$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf11198-b12d-3efa-abd8-029fafbeaf3d.roa File: aaf11198-b12d-3efa-abd8-029fafbeaf3d.roa (raw, json) Hash identifier: b4Uwlu15HzvjEjkaH8pgE9DJF5EtTP33pf6TFgoiIC4= Subject key identifier: 1A:98:FE:72:87:AA:D5:33:39:6E:6B:72:D5:65:59:21:04:63:8D:2F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF325238AEAD4D50B53A4340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf11198-b12d-3efa-abd8-029fafbeaf3d.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 70.188.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:52:38:ae:ad:4d:50:b5:3a:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=d3a19823-f252-4327-b95e-fa93274c994f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:97:b0:68:a8:8c:c0:dd:bc:68:3f:53:8e: 94:48:e8:69:d2:f5:10:c6:8e:af:36:b8:b0:0f:a4: be:14:d2:f5:5f:b0:2b:bd:87:e1:ea:e4:8d:94:2f: 1e:9d:b4:58:07:64:4d:43:b7:43:fb:dc:61:cc:2c: ce:c7:8f:2c:09:8b:da:38:5b:9e:55:1d:33:df:f3: 6f:a8:a2:03:e2:af:ed:10:71:e6:87:8b:da:65:68: 91:93:4b:1c:6d:6a:4d:71:1c:44:a0:57:64:d6:a6: c1:3a:df:39:35:99:ba:cb:7b:76:74:79:cc:09:f5: c2:c1:a1:91:45:5c:6a:18:e2:41:28:64:9c:ff:0c: 68:6f:c3:03:7b:a5:78:9c:d7:d5:36:07:f3:62:4e: c6:dd:14:5f:45:16:72:49:d1:44:b7:89:bc:62:70: 68:47:7a:19:de:80:62:12:b4:c2:73:5d:be:55:dd: cc:e4:28:9f:38:d4:9a:67:6a:f9:29:46:ca:55:fc: 63:62:3b:06:63:0b:48:13:55:2c:18:14:f0:c8:6c: 3e:07:37:22:28:06:5d:b1:60:14:86:02:ef:5c:05: 70:e3:f2:39:eb:02:7d:7a:5b:36:f8:1f:66:66:b0: ab:9c:d3:4c:61:b5:61:86:9f:92:dd:72:8a:e2:84: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:98:FE:72:87:AA:D5:33:39:6E:6B:72:D5:65:59:21:04:63:8D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf11198-b12d-3efa-abd8-029fafbeaf3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3e:c0:29:08:fb:22:75:46:6b:82:44:d3:2c:90:32:83:7a: 29:f2:2a:70:bf:f1:61:82:ee:7b:26:08:7d:9a:78:f0:6b:bc: 92:29:6c:c3:6e:fc:09:f6:36:94:31:e4:60:08:d1:0c:c4:dd: 2d:f4:4f:bf:ec:06:64:f3:e4:6b:7a:77:1d:82:f9:c4:c5:32: de:47:5b:e3:4b:32:58:bd:da:ce:9f:a8:44:84:60:ac:ab:78: 65:07:ff:8d:3c:9b:3b:c3:02:fa:81:23:ef:82:93:00:4e:5f: 89:34:f0:c9:c8:bd:6c:43:b8:d4:95:31:d7:ce:5b:75:83:d5: 2d:90:48:85:8e:dc:f6:ff:47:4b:8d:b2:cc:34:e3:8f:92:20: a4:54:72:b8:cb:5d:6e:7f:38:78:73:a7:63:53:33:4a:fa:85: eb:7d:fc:40:4c:42:ef:93:90:5a:8f:4f:5e:ea:d6:20:6c:54: 8b:4b:eb:b2:a1:e3:a2:9b:d0:52:d1:99:5a:b5:0c:e9:5d:08: 56:fa:75:9c:54:52:fb:35:6f:16:77:ee:ee:24:d2:89:5c:34: 1a:1e:55:75:d8:c7:4b:f5:d3:62:93:28:a0:95:6a:33:dd:42: 85:24:8c:9a:c9:28:10:f5:39:c6:04:33:08:d9:0f:0a:7c:3a: 6a:72:e7:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMlI4rq1NULU6Q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZDNhMTk4MjMtZjI1Mi00MzI3LWI5NWUtZmE5MzI3NGM5OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VOXsGiojMDdvGg/U46USOhp0vUQxo6vNriw D6S+FNL1X7ArvYfh6uSNlC8enbRYB2RNQ7dD+9xhzCzOx48sCYvaOFueVR0z3/Nv qKID4q/tEHHmh4vaZWiRk0scbWpNcRxEoFdk1qbBOt85NZm6y3t2dHnMCfXCwaGR RVxqGOJBKGSc/wxob8MDe6V4nNfVNgfzYk7G3RRfRRZySdFEt4m8YnBoR3oZ3oBi ErTCc12+Vd3M5CifONSaZ2r5KUbKVfxjYjsGYwtIE1UsGBTwyGw+BzciKAZdsWAU hgLvXAVw4/I56wJ9els2+B9mZrCrnNNMYbVhhp+S3XKK4oRHwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqY/nKHqtUzOW5rctVlWSEEY40vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFmMTExOTgtYjEyZC0z ZWZhLWFiZDgtMDI5ZmFmYmVhZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrzHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8+wCkI+yJ1RmuCRNMskDKDeinyKnC/8WGC7nsmCH2aePBrvJIpbMNu /An2NpQx5GAI0QzE3S30T7/sBmTz5Gt6dx2C+cTFMt5HW+NLMli92s6fqESEYKyr eGUH/408mzvDAvqBI++CkwBOX4k08MnIvWxDuNSVMdfOW3WD1S2QSIWO3Pb/R0uN ssw044+SIKRUcrjLXW5/OHhzp2NTM0r6het9/EBMQu+TkFqPT17q1iBsVItL67Kh 46Kb0FLRmVq1DOldCFb6dZxUUvs1bxZ37u4k0olcNBoeVXXYx0v102KTKKCVajPd QoUkjJrJKBD1OcYEMwjZDwp8Ompy58g= -----END CERTIFICATE-----Generated at Mon Mar 2 06:51:14 2026 by rpki-client