$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/dbe29e59-3b41-31c0-a26e-2da636da09d3.roa File: dbe29e59-3b41-31c0-a26e-2da636da09d3.roa (raw, json) Hash identifier: OWtxEUW7ai7d2MG6DQzhqh+MoxZlo4swE7hZdEvvd0U= Subject key identifier: DC:31:94:6C:2A:EB:F1:E0:80:AB:70:A1:5A:35:91:1E:59:75:FF:C7 Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584D8E6D8E4AE21F992D29E87330 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/dbe29e59-3b41-31c0-a26e-2da636da09d3.roa Signing time: Sun 19 Apr 2026 08:27:06 +0000 ROA not before: Sun 19 Apr 2026 08:27:06 +0000 ROA not after: Sat 18 Jul 2026 08:27:06 +0000 asID: 3300 IP address blocks: 63.250.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:6d:8e:4a:e2:1f:99:2d:29:e8:73:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Apr 19 08:27:06 2026 GMT Not After : Jul 18 08:27:06 2026 GMT Subject: CN=3bb7b784-62a1-42d8-a9c1-fb598f4822f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:8e:70:58:1f:02:00:49:73:f3:aa:8f:77: c2:a0:09:06:b1:e1:19:0e:e5:0e:f7:1e:cc:28:05: d0:b3:b7:d7:77:96:76:37:04:0e:03:f6:d6:24:34: 87:d1:a4:38:36:c8:fa:14:a2:31:29:4f:e1:1f:43: db:c6:69:41:23:9f:36:57:0e:70:8f:8d:68:e5:82: 49:b5:41:f1:56:a2:7c:db:d6:1e:d7:39:85:1e:a5: 9d:cd:4f:28:5e:2e:47:e2:eb:77:3e:41:c7:32:bf: 72:fd:80:d5:e3:c0:b0:80:26:e4:37:cf:ac:4a:b5: 35:57:d5:7e:d9:7a:83:c5:97:bf:9c:07:0f:14:c2: c6:54:a4:2b:70:e5:fa:f1:bc:2b:1e:5f:2a:31:95: fc:a9:93:4b:28:ba:52:b5:f1:42:a0:02:fc:5f:c8: 80:03:d0:2f:c1:0c:6a:80:50:27:ce:fa:1d:fa:01: e5:e8:1d:de:96:de:76:76:5c:64:ac:8e:cb:92:de: 82:31:30:ee:5e:99:ad:82:0b:7b:00:7f:29:71:7f: 53:8c:10:41:a8:ff:c8:f6:f2:ad:3a:f7:fd:6a:a1: 7d:86:41:1d:14:2a:fe:d8:e0:e5:20:51:d3:a1:64: 1e:05:fe:f1:6e:02:e8:d7:bb:1c:15:3a:7d:05:fb: 29:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:31:94:6C:2A:EB:F1:E0:80:AB:70:A1:5A:35:91:1E:59:75:FF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/dbe29e59-3b41-31c0-a26e-2da636da09d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 63.250.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a8:c5:28:92:c8:10:c7:07:3e:9f:29:96:32:4c:f3:8e:cc: 9f:37:34:65:2f:40:02:31:2b:00:4e:a2:fd:9e:00:3d:e9:b0: ed:4a:54:11:ae:8c:9c:34:2f:01:b0:d1:ba:3e:ed:88:8b:e8: f1:71:68:3a:8d:3a:41:53:eb:79:c5:de:f9:a2:0a:b6:fc:6d: 6e:4a:cc:12:81:a1:0c:df:61:6b:2b:dc:f9:bd:13:6a:49:94: 43:e6:60:56:b0:4d:e7:95:0e:e6:b2:2e:7e:02:a0:d6:68:be: 9a:b1:2e:54:3f:54:76:75:b2:e5:3e:6f:a5:2e:81:cb:82:77: 09:f0:e8:b2:66:7c:57:8c:f4:88:99:5f:cd:87:e5:5f:58:e5: 78:1b:ee:43:f0:a2:82:55:32:75:bb:62:99:bd:45:e8:bc:80: 6f:59:b6:0d:95:e3:31:7c:01:7b:7c:51:b0:ae:ad:43:c0:b6: 00:bf:a4:b4:a6:14:a7:ff:52:ef:54:70:c3:ec:91:c5:c2:58: ae:c4:12:9a:9e:85:5d:1e:e5:dc:e5:2a:db:b3:1a:a7:19:4a: 80:d4:36:9c:9f:2e:1b:49:4f:90:a2:1c:cd:58:68:b5:ae:89: 24:55:14:68:8e:43:cb:b1:fd:39:4d:dd:60:41:02:63:a0:ed: 6d:20:6f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ObY5K4h+ZLSnoczAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI2MDQxOTA4MjcwNloXDTI2MDcxODA4MjcwNlowLzEtMCsGA1UEAxMk M2JiN2I3ODQtNjJhMS00MmQ4LWE5YzEtZmI1OThmNDgyMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRaOcFgfAgBJc/Oqj3fCoAkGseEZDuUO9x7M KAXQs7fXd5Z2NwQOA/bWJDSH0aQ4Nsj6FKIxKU/hH0PbxmlBI582Vw5wj41o5YJJ tUHxVqJ829Ye1zmFHqWdzU8oXi5H4ut3PkHHMr9y/YDV48CwgCbkN8+sSrU1V9V+ 2XqDxZe/nAcPFMLGVKQrcOX68bwrHl8qMZX8qZNLKLpStfFCoAL8X8iAA9AvwQxq gFAnzvod+gHl6B3elt52dlxkrI7Lkt6CMTDuXpmtggt7AH8pcX9TjBBBqP/I9vKt Ovf9aqF9hkEdFCr+2ODlIFHToWQeBf7xbgLo17scFTp9BfspowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwxlGwq6/HggKtwoVo1kR5Zdf/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvZGJlMjllNTktM2I0MS0z MWMwLWEyNmUtMmRhNjM2ZGEwOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGP/qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOoxSiSyBDHBz6fKZYyTPOOzJ83NGUvQAIxKwBOov2eAD3psO1KVBGu jJw0LwGw0bo+7YiL6PFxaDqNOkFT63nF3vmiCrb8bW5KzBKBoQzfYWsr3Pm9E2pJ lEPmYFawTeeVDuayLn4CoNZovpqxLlQ/VHZ1suU+b6UugcuCdwnw6LJmfFeM9IiZ X82H5V9Y5Xgb7kPwooJVMnW7Ypm9Rei8gG9Ztg2V4zF8AXt8UbCurUPAtgC/pLSm FKf/Uu9UcMPskcXCWK7EEpqehV0e5dzlKtuzGqcZSoDUNpyfLhtJT5CiHM1YaLWu iSRVFGiOQ8ux/TlN3WBBAmOg7W0gbxU= -----END CERTIFICATE-----Generated at Mon Apr 27 16:24:08 2026 by rpki-client