$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa File: 990c86a2-020c-323f-9309-b0b1e6971b6d.roa (raw, json) Hash identifier: CayxOOWqCKVAlEaIRCPFR9t8w+Xe/R72qF+fT9Vc4KY= Subject key identifier: 2E:6C:C7:48:A5:C7:FE:DA:C9:45:39:F7:4D:3D:1F:67:85:0C:1A:E8 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584DC995B411572BDB607E529780 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa Signing time: Sun 10 May 2026 13:00:31 +0000 ROA not before: Sun 10 May 2026 13:00:31 +0000 ROA not after: Sat 08 Aug 2026 13:00:31 +0000 asID: 59 IP address blocks: 198.133.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:95:b4:11:57:2b:db:60:7e:52:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: May 10 13:00:31 2026 GMT Not After : Aug 8 13:00:31 2026 GMT Subject: CN=f2a95046-244f-4fbb-9280-e63075fc8ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b6:2e:a3:b5:ad:8a:c2:1f:9e:a8:80:5b:9e: f1:52:6f:aa:9f:ed:7b:d6:c0:b9:b2:f6:8f:10:6c: 4a:34:b5:a2:74:90:48:5e:8e:82:17:1b:01:6c:4b: d1:d0:ba:91:c9:ca:5e:b0:51:26:d9:56:20:98:b2: eb:30:a6:3e:fa:9e:75:34:d1:6c:6f:e8:1c:9c:be: 5c:9f:28:d6:51:fa:a2:c9:8f:cb:db:1d:25:69:6d: 43:df:91:ca:2f:bd:fa:04:08:9b:a5:56:10:ab:93: b6:23:90:88:bb:84:a9:b4:85:5a:0a:f5:89:9b:92: 95:51:5e:5c:de:19:ab:e9:6a:2b:c8:16:6e:28:a5: de:7d:e0:08:e6:3a:52:2f:03:52:93:20:a6:11:5d: 75:a7:ef:0b:c3:b5:86:f5:3c:1f:3e:87:72:92:28: 49:3a:ac:a3:ee:f8:8c:46:1a:49:4c:1e:60:44:ed: 91:48:76:6d:05:63:7d:78:a8:64:e0:96:d7:92:c8: 52:35:27:ff:98:ef:60:ff:0a:f0:29:29:b0:a9:e7: d7:0a:17:2c:c6:00:d4:b1:4f:66:20:bb:8b:e9:0c: 94:3d:20:36:cc:c7:2a:c9:33:22:3a:5b:58:b6:24: e0:9e:e9:19:b8:93:58:35:71:06:aa:74:4c:7d:a6: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6C:C7:48:A5:C7:FE:DA:C9:45:39:F7:4D:3D:1F:67:85:0C:1A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:bd:23:a2:64:46:ce:5b:dd:ce:b7:f9:2b:44:88:69:cf:67: cd:c8:2d:28:78:23:8b:c8:4d:55:64:7d:3f:ff:49:f3:ba:d8: 85:02:57:c8:9f:2c:b7:c3:56:4b:f4:4f:a8:de:be:cd:05:93: ff:cb:31:5d:35:7a:aa:e2:ed:f8:19:59:b5:5a:2a:50:cc:51: e6:79:44:1f:d0:0d:4a:b6:26:28:79:35:7f:1e:db:52:d4:a8: dd:dd:b9:b8:81:0b:93:27:0f:2b:b3:95:90:0d:29:fb:ef:d8: a7:fe:51:72:13:44:cc:7f:99:ed:ac:a0:5a:9e:fb:88:fa:1a: b3:9b:28:ce:72:c6:d5:9e:82:c8:0b:67:25:49:2f:86:10:9e: 43:08:41:a5:3d:ac:28:47:af:77:cf:e8:c9:d6:e7:a3:44:1a: c7:7e:86:e6:54:d0:5d:04:b8:63:54:a1:42:3e:53:7b:6e:44: 73:2f:37:4e:bf:30:ee:70:ff:a1:11:0e:80:8d:2d:dd:8d:96: 82:86:63:92:c3:33:05:8f:8b:c7:2a:1a:55:c1:73:78:c4:16: f3:74:0f:e4:a4:7e:fe:be:7f:ea:57:6c:64:58:b1:e7:e6:90: ca:ff:59:09:37:d8:28:61:e3:6e:94:ba:25:82:a5:be:45:74: cc:53:72:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3JlbQRVyvbYH5Sl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk ZjJhOTUwNDYtMjQ0Zi00ZmJiLTkyODAtZTYzMDc1ZmM4ZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLYuo7WtisIfnqiAW57xUm+qn+171sC5svaP EGxKNLWidJBIXo6CFxsBbEvR0LqRycpesFEm2VYgmLLrMKY++p51NNFsb+gcnL5c nyjWUfqiyY/L2x0laW1D35HKL736BAibpVYQq5O2I5CIu4SptIVaCvWJm5KVUV5c 3hmr6WoryBZuKKXefeAI5jpSLwNSkyCmEV11p+8Lw7WG9TwfPodykihJOqyj7viM RhpJTB5gRO2RSHZtBWN9eKhk4JbXkshSNSf/mO9g/wrwKSmwqefXChcsxgDUsU9m ILuL6QyUPSA2zMcqyTMiOltYtiTgnukZuJNYNXEGqnRMfabVlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5sx0ilx/7ayUU59009H2eFDBroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOTkwYzg2YTItMDIwYy0z MjNmLTkzMDktYjBiMWU2OTcxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW9I6JkRs5b3c63+StEiGnPZ83ILSh4I4vITVVkfT//SfO62IUCV8if LLfDVkv0T6jevs0Fk//LMV01eqri7fgZWbVaKlDMUeZ5RB/QDUq2Jih5NX8e21LU qN3dubiBC5MnDyuzlZANKfvv2Kf+UXITRMx/me2soFqe+4j6GrObKM5yxtWegsgL ZyVJL4YQnkMIQaU9rChHr3fP6MnW56NEGsd+huZU0F0EuGNUoUI+U3tuRHMvN06/ MO5w/6ERDoCNLd2NloKGY5LDMwWPi8cqGlXBc3jEFvN0D+Skfv6+f+pXbGRYsefm kMr/WQk32Chh426UuiWCpb5FdMxTcis= -----END CERTIFICATE-----Generated at Wed May 13 10:55:04 2026 by rpki-client