$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa File: c08b5e33-b653-3f50-b395-3e30e69a2601.roa (raw, json) Hash identifier: OaZ6OHDD8lEgWR3iwUIo8TkLxU41tPHgcW7nB1vgqU4= Subject key identifier: A1:55:C6:F3:26:AB:30:3B:12:F4:E1:75:46:82:D3:0D:DE:21:7D:D9 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584EB416FAC255686D0900F64780 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa Signing time: Sun 02 Aug 2026 13:00:12 +0000 ROA not before: Sun 02 Aug 2026 13:00:12 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 3300 IP address blocks: 192.157.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:16:fa:c2:55:68:6d:09:00:f6:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Aug 2 13:00:12 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=19e885bd-da21-4b14-bc39-c6a6fee09d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:ce:25:51:ea:81:92:1d:2c:6e:ff:e7:f0: 0d:b8:eb:55:cc:c1:34:fc:a9:11:32:bb:a1:34:a2: 61:20:ce:cf:7b:90:3b:19:0e:11:1c:e4:f2:7d:6a: bb:50:d3:9e:e9:4a:2a:29:3e:e9:73:76:1b:eb:b0: 05:59:70:e8:65:01:c3:6d:39:f3:34:72:b8:a9:d0: 42:f2:fa:e9:e4:ba:25:f8:79:21:2d:82:04:24:42: 8b:ad:07:5d:c4:a0:84:08:0e:fc:25:82:22:43:3e: 7f:74:2d:d9:8d:28:9d:a2:6b:fa:f2:b7:01:c3:dd: e2:28:15:22:a8:59:75:02:e6:a1:9b:a4:ed:83:6a: 6e:0d:e1:49:b2:fd:a8:c7:14:0e:7a:be:7e:5a:d4: cb:66:d3:d4:16:a5:f8:ef:29:43:14:1b:59:bd:3f: 23:b7:71:e0:6b:a9:31:ba:35:6a:03:34:0e:92:2b: 72:a9:75:b1:f1:47:b1:da:50:91:dc:b6:a3:65:e9: b6:51:f6:ae:ef:f5:b4:55:23:32:84:25:07:55:43: a1:cc:35:16:42:0b:2c:8f:91:a9:fb:c4:b9:a3:88: 53:f3:0c:8a:73:b1:3a:ee:1b:b7:ae:56:0e:28:07: 14:b9:01:5a:8c:2e:55:82:ab:46:92:e2:3a:bd:65: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:55:C6:F3:26:AB:30:3B:12:F4:E1:75:46:82:D3:0D:DE:21:7D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/c08b5e33-b653-3f50-b395-3e30e69a2601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 192.157.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:29:2a:01:ae:b4:04:e9:30:b5:e8:4a:74:2b:a4:ac:c1:82: 4a:f9:07:57:35:3b:a4:cd:c0:06:54:c6:5e:33:6d:b5:8f:45: 6b:63:81:92:dc:cd:d3:aa:e8:f7:b8:e2:32:26:ca:39:88:db: d5:a7:d9:79:5c:e5:e2:96:e2:a9:3e:e4:59:46:25:f3:53:e9: 95:b8:02:95:19:27:a3:d0:35:7a:21:ba:fc:d0:d9:41:71:b8: 6e:99:fd:ba:db:f9:6b:33:6e:92:31:93:58:35:2a:f8:50:29: 59:52:29:8c:0c:93:2b:db:8d:ff:52:7a:63:ff:71:08:37:6f: df:a4:e8:77:60:19:fb:0e:50:8a:03:88:d5:d3:5b:c3:ba:d5: 17:27:3f:ea:df:2b:5c:51:f9:43:59:a1:1a:c9:32:33:dd:b6: 53:dc:36:73:c2:59:96:68:ed:62:77:f4:84:95:26:1c:b2:81: 75:60:67:06:e2:28:61:c1:a4:12:49:5a:68:a2:05:db:b9:be: e4:2e:ef:a3:7b:57:17:c9:24:ac:4d:51:2b:4f:b9:4a:3b:d6: 89:38:b3:98:9f:e2:2c:b9:10:01:1c:f1:6c:2f:48:04:3b:ad: 33:68:17:6c:b8:5d:69:a9:16:70:d7:d1:12:1d:42:b7:40:41: 30:72:9f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60FvrCVWhtCQD2R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk MTllODg1YmQtZGEyMS00YjE0LWJjMzktYzZhNmZlZTA5ZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrbOJVHqgZIdLG7/5/ANuOtVzME0/KkRMruh NKJhIM7Pe5A7GQ4RHOTyfWq7UNOe6UoqKT7pc3Yb67AFWXDoZQHDbTnzNHK4qdBC 8vrp5Lol+HkhLYIEJEKLrQddxKCECA78JYIiQz5/dC3ZjSidomv68rcBw93iKBUi qFl1Auahm6Ttg2puDeFJsv2oxxQOer5+WtTLZtPUFqX47ylDFBtZvT8jt3Hga6kx ujVqAzQOkityqXWx8Uex2lCR3LajZem2Ufau7/W0VSMyhCUHVUOhzDUWQgssj5Gp +8S5o4hT8wyKc7E67hu3rlYOKAcUuQFajC5VgqtGkuI6vWXtgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFVxvMmqzA7EvThdUaC0w3eIX3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYzA4YjVlMzMtYjY1My0z ZjUwLWIzOTUtM2UzMGU2OWEyNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJ2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABspKgGutATpMLXoSnQrpKzBgkr5B1c1O6TNwAZUxl4zbbWPRWtjgZLc zdOq6Pe44jImyjmI29Wn2Xlc5eKW4qk+5FlGJfNT6ZW4ApUZJ6PQNXohuvzQ2UFx uG6Z/brb+WszbpIxk1g1KvhQKVlSKYwMkyvbjf9SemP/cQg3b9+k6HdgGfsOUIoD iNXTW8O61RcnP+rfK1xR+UNZoRrJMjPdtlPcNnPCWZZo7WJ39ISVJhyygXVgZwbi KGHBpBJJWmiiBdu5vuQu76N7VxfJJKxNUStPuUo71ok4s5if4iy5EAEc8WwvSAQ7 rTNoF2y4XWmpFnDX0RIdQrdAQTByn9M= -----END CERTIFICATE-----Generated at Thu Sep 10 21:07:26 2026 by rpki-client