$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa File: c08b5e33-b653-3f50-b395-3e30e69a2601.roa (raw, json) Hash identifier: u5bmCDFmlaCjCNvhVF3Ke8aRd2UDEvUvZrS/m+Z9+oo= Subject key identifier: 28:FA:6A:10:01:CD:D2:7D:96:C1:08:25:A3:E3:45:FF:44:5D:8E:8B Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584E11B42F8A9865F84EBEE07B40 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 3300 IP address blocks: 192.157.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:2f:8a:98:65:f8:4e:be:e0:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=15e7c1e5-6c37-4bb5-a118-646b0592ef38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:bb:ad:63:e2:61:25:06:6c:42:db:c0:42: eb:7c:ba:86:f0:bc:e4:0f:6f:81:2d:1e:20:d7:c3: d0:77:14:bb:b4:c0:20:7c:ec:be:33:c2:93:7e:f6: be:12:39:8a:30:28:02:b4:30:6e:ca:09:0f:c1:4b: 40:6e:ec:3b:67:78:22:30:56:d9:e1:93:53:96:ee: 8c:86:b4:2d:d4:3d:7f:93:f9:f1:58:1a:d7:af:e0: b6:2e:a7:38:5a:54:83:6b:02:fa:05:2c:01:69:81: fc:0c:ca:3b:7f:76:ee:ca:41:8f:33:37:99:16:48: 33:d3:1c:0c:7b:c6:97:93:7e:1c:14:bc:1c:15:6f: fb:63:97:fa:56:ab:ea:fe:c0:c7:0d:dc:89:b5:ff: de:53:9f:64:a4:f3:3c:bb:54:ac:8e:71:fe:74:5b: 4a:b6:78:79:df:90:df:f8:b1:27:7c:fe:ce:c8:32: f7:93:97:4f:ac:ed:f6:c6:31:0b:45:e4:78:f7:35: b5:73:44:79:eb:5c:fa:db:a3:09:9b:8b:59:e2:bf: 01:53:10:fd:2e:23:4b:e0:5a:41:c7:ca:c8:fa:5a: e4:20:87:d6:83:b9:b5:3e:c4:7c:dc:a3:82:4f:66: 29:d7:6e:2a:0e:7c:2f:5c:73:12:88:88:87:c6:85: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FA:6A:10:01:CD:D2:7D:96:C1:08:25:A3:E3:45:FF:44:5D:8E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:12:d5:b3:a0:6d:4e:c9:93:c8:42:ba:a4:97:05:de:ef:74: 3c:56:2a:1c:87:47:73:9e:8c:c4:8a:a3:02:0a:5f:88:85:85: 52:fe:66:92:e8:de:94:f4:5b:a4:9d:12:30:2d:07:37:ee:34: 84:18:2f:87:d9:51:f5:7d:7f:dd:48:36:a2:bb:59:6d:8a:85: 22:e6:65:9e:90:d3:a5:38:ab:5d:8b:ce:50:b0:cd:ca:fa:b4: c8:09:ad:1e:c9:bb:c4:82:1f:e4:81:a9:30:e4:fe:bb:10:89: 1c:b8:9b:ea:0e:53:76:d6:6a:8d:26:4b:ef:77:f5:be:f8:83: 2b:23:2e:98:7a:8f:71:37:b4:8e:f1:1a:09:f0:a7:7b:06:99: f7:f0:e4:43:fc:d6:c2:64:a8:9c:9e:b8:07:25:99:07:de:ab: 31:09:12:63:b1:12:bb:db:79:e0:eb:58:3a:59:52:3b:f0:b8: 55:ec:3e:69:9b:17:20:a5:65:a0:f7:48:4f:40:57:7c:fa:ec: 91:1f:55:30:5a:65:4c:7d:48:9b:51:05:69:74:b8:e7:0a:67: d5:9a:e0:d8:33:8e:ea:74:2e:1f:37:3f:29:e6:a5:ce:ef:47: 91:cf:59:7a:56:7f:c9:80:8d:04:d5:24:79:69:a8:30:e7:18: ce:ec:fd:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtC+KmGX4Tr7ge0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk MTVlN2MxZTUtNmMzNy00YmI1LWExMTgtNjQ2YjA1OTJlZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLa7rWPiYSUGbELbwELrfLqG8LzkD2+BLR4g 18PQdxS7tMAgfOy+M8KTfva+EjmKMCgCtDBuygkPwUtAbuw7Z3giMFbZ4ZNTlu6M hrQt1D1/k/nxWBrXr+C2Lqc4WlSDawL6BSwBaYH8DMo7f3buykGPMzeZFkgz0xwM e8aXk34cFLwcFW/7Y5f6Vqvq/sDHDdyJtf/eU59kpPM8u1SsjnH+dFtKtnh535Df +LEnfP7OyDL3k5dPrO32xjELReR49zW1c0R561z626MJm4tZ4r8BUxD9LiNL4FpB x8rI+lrkIIfWg7m1PsR83KOCT2Yp124qDnwvXHMSiIiHxoXfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj6ahABzdJ9lsEIJaPjRf9EXY6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYzA4YjVlMzMtYjY1My0z ZjUwLWIzOTUtM2UzMGU2OWEyNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJ2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0S1bOgbU7Jk8hCuqSXBd7vdDxWKhyHR3OejMSKowIKX4iFhVL+ZpLo 3pT0W6SdEjAtBzfuNIQYL4fZUfV9f91INqK7WW2KhSLmZZ6Q06U4q12LzlCwzcr6 tMgJrR7Ju8SCH+SBqTDk/rsQiRy4m+oOU3bWao0mS+939b74gysjLph6j3E3tI7x Ggnwp3sGmffw5EP81sJkqJyeuAclmQfeqzEJEmOxErvbeeDrWDpZUjvwuFXsPmmb FyClZaD3SE9AV3z67JEfVTBaZUx9SJtRBWl0uOcKZ9Wa4Ngzjup0Lh83Pynmpc7v R5HPWXpWf8mAjQTVJHlpqDDnGM7s/d4= -----END CERTIFICATE-----Generated at Thu Jun 11 18:45:53 2026 by rpki-client