$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aaa38399-5ded-387c-a3f1-eb28270cd92d.roa File: aaa38399-5ded-387c-a3f1-eb28270cd92d.roa (raw, json) Hash identifier: MP0E3p6XG5P7GtBzq87OzpOj1uSxYtJh5RsWKsaJ+wQ= Subject key identifier: 86:2B:55:F1:4B:D2:92:73:BC:02:9E:7C:14:FC:DC:CE:9E:86:7D:B0 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584ED00210B7C5D5BC860E860300 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aaa38399-5ded-387c-a3f1-eb28270cd92d.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 19905 IP address blocks: 198.207.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:10:b7:c5:d5:bc:86:0e:86:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=8149cddc-9d90-496c-a1c5-b12e1cfc05a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:f3:01:47:e4:9d:ef:86:22:da:cc:52:05: 39:1b:20:21:65:11:eb:7d:f7:fb:64:3d:e6:2f:6b: 8a:54:c1:42:c1:d9:0d:e4:5c:60:9d:8e:4d:37:f5: 43:59:f6:15:28:90:2a:30:d4:d7:63:c4:d6:b2:6a: b8:9a:5a:1f:03:ae:ce:cc:e2:cc:e4:2c:26:65:aa: 43:b5:ee:7f:32:77:36:bc:4c:31:39:d6:6e:c6:04: cc:00:ba:b3:af:1c:d7:7d:8a:63:d0:65:05:45:86: ce:6d:39:53:12:32:42:8b:90:81:47:c3:8f:02:4f: 1b:a9:a2:1f:89:57:a2:17:2b:51:be:f2:db:94:e0: 59:8e:78:c6:4e:c5:6b:44:9b:d5:36:9d:f2:08:6b: 59:3b:58:b5:ea:20:0c:81:43:4d:c9:97:0d:71:00: b6:0c:83:d2:ba:35:ad:07:50:97:db:02:0c:52:e7: e3:64:f7:49:2d:f3:d2:23:94:20:39:a0:eb:de:64: e1:b5:64:c6:f9:c0:a1:60:be:ba:76:c0:be:16:3e: 8e:91:70:50:a0:3a:21:26:13:b5:d6:0d:91:ef:4a: 7d:06:33:e9:91:83:bb:27:ef:fb:52:98:ae:e6:35: 21:f4:6d:f6:a1:71:c4:59:4c:d2:b4:3d:86:7b:7b: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:55:F1:4B:D2:92:73:BC:02:9E:7C:14:FC:DC:CE:9E:86:7D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aaa38399-5ded-387c-a3f1-eb28270cd92d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 198.207.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ca:d7:26:f7:0a:74:e1:75:b6:6c:23:20:b6:92:53:48:41: ee:8d:0a:7f:6c:52:06:34:fd:40:01:24:8d:65:1a:c7:96:22: 5f:3c:06:c4:94:fb:10:11:3c:6a:89:95:f5:8c:0f:83:3c:26: 85:eb:dc:e2:2a:8f:f4:ee:8d:91:e5:34:50:63:be:b7:41:f1: 0e:7c:ab:3c:87:bb:4d:c7:7c:1a:53:78:33:0a:c0:7e:91:a1: 79:77:31:e7:14:7d:d3:7b:dd:46:13:09:08:0a:a9:86:ff:ec: 16:ce:22:9c:15:55:8d:aa:78:8d:44:b8:e2:10:1f:cb:36:5d: f8:d1:ae:af:d8:d9:c2:5e:f8:0c:e3:5e:03:a5:6c:42:d4:0a: a7:76:16:56:da:17:01:0f:b2:15:bc:a0:80:fb:f9:cd:27:59: b2:f2:0e:ca:57:ea:2f:af:bc:98:bc:9f:24:02:da:58:32:60: b7:39:1d:09:ab:59:ad:b1:28:a6:f1:de:f9:f6:6b:85:a7:f1: d0:ac:66:6d:3c:db:0f:d1:35:28:d9:2a:77:d3:67:62:e8:c1: 09:82:ad:74:45:b3:25:e1:4a:5b:bb:1b:56:a1:33:e0:9a:1f: df:21:f1:05:d2:7d:34:f1:93:fc:1b:d0:a5:1d:7a:12:72:68: 1f:12:8d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAhC3xdW8hg6GAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ODE0OWNkZGMtOWQ5MC00OTZjLWExYzUtYjEyZTFjZmMwNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko/zAUfkne+GItrMUgU5GyAhZRHrfff7ZD3m L2uKVMFCwdkN5FxgnY5NN/VDWfYVKJAqMNTXY8TWsmq4mlofA67OzOLM5CwmZapD te5/Mnc2vEwxOdZuxgTMALqzrxzXfYpj0GUFRYbObTlTEjJCi5CBR8OPAk8bqaIf iVeiFytRvvLblOBZjnjGTsVrRJvVNp3yCGtZO1i16iAMgUNNyZcNcQC2DIPSujWt B1CX2wIMUufjZPdJLfPSI5QgOaDr3mThtWTG+cChYL66dsC+Fj6OkXBQoDohJhO1 1g2R70p9BjPpkYO7J+/7Upiu5jUh9G32oXHEWUzStD2Ge3tPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYrVfFL0pJzvAKefBT83M6ehn2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYWFhMzgzOTktNWRlZC0z ODdjLWEzZjEtZWIyODI3MGNkOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs9KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInK1yb3CnThdbZsIyC2klNIQe6NCn9sUgY0/UABJI1lGseWIl88BsSU +xARPGqJlfWMD4M8JoXr3OIqj/TujZHlNFBjvrdB8Q58qzyHu03HfBpTeDMKwH6R oXl3MecUfdN73UYTCQgKqYb/7BbOIpwVVY2qeI1EuOIQH8s2XfjRrq/Y2cJe+Azj XgOlbELUCqd2FlbaFwEPshW8oID7+c0nWbLyDspX6i+vvJi8nyQC2lgyYLc5HQmr Wa2xKKbx3vn2a4Wn8dCsZm082w/RNSjZKnfTZ2LowQmCrXRFsyXhSlu7G1ahM+Ca H98h8QXSfTTxk/wb0KUdehJyaB8SjQw= -----END CERTIFICATE-----Generated at Thu Sep 10 21:06:59 2026 by rpki-client