$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/1eabd101-4ea2-3e75-be71-85267c567a73.roa File: 1eabd101-4ea2-3e75-be71-85267c567a73.roa (raw, json) Hash identifier: wB3ZBEQZWNrRs7EiXJFM0iwOAJCTXOWjiIBDOes8sV4= Subject key identifier: 9D:2A:02:C3:9A:92:B5:75:51:2E:82:65:1F:56:10:75:E6:E7:E1:F0 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D8E6D9293933845E23E961600 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/1eabd101-4ea2-3e75-be71-85267c567a73.roa Signing time: Sun 19 Apr 2026 08:27:08 +0000 ROA not before: Sun 19 Apr 2026 08:27:08 +0000 ROA not after: Sat 18 Jul 2026 08:27:08 +0000 asID: 3300 IP address blocks: 63.250.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:6d:92:93:93:38:45:e2:3e:96:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Apr 19 08:27:08 2026 GMT Not After : Jul 18 08:27:08 2026 GMT Subject: CN=8e98f2d5-1803-49eb-bbac-952d0f5a9c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:9c:63:de:b7:26:5d:12:49:1e:87:90:c3: e6:d7:87:2c:7b:a9:49:9f:9a:2c:3a:13:9f:54:fe: 35:1b:7c:f3:3d:03:34:fd:ab:4e:2d:3d:f0:34:65: 2a:92:f9:b9:25:a4:04:c7:cf:8d:09:bb:3e:32:8d: 29:21:a1:6d:50:f0:77:41:67:de:bc:e5:a9:0e:1d: 31:8a:ef:31:b9:75:a2:74:1e:29:a4:09:ca:23:20: 39:ff:f6:2e:1c:66:f1:71:03:1e:4e:a8:34:60:ad: 5a:32:b1:15:f6:f2:61:c9:90:a8:17:43:31:2e:18: 87:03:d8:98:aa:b0:77:d3:c4:23:cd:2c:52:66:f7: 32:dd:83:e0:ca:43:e3:ec:5c:30:b2:47:dd:00:4c: 17:33:5d:9d:fe:72:c0:9d:01:2d:d8:88:29:96:ea: e0:c1:23:6b:4b:41:03:3c:3a:68:e9:ce:4e:6c:5b: a6:4e:99:ed:68:fa:19:61:6e:b1:7a:63:ff:08:6f: 93:c7:6c:78:50:bc:05:22:98:50:26:2a:a6:08:ec: 8b:bf:53:6f:b9:d7:44:72:ff:4b:01:61:36:44:f1: ab:f3:e0:2c:c5:7e:dc:f6:ee:0b:40:e3:c3:9d:73: 9c:ff:87:da:a9:87:30:76:61:24:a8:07:4f:12:75: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:02:C3:9A:92:B5:75:51:2E:82:65:1F:56:10:75:E6:E7:E1:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/1eabd101-4ea2-3e75-be71-85267c567a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 63.250.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:55:2a:01:eb:0f:12:58:3d:9f:fc:33:46:74:35:6b:c8:a1: c3:95:3f:64:ae:1b:65:e5:b1:e7:3f:1e:ce:e1:db:b5:49:7d: 86:52:db:5a:7a:f7:dc:a8:b5:9b:67:83:27:23:56:4a:5c:f1: 9b:77:59:e2:7b:a9:5e:55:87:60:00:b1:07:81:55:65:ec:d8: c4:03:82:6c:11:40:6e:96:26:e5:8b:d4:05:fe:88:fb:d3:08: 42:de:86:e2:48:9b:0a:bf:3b:d0:db:ec:7e:2b:14:50:10:55: ee:51:73:c6:a0:94:bd:fc:04:16:20:cb:df:89:23:96:59:e2: 2a:c7:22:df:d3:52:bc:f8:09:ed:d3:25:b7:6e:f0:83:2f:16: 7f:ed:67:4d:1b:55:cb:eb:65:fa:76:d9:71:71:b6:e4:f5:81: 65:3e:8d:5b:80:2f:6b:0e:24:9a:93:d6:99:3d:82:cd:b2:8a: 93:b4:a2:6a:aa:d3:46:7c:1c:80:ad:94:9b:0f:6c:7d:64:c7: 00:c3:0d:ee:ae:5a:bd:93:3f:4a:64:5e:99:d3:a6:3f:db:29: 10:06:31:68:19:28:c1:0e:d6:ec:60:a0:4d:54:de:68:dd:77: 18:25:ef:4e:b5:7b:5a:2c:cc:2b:23:90:ad:04:e9:5e:cc:a1: 60:73:89:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ObZKTkzhF4j6WFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDQxOTA4MjcwOFoXDTI2MDcxODA4MjcwOFowLzEtMCsGA1UEAxMk OGU5OGYyZDUtMTgwMy00OWViLWJiYWMtOTUyZDBmNWE5YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnECcY963Jl0SSR6HkMPm14cse6lJn5osOhOf VP41G3zzPQM0/atOLT3wNGUqkvm5JaQEx8+NCbs+Mo0pIaFtUPB3QWfevOWpDh0x iu8xuXWidB4ppAnKIyA5//YuHGbxcQMeTqg0YK1aMrEV9vJhyZCoF0MxLhiHA9iY qrB308QjzSxSZvcy3YPgykPj7FwwskfdAEwXM12d/nLAnQEt2IgplurgwSNrS0ED PDpo6c5ObFumTpntaPoZYW6xemP/CG+Tx2x4ULwFIphQJiqmCOyLv1NvuddEcv9L AWE2RPGr8+AsxX7c9u4LQOPDnXOc/4faqYcwdmEkqAdPEnUXSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0qAsOakrV1US6CZR9WEHXm5+HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMWVhYmQxMDEtNGVhMi0z ZTc1LWJlNzEtODUyNjdjNTY3YTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItVKgHrDxJYPZ/8M0Z0NWvIocOVP2SuG2Xlsec/Hs7h27VJfYZS21p6 99yotZtngycjVkpc8Zt3WeJ7qV5Vh2AAsQeBVWXs2MQDgmwRQG6WJuWL1AX+iPvT CELehuJImwq/O9Db7H4rFFAQVe5Rc8aglL38BBYgy9+JI5ZZ4irHIt/TUrz4Ce3T Jbdu8IMvFn/tZ00bVcvrZfp22XFxtuT1gWU+jVuAL2sOJJqT1pk9gs2yipO0omqq 00Z8HICtlJsPbH1kxwDDDe6uWr2TP0pkXpnTpj/bKRAGMWgZKMEO1uxgoE1U3mjd dxgl7061e1oszCsjkK0E6V7MoWBzicM= -----END CERTIFICATE-----Generated at Mon Apr 27 16:24:09 2026 by rpki-client