$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/da54369e-9c30-352f-9a83-6e0aa55766db.roa File: da54369e-9c30-352f-9a83-6e0aa55766db.roa (raw, json) Hash identifier: Wx3WmAoVmcDQ+bIysPIK8sjBnCD7tEkZVxm2PDSA/j4= Subject key identifier: 5E:74:5F:55:EF:7C:C6:42:F6:1D:0D:2A:B4:C0:C6:ED:D4:C3:AA:35 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D8E6DE8AB362002955BFCA6F8 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/da54369e-9c30-352f-9a83-6e0aa55766db.roa Signing time: Sun 19 Apr 2026 08:27:49 +0000 ROA not before: Sun 19 Apr 2026 08:27:49 +0000 ROA not after: Sat 18 Jul 2026 08:27:49 +0000 asID: 3300 IP address blocks: 63.250.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:6d:e8:ab:36:20:02:95:5b:fc:a6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Apr 19 08:27:49 2026 GMT Not After : Jul 18 08:27:49 2026 GMT Subject: CN=cee9296f-15d4-42a4-9c06-b233678229ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:77:c5:43:c0:73:59:5d:b8:d8:03:57:74: 54:3b:33:82:d1:9a:d8:32:79:2d:8c:b6:c8:96:1b: c1:12:fe:64:40:de:e1:b5:f0:20:24:09:a9:f2:c5: f7:2b:0d:06:80:58:cd:d2:c0:55:89:22:37:45:75: e8:67:c3:1a:8e:f2:da:d7:84:ea:90:b8:d5:bb:14: d4:94:69:9d:7a:0c:cf:ec:d4:52:c1:a0:be:83:0f: d5:1c:93:72:25:91:28:95:a2:a6:18:e5:7f:f9:e9: 2e:77:04:75:e5:87:20:25:58:fc:e1:12:2e:94:18: cf:3f:ba:cb:f8:0a:60:66:70:2c:94:3a:d7:c1:e1: d5:d0:85:ea:3a:dd:54:ec:fd:19:01:e9:b3:03:f8: d7:5f:34:4f:17:5c:24:81:f5:79:fc:31:12:87:7f: a0:05:a4:bc:e0:03:99:88:14:91:a2:66:ce:70:da: ce:5a:65:28:03:8d:e1:7e:2c:8d:cb:40:d3:a8:ff: 96:79:51:56:00:23:0d:53:5b:67:f2:c4:33:a3:bc: 60:11:e2:86:0a:5f:b0:e2:1b:0b:f1:c2:dc:78:bb: 27:14:27:09:4e:0d:a0:93:3a:fd:ea:96:b6:f0:ba: 22:9a:e0:28:95:0a:14:08:82:49:75:8d:f3:ea:a5: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:74:5F:55:EF:7C:C6:42:F6:1D:0D:2A:B4:C0:C6:ED:D4:C3:AA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/da54369e-9c30-352f-9a83-6e0aa55766db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 63.250.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5d:55:6f:4e:5f:4d:da:9c:a8:2c:54:84:72:5e:d3:e8:87: 2e:3d:57:4e:81:31:0a:96:0d:9a:6c:ce:aa:e4:6e:4a:b7:83: 9c:a1:66:fc:d7:6e:c6:76:ba:3d:c1:be:41:6f:1b:24:39:f1: 3d:b4:d8:0d:a4:c5:93:fd:aa:7d:0d:24:8c:57:07:e8:b0:76: e0:45:d4:a9:ca:b3:88:d2:72:4a:9e:13:7f:34:a5:a5:26:98: bf:9a:a8:0f:99:59:e2:44:9e:f3:33:07:e1:8d:86:0b:57:c8: ce:53:09:10:f8:a8:6e:8d:72:48:e7:e0:ff:6c:2b:6a:23:67: eb:ba:cd:0e:f1:eb:32:99:f5:87:45:77:2b:7a:f9:b4:da:5f: 8f:07:46:57:ff:a4:42:f8:c3:ef:b9:61:2c:ac:5f:62:f1:1f: a1:0e:af:9f:97:92:0b:c8:66:0b:d9:11:3c:19:46:b9:ae:9e: 1d:eb:fc:4f:e7:3d:60:6b:88:81:20:21:0a:bd:0c:f8:6c:82: 37:28:56:6b:9d:bb:19:c5:12:94:83:40:15:6e:c7:69:0a:f3: 68:44:6d:3e:c7:30:9a:a1:4f:87:ab:96:07:17:b1:fd:4a:c2: 3a:a1:2a:b1:1a:41:85:b7:be:6a:f8:a8:9f:01:c1:c2:0a:16: 63:54:e0:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ObeirNiAClVv8pvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDQxOTA4Mjc0OVoXDTI2MDcxODA4Mjc0OVowLzEtMCsGA1UEAxMk Y2VlOTI5NmYtMTVkNC00MmE0LTljMDYtYjIzMzY3ODIyOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzh3xUPAc1lduNgDV3RUOzOC0ZrYMnktjLbI lhvBEv5kQN7htfAgJAmp8sX3Kw0GgFjN0sBViSI3RXXoZ8MajvLa14TqkLjVuxTU lGmdegzP7NRSwaC+gw/VHJNyJZEolaKmGOV/+ekudwR15YcgJVj84RIulBjPP7rL +ApgZnAslDrXweHV0IXqOt1U7P0ZAemzA/jXXzRPF1wkgfV5/DESh3+gBaS84AOZ iBSRombOcNrOWmUoA43hfiyNy0DTqP+WeVFWACMNU1tn8sQzo7xgEeKGCl+w4hsL 8cLceLsnFCcJTg2gkzr96pa28LoimuAolQoUCIJJdY3z6qUvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF50X1XvfMZC9h0NKrTAxu3Uw6o1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvZGE1NDM2OWUtOWMzMC0z NTJmLTlhODMtNmUwYWE1NTc2NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/qoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVdVW9OX03anKgsVIRyXtPohy49V06BMQqWDZpszqrkbkq3g5yhZvzX bsZ2uj3BvkFvGyQ58T202A2kxZP9qn0NJIxXB+iwduBF1KnKs4jSckqeE380paUm mL+aqA+ZWeJEnvMzB+GNhgtXyM5TCRD4qG6Nckjn4P9sK2ojZ+u6zQ7x6zKZ9YdF dyt6+bTaX48HRlf/pEL4w++5YSysX2LxH6EOr5+XkgvIZgvZETwZRrmunh3r/E/n PWBriIEgIQq9DPhsgjcoVmuduxnFEpSDQBVux2kK82hEbT7HMJqhT4erlgcXsf1K wjqhKrEaQYW3vmr4qJ8BwcIKFmNU4L0= -----END CERTIFICATE-----Generated at Mon Apr 27 16:24:08 2026 by rpki-client