$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa File: AS996.roa (raw, json) Hash identifier: kyrRUHJdFqgmSQf1vwKts7UpFYthTvRWUtAKdVgm7CU= Subject key identifier: FE:A4:30:D1:C4:72:73:D4:6C:A5:62:1B:71:C1:9E:E0:7C:61:99:B5 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 44E2A37E5BE8FB66A545C0989635BCC37CD34F08 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa Signing time: Wed 15 Apr 2026 12:35:57 +0000 ROA not before: Wed 15 Apr 2026 12:30:57 +0000 ROA not after: Wed 14 Apr 2027 12:35:57 +0000 asID: 996 IP address blocks: 89.35.93.0/24 maxlen: 24 89.35.94.0/24 maxlen: 24 89.35.95.0/24 maxlen: 24 162.213.3.0/24 maxlen: 24 192.228.122.0/24 maxlen: 24 192.228.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 08:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e2:a3:7e:5b:e8:fb:66:a5:45:c0:98:96:35:bc:c3:7c:d3:4f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 15 12:30:57 2026 GMT Not After : Apr 14 12:35:57 2027 GMT Subject: CN=FEA430D1C47273D46CA5621B71C19EE07C6199B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:f9:34:9a:f3:22:78:94:00:ae:0c:e5:97: 6d:54:e5:c1:e4:b5:41:c3:79:b4:cf:f5:cc:21:f8: eb:6e:db:d3:49:6b:b3:e5:6a:e3:33:60:3c:02:c0: b5:8c:31:80:6b:68:fc:97:f3:af:cb:7a:1d:a1:51: 34:9d:97:5e:98:8c:b2:6e:ec:b2:a3:41:c9:e0:31: cf:f9:49:a6:1e:30:d0:3f:1c:08:d2:02:c2:2e:98: 52:6e:be:0a:41:8d:e5:ed:bb:61:3f:c2:21:76:5e: 90:91:c8:6f:32:bc:0c:d8:9f:d1:ac:1c:cf:71:99: e5:83:c7:4e:c1:09:87:a7:41:32:b8:be:4c:0b:db: 8c:b2:03:61:be:07:e5:3b:32:f0:3a:e0:68:ef:a5: ab:aa:59:58:f8:e1:34:17:88:47:63:7f:78:ae:0a: 65:c7:1e:ca:b5:c8:1c:91:41:fb:64:bf:5e:89:51: 7b:98:a8:bf:a3:5f:7f:be:75:a9:ae:17:5e:83:ad: 98:3c:5f:3d:b4:0c:6f:5c:af:3b:ce:4a:bc:4e:73: ce:50:6e:ee:d8:6d:78:53:e5:4a:29:f2:39:83:32: 8e:d7:b4:be:13:68:8c:70:7a:f9:c6:70:6f:35:cf: cf:36:c5:71:65:e7:49:00:d6:55:bf:0d:28:71:a9: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A4:30:D1:C4:72:73:D4:6C:A5:62:1B:71:C1:9E:E0:7C:61:99:B5 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.93.0-89.35.95.255 162.213.3.0/24 192.228.122.0/24 192.228.126.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:5f:f9:04:47:8c:db:17:a9:ae:9a:71:67:48:b1:d3:14:0e: 9d:da:3d:1b:35:c0:39:e9:c5:da:d5:10:45:3f:f5:90:ea:33: 9c:20:f5:40:be:64:5e:01:5c:b3:ec:b5:a3:17:ec:8a:dd:62: dd:3b:ce:ef:c2:fd:2e:9e:bd:f1:0c:63:ef:50:9d:5d:24:68: d6:16:c1:b1:fb:54:3d:a7:22:cd:5c:cf:a0:39:27:8f:aa:56: c7:3f:5d:03:73:bc:fd:ef:c9:f7:b2:76:ae:87:ae:9a:f1:9d: ea:f2:fb:cf:4d:b9:1b:3f:20:f6:53:de:5c:17:2a:d6:77:cf: 05:c9:29:45:78:c8:dd:2f:18:bb:cd:28:ef:68:19:73:0d:30: 33:8b:4f:54:df:05:b5:d0:b1:6f:61:cd:e9:5f:35:04:3e:99: d5:5f:89:4d:cd:87:9a:5a:43:d6:9c:74:c4:8a:37:39:ee:f5: cd:ec:97:50:92:7f:ab:0e:f1:40:36:82:51:c2:64:e1:11:5c: 90:61:00:45:53:5b:f0:0b:e9:d7:a9:60:18:e3:b7:4e:91:0f: 4e:a8:53:3a:7d:7a:f8:e5:3c:3f:3f:49:6c:90:7f:27:4d:ee: 9e:9c:73:a3:9c:a4:23:44:55:e2:a6:d8:d6:61:2e:04:4c:33: 36:75:66:ba -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUROKjflvo+2alRcCYljW8w3zTTwgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNDE1MTIzMDU3WhcNMjcwNDE0MTIzNTU3 WjAzMTEwLwYDVQQDEyhGRUE0MzBEMUM0NzI3M0Q0NkNBNTYyMUI3MUMxOUVFMDdD NjE5OUI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpT5NJrzIniU AK4M5ZdtVOXB5LVBw3m0z/XMIfjrbtvTSWuz5WrjM2A8AsC1jDGAa2j8l/Ovy3od oVE0nZdemIyybuyyo0HJ4DHP+UmmHjDQPxwI0gLCLphSbr4KQY3l7bthP8Ihdl6Q kchvMrwM2J/RrBzPcZnlg8dOwQmHp0EyuL5MC9uMsgNhvgflOzLwOuBo76WrqllY +OE0F4hHY394rgplxx7KtcgckUH7ZL9eiVF7mKi/o19/vnWprhdeg62YPF89tAxv XK87zkq8TnPOUG7u2G14U+VKKfI5gzKO17S+E2iMcHr5xnBvNc/PNsVxZedJANZV vw0ocakBeQIDAQABo4ICljCCApIwHQYDVR0OBBYEFP6kMNHEcnPUbKViG3HBnuB8 YZm1MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzk5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5Bggr BgEFBQcBBwEB/wQqMCgwJgQCAAEwIDAMAwQAWSNdAwQFWSNAAwQAotUDAwQAwOR6 AwQBwOR+MA0GCSqGSIb3DQEBCwUAA4IBAQAKX/kER4zbF6mumnFnSLHTFA6d2j0b NcA56cXa1RBFP/WQ6jOcIPVAvmReAVyz7LWjF+yK3WLdO87vwv0unr3xDGPvUJ1d JGjWFsGx+1Q9pyLNXM+gOSePqlbHP10Dc7z978n3snauh66a8Z3q8vvPTbkbPyD2 U95cFyrWd88FySlFeMjdLxi7zSjvaBlzDTAzi09U3wW10LFvYc3pXzUEPpnVX4lN zYeaWkPWnHTEijc57vXN7JdQkn+rDvFANoJRwmThEVyQYQBFU1vwC+nXqWAY47dO kQ9OqFM6fXr45Tw/P0lskH8nTe6enHOjnKQjRFXiptjWYS4ETDM2dWa6 -----END CERTIFICATE-----Generated at Fri Apr 17 12:13:01 2026 by rpki-client