$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa File: 990c86a2-020c-323f-9309-b0b1e6971b6d.roa (raw, json) Hash identifier: 1Il32wCxXpa29srbFg2ODihC+5HD0iFiltkT85a2afY= Subject key identifier: D3:CC:9D:43:83:E5:A9:D6:30:05:32:6D:0B:A4:2D:03:A6:57:D4:44 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584CE8F76EDB3DB9BFFDEA95FF60 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa Signing time: Thu 19 Feb 2026 02:00:32 +0000 ROA not before: Thu 19 Feb 2026 02:00:32 +0000 ROA not after: Wed 20 May 2026 01:00:32 +0000 asID: 59 IP address blocks: 198.133.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e8:f7:6e:db:3d:b9:bf:fd:ea:95:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Feb 19 02:00:32 2026 GMT Not After : May 20 01:00:32 2026 GMT Subject: CN=522f65de-b338-45ee-8485-4f58a748cb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:e6:1e:c1:84:93:1c:4d:3e:ea:03:ba:17: 69:55:0e:ab:68:be:2c:ba:22:37:f4:90:2a:b1:dc: bf:3b:26:54:c2:e0:99:61:ce:c7:a5:be:b1:02:f7: f4:2d:7a:3e:d1:3e:9e:89:cb:0a:7d:73:d3:c2:24: 39:e6:a8:9b:d2:dd:1d:aa:62:83:bb:4c:a1:4e:6d: 94:af:54:31:c2:b3:8b:74:f4:93:3d:39:1b:01:7c: 16:d2:e7:68:6e:2d:76:17:e6:20:21:b4:75:f1:e4: 74:3c:9e:8d:c0:b6:85:5c:de:2c:0b:fd:a7:df:81: 62:c6:f0:08:29:ec:09:80:1b:e0:be:3e:a0:42:fd: f5:d9:18:f9:e0:94:0f:ca:c4:0b:e0:55:7f:18:96: d6:fb:6d:a9:5f:98:67:4e:b7:c6:d1:91:bf:47:d3: bc:15:6e:b4:ff:4a:23:1a:14:83:b1:46:8e:f9:13: 99:61:e5:40:5f:b4:e7:69:9e:57:cf:66:96:b0:84: f9:b0:1b:36:56:df:3e:23:42:a4:1e:c1:41:d5:d1: 86:42:b3:41:16:37:a1:77:ee:fd:28:5d:69:39:68: fc:5f:19:44:ec:61:64:6d:6e:2a:e3:f7:75:39:57: 77:ca:46:d2:ee:26:15:b5:3f:f4:18:1e:4d:a0:45: ac:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:9D:43:83:E5:A9:D6:30:05:32:6D:0B:A4:2D:03:A6:57:D4:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3e:42:95:85:82:47:37:d0:d4:cd:80:cc:a1:1f:e6:95:99: 30:5c:5c:63:51:00:19:ea:9d:6d:16:cc:12:7c:76:6f:74:f0: 37:19:00:08:64:92:1b:3e:bd:d7:76:88:a9:6d:6c:1f:64:aa: f9:14:fa:3c:7c:e3:50:f9:cf:bb:c4:78:a5:35:90:a4:9d:b8: 07:97:f0:3b:81:89:8c:7c:e4:fe:65:90:97:4e:c7:0b:81:59: 59:95:de:56:4b:e1:c6:77:1c:6f:7a:fe:51:74:b2:ce:a3:0f: c9:eb:3a:15:7b:ea:58:7d:64:93:e8:14:19:1c:00:18:51:6b: 56:5e:29:51:02:1c:15:00:f2:1c:9a:18:ff:bb:e6:be:32:f7: c8:82:6b:97:04:74:1d:d3:30:8d:2b:cd:a8:6c:43:41:9c:6e: dd:03:cc:89:1d:33:9a:26:67:13:1e:0c:0a:0a:77:83:91:39: de:2f:2a:41:27:9e:82:ef:fd:96:d1:13:1c:6e:34:d2:1b:b0: 8f:84:f7:83:f4:7c:28:33:70:f0:51:d8:5c:bf:bb:27:98:6b: 88:69:07:6e:94:f1:5b:26:9b:65:d6:0c:e5:f2:d8:28:d3:e6: 3c:c2:08:c7:f5:ff:55:5b:f4:bb:68:ef:6a:a7:cd:a9:c3:3a: b8:6a:6e:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo927bPbm//eqV/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk NTIyZjY1ZGUtYjMzOC00NWVlLTg0ODUtNGY1OGE3NDhjYjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmnmHsGEkxxNPuoDuhdpVQ6raL4suiI39JAq sdy/OyZUwuCZYc7Hpb6xAvf0LXo+0T6eicsKfXPTwiQ55qib0t0dqmKDu0yhTm2U r1QxwrOLdPSTPTkbAXwW0udobi12F+YgIbR18eR0PJ6NwLaFXN4sC/2n34FixvAI KewJgBvgvj6gQv312Rj54JQPysQL4FV/GJbW+22pX5hnTrfG0ZG/R9O8FW60/0oj GhSDsUaO+ROZYeVAX7TnaZ5Xz2aWsIT5sBs2Vt8+I0KkHsFB1dGGQrNBFjehd+79 KF1pOWj8XxlE7GFkbW4q4/d1OVd3ykbS7iYVtT/0GB5NoEWsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPMnUOD5anWMAUybQukLQOmV9REMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOTkwYzg2YTItMDIwYy0z MjNmLTkzMDktYjBiMWU2OTcxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA+QpWFgkc30NTNgMyhH+aVmTBcXGNRABnqnW0WzBJ8dm908DcZAAhk khs+vdd2iKltbB9kqvkU+jx841D5z7vEeKU1kKSduAeX8DuBiYx85P5lkJdOxwuB WVmV3lZL4cZ3HG96/lF0ss6jD8nrOhV76lh9ZJPoFBkcABhRa1ZeKVECHBUA8hya GP+75r4y98iCa5cEdB3TMI0rzahsQ0Gcbt0DzIkdM5omZxMeDAoKd4OROd4vKkEn noLv/ZbRExxuNNIbsI+E94P0fCgzcPBR2Fy/uyeYa4hpB26U8Vsmm2XWDOXy2CjT 5jzCCMf1/1Vb9Lto72qnzanDOrhqbu4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:56 2026 by rpki-client