$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa File: 892fdf53-8d98-3430-af33-08660cd96851.roa (raw, json) Hash identifier: 9EbOa0BI3cA2xOZgdID5wHazIiYlWzapBEwF2FLOXCI= Subject key identifier: C7:F1:40:88:26:3A:61:F8:A1:6D:0E:55:2A:33:B4:53:99:7C:A6:9F Certificate issuer: /CN=aae4f0de-2296-435c-b411-b16981804498 Certificate serial: 010D0C9F4328584C539BD48AE45C1638CFCE08C0 Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa Signing time: Sat 27 Dec 2025 14:00:38 +0000 ROA not before: Sat 27 Dec 2025 14:00:38 +0000 ROA not after: Fri 27 Mar 2026 13:00:38 +0000 asID: 215605 IP address blocks: 199.58.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:53:9b:d4:8a:e4:5c:16:38:cf:ce:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae4f0de-2296-435c-b411-b16981804498 Validity Not Before: Dec 27 14:00:38 2025 GMT Not After : Mar 27 13:00:38 2026 GMT Subject: CN=3bc74253-1828-41e4-b4c3-20d72a216f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:d0:d8:b1:37:d2:72:22:40:95:49:28:6d: 66:a9:7f:3b:15:09:1a:77:bb:f0:f1:23:3f:a8:d7: 5d:2f:c7:23:db:36:20:92:5d:89:1b:bd:17:41:48: e8:9f:9b:c3:f7:b0:01:81:b1:14:45:0f:1f:d3:58: be:b0:38:9f:38:a7:48:70:ae:7b:2e:c3:1c:af:e0: 35:47:97:39:1c:9b:42:8a:bb:6a:04:34:f6:40:7d: 26:de:f9:af:9a:52:17:90:1e:7f:0c:b8:2e:24:a5: cd:76:50:87:eb:4f:46:3f:bf:b7:f6:40:e5:7e:cd: 48:92:57:f8:94:67:a5:39:f8:dc:21:36:33:09:a3: 12:e0:df:20:49:fe:6c:00:93:13:4d:a1:52:72:78: 0d:bd:7e:92:35:f8:1b:11:07:e6:46:21:aa:41:2b: 02:13:e5:a0:ca:94:fd:60:84:b7:6a:41:e2:f9:67: ac:a8:3f:bb:c0:c9:28:8a:4c:f3:96:ac:13:25:12: 62:fb:cf:58:6c:6b:11:37:43:ba:52:b2:72:4a:b8: 73:f6:5d:ca:a3:c3:f0:4e:13:1a:f4:a7:76:0a:06: 90:73:42:4c:17:8e:94:b6:8c:c5:3d:11:28:5d:29: 21:57:3f:c3:cd:bd:3d:2b:a2:2f:4a:73:eb:ad:8b: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F1:40:88:26:3A:61:F8:A1:6D:0E:55:2A:33:B4:53:99:7C:A6:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl X509v3 Authority Key Identifier: keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer sbgp-ipAddrBlock: critical IPv4: 199.58.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:52:11:3e:50:49:f7:96:69:ee:50:08:25:b6:c1:1c:69:20: 61:79:7c:d3:41:9f:ae:19:b1:08:b6:ca:34:1c:83:e8:6a:bf: 50:68:2b:3e:05:b5:77:83:a4:69:f1:64:dc:f5:26:1a:36:41: 17:d2:d7:ad:ef:a6:85:bc:cb:52:4c:0e:1e:19:39:26:86:9e: 23:80:28:68:cc:63:7e:8f:90:9a:b4:6b:df:17:1b:ec:bd:17: 40:48:31:f0:ad:cc:00:15:04:0b:bb:d3:95:0d:10:e8:81:70: 93:8a:83:e5:ca:c6:85:ff:47:60:fb:55:24:d6:05:cd:b1:50: 95:a6:8f:91:92:72:4c:cd:98:cc:58:c4:32:45:65:67:d8:5b: 6b:58:75:ba:40:f3:a2:5f:ea:2c:e7:f3:b0:13:b1:97:f2:0a: de:d8:c5:e5:0b:1d:8c:2b:f7:d1:54:cb:d3:14:ab:ea:31:a5: de:e7:bb:87:39:8f:d3:19:d6:75:99:ce:5a:ef:39:f4:90:e5: 65:1f:2e:9a:4b:da:b7:c6:f4:e0:1d:f5:d0:33:94:e3:5a:7a: eb:be:19:6d:2b:ca:fb:71:70:b0:4f:44:c7:5f:2c:ad:56:c3: 6a:a6:e1:ca:73:cf:0b:0a:3e:46:fa:ae:3e:6c:37:ca:d7:fa: 34:a1:34:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExTm9SK5FwWOM/OCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0 NDk4MB4XDTI1MTIyNzE0MDAzOFoXDTI2MDMyNzEzMDAzOFowLzEtMCsGA1UEAxMk M2JjNzQyNTMtMTgyOC00MWU0LWI0YzMtMjBkNzJhMjE2Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzfQ2LE30nIiQJVJKG1mqX87FQkad7vw8SM/ qNddL8cj2zYgkl2JG70XQUjon5vD97ABgbEURQ8f01i+sDifOKdIcK57LsMcr+A1 R5c5HJtCirtqBDT2QH0m3vmvmlIXkB5/DLguJKXNdlCH609GP7+39kDlfs1Iklf4 lGelOfjcITYzCaMS4N8gSf5sAJMTTaFScngNvX6SNfgbEQfmRiGqQSsCE+WgypT9 YIS3akHi+WesqD+7wMkoikzzlqwTJRJi+89YbGsRN0O6UrJySrhz9l3Ko8PwThMa 9Kd2CgaQc0JMF46UtozFPREoXSkhVz/Dzb09K6IvSnPrrYvU2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfxQIgmOmH4oW0OVSoztFOZfKafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0 ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvODkyZmRmNTMtOGQ5OC0z NDMwLWFmMzMtMDg2NjBjZDk2ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0 MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5 ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVSET5QSfeWae5QCCW2wRxpIGF5fNNBn64ZsQi2yjQcg+hqv1BoKz4F tXeDpGnxZNz1Jho2QRfS163vpoW8y1JMDh4ZOSaGniOAKGjMY36PkJq0a98XG+y9 F0BIMfCtzAAVBAu705UNEOiBcJOKg+XKxoX/R2D7VSTWBc2xUJWmj5GSckzNmMxY xDJFZWfYW2tYdbpA86Jf6izn87ATsZfyCt7YxeULHYwr99FUy9MUq+oxpd7nu4c5 j9MZ1nWZzlrvOfSQ5WUfLppL2rfG9OAd9dAzlONaeuu+GW0ryvtxcLBPRMdfLK1W w2qm4cpzzwsKPkb6rj5sN8rX+jShNLU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:10:53 2026 by rpki-client