$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/cd276806-a240-3c6b-956e-5d10d81d1882.roa File: cd276806-a240-3c6b-956e-5d10d81d1882.roa (raw, json) Hash identifier: vTY0nD4bgdXCrBui1W0gFe2QPV6X/0SaVPv+e5XcWYE= Subject key identifier: 02:0D:9B:B7:AD:52:7C:B6:A4:B9:92:C3:A0:2A:6E:54:42:3D:6B:C0 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D8E6D9F04EFE9BC1254A76540 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/cd276806-a240-3c6b-956e-5d10d81d1882.roa Signing time: Sun 19 Apr 2026 08:27:14 +0000 ROA not before: Sun 19 Apr 2026 08:27:14 +0000 ROA not after: Sat 18 Jul 2026 08:27:14 +0000 asID: 3300 IP address blocks: 63.250.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:6d:9f:04:ef:e9:bc:12:54:a7:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Apr 19 08:27:14 2026 GMT Not After : Jul 18 08:27:14 2026 GMT Subject: CN=2f4e5840-fbc7-45d8-afe0-696317b9f7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:7d:d1:43:40:29:4c:1b:69:18:a8:3a:e4: 4e:d5:6d:7a:a8:5e:ca:43:eb:7f:2d:af:db:38:bd: 9c:63:1d:6d:db:1c:42:50:cc:88:62:05:60:a6:b3: 08:f2:e8:ed:12:98:7a:29:65:76:eb:0e:d2:56:3e: c4:ca:95:bf:1d:98:93:ee:98:52:e6:e4:4a:f7:c3: 99:08:e2:ef:d7:5f:d8:aa:c7:ba:20:17:7d:af:ac: 55:65:49:b6:91:60:68:a4:1e:12:95:3a:b1:cf:79: 72:73:80:14:4c:fa:1e:b0:cc:c1:45:d4:bf:90:62: 96:56:fc:5d:26:63:21:91:bf:f2:f8:17:0e:aa:7d: 95:e3:57:94:67:24:14:38:61:be:8f:41:d0:1e:f4: c7:7f:1e:b9:f1:b9:75:64:bc:6a:9a:d3:4a:a5:1c: 4f:bc:1d:6d:c0:a0:b6:2f:e9:01:eb:a9:14:67:a0: 0f:79:78:4c:d2:49:c1:a4:85:aa:93:08:73:4a:46: 90:4a:87:87:0f:1c:60:ef:15:78:a8:d4:27:4a:c6: 53:ac:6f:a6:94:3f:60:b0:91:50:c0:08:c0:b9:d2: 5e:75:7f:1f:63:a2:69:b8:da:50:c0:52:65:9e:cf: fa:e8:a5:6e:12:15:9e:d4:31:21:f8:34:d3:04:4e: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0D:9B:B7:AD:52:7C:B6:A4:B9:92:C3:A0:2A:6E:54:42:3D:6B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/cd276806-a240-3c6b-956e-5d10d81d1882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 63.250.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bb:fd:e6:9e:df:88:07:65:f6:e1:4b:3e:5b:85:4f:b7:61: a8:06:46:79:ef:69:48:a5:58:b8:55:a3:26:76:f9:a8:23:4c: 89:1e:ef:a0:40:4f:e1:66:73:70:a0:78:9c:7b:83:3e:09:81: 45:79:49:b0:cb:33:a2:35:74:df:ae:4d:04:bd:1a:f1:bf:58: 71:53:b4:1a:15:19:82:0e:aa:a6:87:96:2a:2f:0a:3e:d7:be: ee:70:0e:ad:c7:05:93:cf:4a:a1:65:72:f8:39:ae:9e:23:47: 15:5a:e1:46:6a:97:fb:d3:54:39:5a:fd:1f:a9:33:89:8c:13: 1c:2e:e3:f5:dc:67:8e:95:e1:4e:f1:34:4c:30:14:78:5a:bf: 4f:42:90:40:27:bf:32:e6:e5:b0:5f:dd:91:7a:d8:a5:d9:ee: 26:a0:b2:17:da:fb:f7:25:f9:fe:d0:46:7d:e2:20:c5:c0:e1: 27:1c:d5:57:4c:b3:2c:a9:d6:9a:f1:52:cb:5d:d4:75:d0:8d: f6:48:f2:a7:3a:1f:e0:59:64:d9:9d:f0:3e:30:41:ba:8c:68: 9f:f3:2a:83:07:31:5a:93:d4:56:21:60:fd:2f:ef:15:f3:5e: e1:3c:fa:ed:78:c1:53:27:66:9c:b5:76:7d:5f:ab:ce:a7:dd: cc:81:e4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ObZ8E7+m8ElSnZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDQxOTA4MjcxNFoXDTI2MDcxODA4MjcxNFowLzEtMCsGA1UEAxMk MmY0ZTU4NDAtZmJjNy00NWQ4LWFmZTAtNjk2MzE3YjlmN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja990UNAKUwbaRioOuRO1W16qF7KQ+t/La/b OL2cYx1t2xxCUMyIYgVgprMI8ujtEph6KWV26w7SVj7EypW/HZiT7phS5uRK98OZ COLv11/Yqse6IBd9r6xVZUm2kWBopB4SlTqxz3lyc4AUTPoesMzBRdS/kGKWVvxd JmMhkb/y+BcOqn2V41eUZyQUOGG+j0HQHvTHfx658bl1ZLxqmtNKpRxPvB1twKC2 L+kB66kUZ6APeXhM0knBpIWqkwhzSkaQSoeHDxxg7xV4qNQnSsZTrG+mlD9gsJFQ wAjAudJedX8fY6JpuNpQwFJlns/66KVuEhWe1DEh+DTTBE5BswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAINm7etUny2pLmSw6AqblRCPWvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvY2QyNzY4MDYtYTI0MC0z YzZiLTk1NmUtNWQxMGQ4MWQxODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/qEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi7/eae34gHZfbhSz5bhU+3YagGRnnvaUilWLhVoyZ2+agjTIke76BA T+Fmc3CgeJx7gz4JgUV5SbDLM6I1dN+uTQS9GvG/WHFTtBoVGYIOqqaHliovCj7X vu5wDq3HBZPPSqFlcvg5rp4jRxVa4UZql/vTVDla/R+pM4mMExwu4/XcZ46V4U7x NEwwFHhav09CkEAnvzLm5bBf3ZF62KXZ7iagshfa+/cl+f7QRn3iIMXA4Scc1VdM syyp1prxUstd1HXQjfZI8qc6H+BZZNmd8D4wQbqMaJ/zKoMHMVqT1FYhYP0v7xXz XuE8+u14wVMnZpy1dn1fq86n3cyB5FA= -----END CERTIFICATE-----Generated at Mon Apr 27 16:24:14 2026 by rpki-client