$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2ed8f3f4-4c8e-3785-b6a5-4ef45ef51b6d.roa File: 2ed8f3f4-4c8e-3785-b6a5-4ef45ef51b6d.roa (raw, json) Hash identifier: CNVWOPwHcBf4UahQVDGCgFlnRPVGjcW2G1woypMfV9I= Subject key identifier: 4F:AB:C9:56:14:3C:3A:E1:AD:FA:90:A7:DD:F1:BD:E6:15:52:7B:39 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584F94D308E1F02D379F43EBE840 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2ed8f3f4-4c8e-3785-b6a5-4ef45ef51b6d.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 3300 IP address blocks: 198.207.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:08:e1:f0:2d:37:9f:43:eb:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=b647a862-7feb-4811-a7bb-6236d0e3acdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:78:46:ef:61:b4:8e:dd:1d:85:f4:a5:bc: 52:4c:89:40:f0:10:ff:59:7c:b9:94:09:ee:a0:be: e1:6d:b7:a4:29:1d:88:2d:01:b6:95:6f:f3:6f:f4: ed:54:d7:d2:6a:08:40:15:98:4b:9d:c1:f4:59:f1: c4:64:9c:f7:d0:16:a6:c4:7f:12:28:be:a6:86:81: 8f:02:c3:38:de:63:05:94:90:96:4d:60:e8:91:5d: 0a:86:0c:55:2c:fa:cc:d1:90:6b:9d:fa:a3:48:8e: 30:a5:01:e4:18:b1:31:90:09:e1:f7:8f:55:01:c6: eb:9f:30:52:79:a9:ee:ea:9e:ec:bb:3c:10:f8:d2: 4e:a2:82:0b:1c:34:9c:3e:f3:27:c6:9b:9a:fe:95: f4:ce:5f:22:15:9e:51:c9:ff:7c:6e:72:39:5e:1c: 32:ca:1c:bb:19:be:a8:5c:c0:6e:48:68:5e:3c:93: bd:58:2f:51:f6:16:fb:c8:b6:ba:f5:d7:8b:61:ca: c4:fb:84:66:33:91:a7:a0:19:ad:7f:2d:30:49:ce: 0d:2b:db:05:1a:1f:10:63:84:26:a2:84:20:83:f6: a4:f9:d8:1a:a7:6f:cc:e7:ab:8a:9e:42:11:2f:a5: f5:d8:56:44:9f:fe:c2:bb:eb:b4:12:cb:86:30:cd: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AB:C9:56:14:3C:3A:E1:AD:FA:90:A7:DD:F1:BD:E6:15:52:7B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/2ed8f3f4-4c8e-3785-b6a5-4ef45ef51b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 198.207.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:62:e4:e2:44:a4:c6:d6:30:3b:f7:0a:57:5a:57:74:b5:ea: d0:af:ef:c4:72:3d:f2:d2:44:64:77:da:d5:f0:80:dc:28:35: 13:0d:06:9f:05:f2:fb:ed:de:32:e7:4b:de:1a:5f:8d:2f:5e: dd:5a:97:bd:f8:ec:00:4e:d4:f0:17:04:11:33:52:eb:53:6e: fb:a8:34:9d:ce:20:2d:9e:dd:f8:8d:95:08:d0:a0:80:dd:3c: 08:47:6d:f2:ae:ec:d3:58:71:50:85:4c:d8:85:33:4a:19:ff: 66:70:6e:ae:c5:74:f3:c9:14:98:fa:8f:5e:e8:60:1b:38:f5: 03:b6:34:75:f4:03:f2:60:07:24:cc:d0:a7:4c:f9:c2:82:e0: eb:9c:80:a7:ac:be:a2:ee:2c:5e:ef:31:f7:76:48:a1:bc:d4: cb:5d:58:23:02:0b:a7:8a:08:ad:44:20:38:45:13:9c:d2:f3: 3c:89:04:73:5c:d3:fc:a3:e0:a3:9e:ec:ca:11:06:85:79:3c: 3c:ac:cc:f4:b7:f1:6d:e6:5d:56:4e:50:62:fb:76:fb:a7:f6: 81:9b:25:25:cf:5f:70:65:0f:3c:35:a5:56:4a:fd:4f:72:04: 08:db:89:c9:af:ff:77:25:41:5c:33:6c:ba:e6:cf:9a:fc:e8: 34:95:dd:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0wjh8C03n0Pr6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YjY0N2E4NjItN2ZlYi00ODExLWE3YmItNjIzNmQwZTNhY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM54Ru9htI7dHYX0pbxSTIlA8BD/WXy5lAnu oL7hbbekKR2ILQG2lW/zb/TtVNfSaghAFZhLncH0WfHEZJz30BamxH8SKL6mhoGP AsM43mMFlJCWTWDokV0KhgxVLPrM0ZBrnfqjSI4wpQHkGLExkAnh949VAcbrnzBS eanu6p7suzwQ+NJOooILHDScPvMnxpua/pX0zl8iFZ5Ryf98bnI5Xhwyyhy7Gb6o XMBuSGhePJO9WC9R9hb7yLa69deLYcrE+4RmM5GnoBmtfy0wSc4NK9sFGh8QY4Qm ooQgg/ak+dgap2/M56uKnkIRL6X12FZEn/7Cu+u0EsuGMM2t0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+ryVYUPDrhrfqQp93xveYVUns5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMmVkOGYzZjQtNGM4ZS0z Nzg1LWI2YTUtNGVmNDVlZjUxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxs9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpi5OJEpMbWMDv3CldaV3S16tCv78RyPfLSRGR32tXwgNwoNRMNBp8F 8vvt3jLnS94aX40vXt1al7347ABO1PAXBBEzUutTbvuoNJ3OIC2e3fiNlQjQoIDd PAhHbfKu7NNYcVCFTNiFM0oZ/2Zwbq7FdPPJFJj6j17oYBs49QO2NHX0A/JgByTM 0KdM+cKC4OucgKesvqLuLF7vMfd2SKG81MtdWCMCC6eKCK1EIDhFE5zS8zyJBHNc 0/yj4KOe7MoRBoV5PDyszPS38W3mXVZOUGL7dvun9oGbJSXPX3BlDzw1pVZK/U9y BAjbicmv/3clQVwzbLrmz5r86DSV3Vk= -----END CERTIFICATE-----Generated at Tue Oct 27 12:58:14 2026 by rpki-client