$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa File: 990c86a2-020c-323f-9309-b0b1e6971b6d.roa (raw, json) Hash identifier: 5sjOfVK1xxqeohUWtJY6Kejhxli9nSp4JHNYEEpS1f8= Subject key identifier: 46:60:B7:ED:B6:7E:6B:4E:05:45:07:C3:6C:93:3F:92:59:C6:69:B6 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584EA7871A04169544A60084B680 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 59 IP address blocks: 198.133.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:1a:04:16:95:44:a6:00:84:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5597052f-2f7b-425a-9505-2541ccdd2456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:19:97:8c:77:31:93:40:65:d0:d7:4c:c3: 53:43:12:1b:e0:96:2f:fd:f2:10:89:a3:88:f7:04: 5d:43:0c:57:d4:0e:67:00:99:2c:20:e6:77:40:cd: d0:05:13:dc:bc:8f:b4:7e:d2:31:59:92:aa:8b:04: c0:47:2c:5a:38:71:8b:29:07:c8:a4:a3:73:60:df: 28:28:28:2e:ea:61:85:9e:b9:bc:0f:68:30:15:6f: 61:72:4a:a2:88:bf:8c:d0:cf:38:a0:8e:d4:ef:ef: 1d:fe:ab:0f:cd:8d:ca:3c:df:57:f5:18:37:b4:72: 32:21:b4:eb:4e:ec:03:18:e6:46:4c:8d:c1:e9:a7: cd:09:07:d9:dd:36:1c:71:74:d2:1b:bd:fe:97:ff: ca:c1:06:88:51:40:2b:63:a2:02:cd:67:b3:f8:28: 80:6b:ea:84:d8:7f:d2:a8:c3:33:fe:6a:30:5a:09: d8:a3:4f:16:ed:3e:c6:c4:2e:5e:47:6d:a1:36:49: c2:e9:28:cb:18:34:ff:ad:49:28:bc:62:c6:56:f4: 45:f5:19:e6:fd:ec:a2:46:10:ea:19:00:e8:3c:f9: 71:bb:f5:0a:3d:e9:98:03:79:97:27:db:32:2e:db: ea:71:70:5b:7a:91:36:0a:72:b9:d4:9a:9b:54:f3: ee:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:60:B7:ED:B6:7E:6B:4E:05:45:07:C3:6C:93:3F:92:59:C6:69:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f0:c3:1d:fe:b2:ad:bd:be:82:6d:5a:a6:c6:04:9c:94:cf: e2:aa:af:2e:d8:fe:7e:22:a3:b2:df:16:be:62:35:a3:09:52: ea:a6:c7:b1:3c:29:bd:8b:b7:54:f2:70:48:2f:70:e6:5f:da: ca:d0:2b:a7:d4:2f:20:a1:b2:b9:65:9a:95:e2:3e:bf:09:3c: 3c:81:9a:a2:15:7b:4e:6f:92:fd:72:ce:94:84:3b:5f:66:14: f4:f9:bb:ba:0d:6f:e5:32:89:91:f1:58:05:65:18:05:54:2e: 7e:3e:6d:9e:5a:07:a7:bd:42:f5:7c:ed:cb:0c:4c:65:82:66: 23:06:d9:b3:c3:23:46:92:4a:12:22:97:bc:6a:1a:1c:80:60: e3:9e:a3:b1:61:4f:a8:c5:ea:ee:df:5c:44:3c:02:ee:47:78: 14:cb:ff:73:41:5a:21:d0:82:82:1b:c1:16:ea:6f:2e:82:b1: be:fd:19:ed:5f:e9:46:a3:95:40:6e:11:71:f2:b5:82:0d:fc: 90:fa:40:53:6d:81:e1:c5:28:bb:a5:05:7f:03:b4:ea:28:1c: 18:aa:3f:ac:4e:6a:55:5e:f5:fd:c8:e5:8c:ea:0c:5d:54:61: ff:e9:ae:f0:7b:72:91:ab:06:c2:02:51:d0:19:17:40:f1:af: bd:fa:8b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhxoEFpVEpgCEtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTU5NzA1MmYtMmY3Yi00MjVhLTk1MDUtMjU0MWNjZGQyNDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNcZl4x3MZNAZdDXTMNTQxIb4JYv/fIQiaOI 9wRdQwxX1A5nAJksIOZ3QM3QBRPcvI+0ftIxWZKqiwTARyxaOHGLKQfIpKNzYN8o KCgu6mGFnrm8D2gwFW9hckqiiL+M0M84oI7U7+8d/qsPzY3KPN9X9Rg3tHIyIbTr TuwDGOZGTI3B6afNCQfZ3TYccXTSG73+l//KwQaIUUArY6ICzWez+CiAa+qE2H/S qMMz/mowWgnYo08W7T7GxC5eR22hNknC6SjLGDT/rUkovGLGVvRF9Rnm/eyiRhDq GQDoPPlxu/UKPemYA3mXJ9syLtvqcXBbepE2CnK51JqbVPPuIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZgt+22fmtOBUUHw2yTP5JZxmm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOTkwYzg2YTItMDIwYy0z MjNmLTkzMDktYjBiMWU2OTcxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvwwx3+sq29voJtWqbGBJyUz+Kqry7Y/n4io7LfFr5iNaMJUuqmx7E8 Kb2Lt1TycEgvcOZf2srQK6fULyChsrllmpXiPr8JPDyBmqIVe05vkv1yzpSEO19m FPT5u7oNb+UyiZHxWAVlGAVULn4+bZ5aB6e9QvV87csMTGWCZiMG2bPDI0aSShIi l7xqGhyAYOOeo7FhT6jF6u7fXEQ8Au5HeBTL/3NBWiHQgoIbwRbqby6Csb79Ge1f 6UajlUBuEXHytYIN/JD6QFNtgeHFKLulBX8DtOooHBiqP6xOalVe9f3I5YzqDF1U Yf/prvB7cpGrBsICUdAZF0Dxr736i1w= -----END CERTIFICATE-----Generated at Wed Jul 29 08:24:28 2026 by rpki-client