$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa File: aa68105b-f17d-3d92-8850-130b7cd821d7.roa (raw, json) Hash identifier: tojyQjyDVsEz4Gsw/tM3eRSX/Gj3ULamXzH3KuM/AYA= Subject key identifier: B5:66:3A:58:06:6C:23:99:D9:CB:C2:90:FE:02:76:67:CD:B1:FA:01 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584EB416FACFE4D1F4A724D142C0 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa Signing time: Sun 02 Aug 2026 13:00:12 +0000 ROA not before: Sun 02 Aug 2026 13:00:12 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 3300 IP address blocks: 192.157.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:16:fa:cf:e4:d1:f4:a7:24:d1:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Aug 2 13:00:12 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=3a294634-1a94-402d-b82c-d7024e6b6965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:cf:a5:2c:66:07:da:08:a6:3f:3a:1e:1e: 56:c8:27:46:ee:15:43:78:49:ec:3f:8f:95:00:c3: 7a:64:e6:af:b7:4d:06:c3:88:d9:f2:2b:2c:64:8b: b2:aa:bb:d4:c4:af:67:21:ae:05:55:7d:da:30:c6: c4:ca:4f:a6:ab:8b:3e:8d:e8:12:45:fc:ab:11:32: 00:b5:a1:fa:14:c5:83:66:80:4a:64:c8:13:19:ff: b5:29:84:6f:85:64:f0:c6:6f:eb:60:1f:38:e2:6c: 5e:12:c7:f0:ba:f7:01:a4:dc:c1:20:10:8d:99:74: fc:5a:23:cf:5b:d4:7c:6d:3c:b8:5d:7c:56:df:b3: 3b:34:62:fd:af:4e:60:10:01:2b:9e:cb:0d:dc:a5: 6c:03:17:8d:ef:2f:40:ac:46:a5:b5:ad:ce:6b:51: fc:18:2d:36:2c:d9:b8:ee:c9:d6:24:7b:14:79:ff: b9:53:95:bb:55:2c:cb:9f:4c:bb:7f:df:4d:23:b5: 10:66:83:15:a3:4c:c0:ef:40:2d:f6:ad:c7:5f:c8: 7e:99:13:a5:89:7d:b9:24:b2:6d:72:74:c5:a9:96: 5a:77:7e:c4:e0:d6:aa:45:8b:50:f1:77:c1:58:30: 34:1a:4f:39:0e:a1:0e:36:17:71:2e:81:9f:00:3a: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:66:3A:58:06:6C:23:99:D9:CB:C2:90:FE:02:76:67:CD:B1:FA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:80:35:27:67:e0:d7:d7:23:cf:75:36:95:d9:76:28:36:d4: b8:87:87:0b:10:04:e6:e6:e0:6c:88:fd:28:2b:25:8a:12:8d: 07:14:9f:f3:c8:ec:dd:1b:2a:0e:fe:fd:bd:b8:db:2d:cc:97: f1:71:79:e6:03:cc:41:45:fa:8a:a5:87:3e:97:15:ad:92:10: a9:02:cd:1c:e1:3b:c9:c5:8a:4f:48:b4:4e:84:68:c6:20:09: b8:1f:65:7a:5f:77:ef:f7:28:c7:db:fa:a2:65:99:b2:c1:5e: 04:18:26:b8:45:b5:2c:43:58:dc:84:40:51:04:2f:47:0a:2c: d7:62:74:36:50:c2:4a:57:8a:1b:b5:54:67:02:5e:1e:5b:83: 58:03:af:b1:da:c6:e3:e5:62:23:bb:02:13:dc:5b:c4:91:3c: 2f:68:29:5f:c1:75:73:65:a4:63:c8:8a:6f:43:ca:9a:a1:15: ec:3e:bc:03:5a:bd:c8:76:60:0a:c5:39:7d:e0:f7:ed:3d:78: d8:92:5c:c1:49:4a:30:5a:26:dd:d0:2b:38:21:7c:5f:15:bc: b3:49:a8:1a:6d:9b:6f:8b:c7:54:49:7e:d1:6a:a5:99:45:7b: 00:60:64:35:79:c6:ce:15:3f:03:e5:d3:95:02:2e:cd:e7:36: 71:5e:fe:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60FvrP5NH0pyTRQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk M2EyOTQ2MzQtMWE5NC00MDJkLWI4MmMtZDcwMjRlNmI2OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWvPpSxmB9oIpj86Hh5WyCdG7hVDeEnsP4+V AMN6ZOavt00Gw4jZ8issZIuyqrvUxK9nIa4FVX3aMMbEyk+mq4s+jegSRfyrETIA taH6FMWDZoBKZMgTGf+1KYRvhWTwxm/rYB844mxeEsfwuvcBpNzBIBCNmXT8WiPP W9R8bTy4XXxW37M7NGL9r05gEAErnssN3KVsAxeN7y9ArEalta3Oa1H8GC02LNm4 7snWJHsUef+5U5W7VSzLn0y7f99NI7UQZoMVo0zA70At9q3HX8h+mROliX25JLJt cnTFqZZad37E4NaqRYtQ8XfBWDA0Gk85DqEONhdxLoGfADpW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVmOlgGbCOZ2cvCkP4CdmfNsfoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYWE2ODEwNWItZjE3ZC0z ZDkyLTg4NTAtMTMwYjdjZDgyMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyANSdn4NfXI891NpXZdig21LiHhwsQBObm4GyI/SgrJYoSjQcUn/PI 7N0bKg7+/b242y3Ml/FxeeYDzEFF+oqlhz6XFa2SEKkCzRzhO8nFik9ItE6EaMYg CbgfZXpfd+/3KMfb+qJlmbLBXgQYJrhFtSxDWNyEQFEEL0cKLNdidDZQwkpXihu1 VGcCXh5bg1gDr7HaxuPlYiO7AhPcW8SRPC9oKV/BdXNlpGPIim9DypqhFew+vANa vch2YArFOX3g9+09eNiSXMFJSjBaJt3QKzghfF8VvLNJqBptm2+Lx1RJftFqpZlF ewBgZDV5xs4VPwPl05UCLs3nNnFe/rE= -----END CERTIFICATE-----Generated at Thu Sep 10 21:07:57 2026 by rpki-client