed:73:de:24:31:1b:a3:10:33:1c:ad:1b:8e:eb:36: 79:ed:aa:9a:92:33:5c:cb:b1:00:34:20:2a:24:68: 15:67:a7:86:e9:20:a1:07:c1:f3:18:a3:ba:15:e6: 33:16:4d:2d:1e:e3:ae:f2:8e:12:39:6f:f1:54:d5: df:0e:cd:c4:bd:ba:70:fa:5c:38:29:14:f8:a2:36: 15:c9:9c:c0:42:8c:6e:11:c4:4f:e9:62:a5:2c:fb: f5:22:44:90:1c:ce:3b:e2:1d:8a:aa:69:3e:9b:53: d7:ed:ec:0c:99:a1:0d:ea:2d:fa:34:59:24:cc:2b: f6:30:35:19:27:d0:9e:a8:41:78:4b:57:76:2c:b9: 1c:ed:6c:53:74:df:0a:1f:0a:fd:ae:8e:8c:8e:79: 51:90:27:d0:ce:be:e4:69:84:9f:4d:51:aa:74:23: 1e:c2:6d:8e:bd:44:21:32:86:3c:18:b5:57:78:55: c1:94:d8:76:3a:bd:f2:06:22:85:37:a2:25:e8:7a: ab:e7:6b:24:2f:e3:ef:94:b5:38:78:df:b4:79:4c: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DE:1B:07:C1:74:69:70:E2:F9:D7:5C:29:07:8D:F7:AC:A0:C3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/16e2ba31-9672-3e9d-9871-43b1b4a17f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 63.250.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7a:c2:86:77:bc:7e:ab:27:2d:bc:0b:bf:de:ab:73:0b:18: 55:2a:0e:33:24:54:93:1d:22:3c:85:6b:5c:b7:00:f6:75:cc: 08:b6:5c:69:79:c8:f9:6e:6a:3e:4d:b1:70:22:45:c9:55:5e: 28:3b:90:dc:48:fa:86:b3:7e:b1:f0:12:55:d1:b4:72:96:a8: 2c:7c:31:ae:4f:de:49:e2:f6:0c:d0:14:c9:74:a6:f3:d2:ec: 15:2f:5a:01:5a:35:39:6f:8a:6a:20:8f:92:63:3b:ce:dc:10: 6e:9e:b5:7a:ce:0f:5d:d9:73:8c:ec:aa:c3:5a:ac:a5:fa:8d: 38:50:e3:a9:ad:c1:ff:98:34:60:ca:9e:68:a0:c6:ef:b6:56: d4:ba:3e:d7:f4:1b:37:86:16:38:56:c2:42:5a:0e:ae:0d:b2: 77:6a:a8:38:6d:bc:a4:82:d0:31:e2:0e:80:c4:11:cd:a7:71: ba:c6:38:b2:d6:b3:c7:4c:4c:5a:4d:72:a2:d5:63:98:2f:27: 29:e5:8d:8c:4a:dc:01:1c:c8:95:f5:07:a2:5e:28:a6:ef:bc: 2c:72:ce:59:33:c2:f4:df:c9:6c:bc:e9:8c:a7:f5:f2:7d:6e: 8e:94:6c:2c:76:e9:a9:7f:79:7e:54:b0:1c:16:bd:ec:e1:bf: 2f:ef:df:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ObcfhU0R8fSmOzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDQxOTA4MjczM1oXDTI2MDcxODA4MjczM1owLzEtMCsGA1UEAxMk ODQ0ZjkwMDMtNjZhOC00ODZlLWJkNGUtMTg5MDljM2EwOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BqwZeFnPWLZ1esFsCzX7iU1OTW7cIjI7i+E sSNrdWQRtElsj/00kvUVQ13tc94kMRujEDMcrRuO6zZ57aqakjNcy7EANCAqJGgV Z6eG6SChB8HzGKO6FeYzFk0tHuOu8o4SOW/xVNXfDs3Evbpw+lw4KRT4ojYVyZzA QoxuEcRP6WKlLPv1IkSQHM474h2Kqmk+m1PX7ewMmaEN6i36NFkkzCv2MDUZJ9Ce qEF4S1d2LLkc7WxTdN8KHwr9ro6MjnlRkCfQzr7kaYSfTVGqdCMewm2OvUQhMoY8 GLVXeFXBlNh2Or3yBiKFN6Il6Hqr52skL+PvlLU4eN+0eUw5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPeGwfBdGlw4vnXXCkHjfesoMOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMTZlMmJhMzEtOTY3Mi0z ZTlkLTk4NzEtNDNiMWI0YTE3ZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN6woZ3vH6rJy28C7/eq3MLGFUqDjMkVJMdIjyFa1y3APZ1zAi2XGl5 yPluaj5NsXAiRclVXig7kNxI+oazfrHwElXRtHKWqCx8Ma5P3kni9gzQFMl0pvPS 7BUvWgFaNTlvimogj5JjO87cEG6etXrOD13Zc4zsqsNarKX6jThQ46mtwf+YNGDK nmigxu+2VtS6Ptf0GzeGFjhWwkJaDq4NsndqqDhtvKSC0DHiDoDEEc2ncbrGOLLW s8dMTFpNcqLVY5gvJynljYxK3AEcyJX1B6JeKKbvvCxyzlkzwvTfyWy86Yyn9fJ9 bo6UbCx26al/eX5UsBwWvezhvy/v36k= -----END CERTIFICATE-----Generated at Mon Apr 27 16:23:52 2026 by rpki-client