$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa File: 21dde924-2599-39f1-b3dd-3e7314f62d6d.roa (raw, json) Hash identifier: 71GfONpO+vIQ2PXggvdCcCx8yahUgXq67+5221AnV+g= Subject key identifier: CA:2C:DF:44:0F:2C:BE:2F:D5:D8:77:DC:2C:0D:FE:36:DB:7E:0C:AF Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584F093CD9E4A2983364E9FE7800 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 3300 IP address blocks: 72.29.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d9:e4:a2:98:33:64:e9:fe:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=0272b88c-08ca-4ee2-a72c-edfd6a1278ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:54:38:f2:b8:f0:67:4d:92:dd:5a:10:0d: 68:7b:5a:19:3b:f7:2f:b6:b9:b7:25:e5:6f:a7:1c: 0c:99:e2:86:bc:dd:df:59:e7:8f:f1:35:8f:9b:f2: a4:04:2d:d2:04:ac:cb:5a:e9:07:55:3a:04:1c:99: 5a:2b:70:3e:15:ed:1f:aa:b5:38:4b:ce:e7:4a:fa: 8d:82:5d:13:09:30:4b:de:7a:c3:63:d9:fd:79:db: 04:c2:c2:77:eb:71:19:8d:ae:fb:4e:6a:e0:54:af: 8c:23:06:1b:63:f7:7c:49:be:86:73:65:f5:a5:a9: 75:e3:e8:c6:ab:95:e1:87:96:6b:6a:9e:70:52:1a: ca:88:c0:37:ac:dd:87:73:8d:a0:d7:b6:44:73:db: 30:0d:b4:0d:4e:af:f0:8d:27:26:e7:f6:ec:b3:5a: b8:91:f6:f7:41:03:13:51:25:7c:72:ff:5f:0c:53: 8d:e4:29:17:83:98:0e:9b:a6:c6:86:92:9e:82:05: f8:9f:f5:c2:db:9f:01:68:92:95:b8:07:56:f7:4c: 65:26:89:d2:e3:ac:ce:25:06:d1:99:f2:b2:74:19: b4:a4:77:c7:da:33:70:26:b4:dc:2b:9f:c0:23:92: 02:04:52:5c:79:e0:9e:fe:e2:0f:3b:f6:e2:47:3a: f0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2C:DF:44:0F:2C:BE:2F:D5:D8:77:DC:2C:0D:FE:36:DB:7E:0C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 72.29.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:68:ef:98:d2:24:4b:26:62:b0:08:e6:48:eb:41:e4:de:95: 4f:03:5a:1d:a5:c6:51:90:e5:d9:f1:d5:80:b3:85:0d:af:d5: 42:ba:dd:04:b0:88:f1:ac:25:ec:5f:c7:9e:25:aa:df:1d:83: 01:a0:92:31:77:55:e9:a6:22:57:13:0f:74:5c:45:4c:21:69: 5d:8b:8a:ca:62:19:03:f3:6a:be:94:b2:cc:2a:a9:a1:b0:54: 73:b9:e2:b4:3b:23:44:de:b6:d6:98:bc:a8:22:f7:d0:02:47: 89:16:a0:86:58:28:ff:f4:b6:f7:17:2a:fa:71:72:a1:de:ce: 72:ef:46:5b:2f:3c:a0:0c:8b:9a:2c:7b:b7:5c:3d:48:a8:ff: 4f:3d:7c:83:20:db:f0:15:f2:94:25:a5:0d:5f:b7:b6:b7:aa: a1:f6:9a:fd:16:13:f9:90:f9:c1:5b:c9:7b:e7:d7:cc:45:51: ad:75:ab:2a:2a:36:81:35:d4:57:46:1a:c0:d0:b8:ae:45:65: 9b:3b:6f:60:1c:ff:e6:a3:c1:93:aa:15:28:aa:5a:ee:59:28: ed:f0:87:30:f4:67:3f:71:ce:c5:66:d1:fe:06:cf:75:73:c2: 52:da:cb:34:bd:a5:07:53:75:de:e4:40:70:92:0c:0b:5a:24: a8:93:b0:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNnkopgzZOn+eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MDI3MmI4OGMtMDhjYS00ZWUyLWE3MmMtZWRmZDZhMTI3OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1RUOPK48GdNkt1aEA1oe1oZO/cvtrm3JeVv pxwMmeKGvN3fWeeP8TWPm/KkBC3SBKzLWukHVToEHJlaK3A+Fe0fqrU4S87nSvqN gl0TCTBL3nrDY9n9edsEwsJ363EZja77TmrgVK+MIwYbY/d8Sb6Gc2X1pal14+jG q5Xhh5Zrap5wUhrKiMA3rN2Hc42g17ZEc9swDbQNTq/wjScm5/bss1q4kfb3QQMT USV8cv9fDFON5CkXg5gOm6bGhpKeggX4n/XC258BaJKVuAdW90xlJonS46zOJQbR mfKydBm0pHfH2jNwJrTcK5/AI5ICBFJceeCe/uIPO/biRzrwBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMos30QPLL4v1dh33CwN/jbbfgyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMjFkZGU5MjQtMjU5OS0z OWYxLWIzZGQtM2U3MzE0ZjYyZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxo75jSJEsmYrAI5kjrQeTelU8DWh2lxlGQ5dnx1YCzhQ2v1UK63QSw iPGsJexfx54lqt8dgwGgkjF3VemmIlcTD3RcRUwhaV2LispiGQPzar6UsswqqaGw VHO54rQ7I0TettaYvKgi99ACR4kWoIZYKP/0tvcXKvpxcqHeznLvRlsvPKAMi5os e7dcPUio/089fIMg2/AV8pQlpQ1ft7a3qqH2mv0WE/mQ+cFbyXvn18xFUa11qyoq NoE11FdGGsDQuK5FZZs7b2Ac/+ajwZOqFSiqWu5ZKO3whzD0Zz9xzsVm0f4Gz3Vz wlLayzS9pQdTdd7kQHCSDAtaJKiTsLU= -----END CERTIFICATE-----Generated at Thu Sep 10 21:42:31 2026 by rpki-client