$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa File: 922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa (raw, json) Hash identifier: ASQ2GiawtDe6ROCMoLKPud2lPwAnRfNbH2Wh/qrMPxk= Subject key identifier: 59:08:91:E7:5B:6D:8D:F1:AD:1E:68:F5:AF:F3:11:13:19:34:84:B1 Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f Certificate serial: 010D0C9F4328584C5EC69E504C421DB59E0DEA60 Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 14977 IP address blocks: 137.89.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:9e:50:4c:42:1d:b5:9e:0d:ea:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=35e798da-08cf-4da5-ba31-be15955173dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:e0:52:3d:6b:a6:1a:31:1e:95:93:fb:a9: d1:50:26:5b:8f:31:eb:3d:b7:41:2b:ae:9f:ab:3f: e1:b4:eb:d1:d4:3a:56:4b:37:2c:8a:95:2a:a6:69: 72:5f:b7:d8:11:66:f7:70:3a:c1:53:55:c5:b8:af: a9:f5:3b:87:f5:f9:2d:13:1c:c3:0a:68:89:8e:67: 70:e4:37:2a:03:62:2c:61:b4:05:04:6b:8b:9c:f1: c9:5e:c7:31:36:e7:93:41:10:87:53:35:94:86:98: c1:b7:6d:a5:4a:20:59:88:a0:96:92:38:99:68:5e: bb:91:a7:2f:aa:91:59:a0:fc:a0:9a:71:fb:16:73: 3f:df:9b:cb:2b:a3:6f:b5:76:a1:27:5e:6f:14:2c: 39:54:fa:96:5c:21:9c:c6:35:73:37:94:a0:66:89: cd:e2:22:48:bc:46:f7:41:c1:c9:36:4c:30:77:0f: 60:5c:90:fc:4a:5f:49:47:b8:d9:95:a0:25:b1:31: dd:b4:28:7f:17:5a:9e:b3:d4:ff:af:d7:ad:eb:bc: f7:4f:5b:60:86:89:83:33:1b:bd:34:a3:dd:c7:e7: 04:35:bc:d0:49:b5:59:51:b7:19:ab:54:98:33:cf: c0:46:f5:46:a9:83:31:fc:c6:94:31:51:bc:d7:4c: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:08:91:E7:5B:6D:8D:F1:AD:1E:68:F5:AF:F3:11:13:19:34:84:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/922a7eaf-3ba3-3b30-befa-8bbedfef05e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl X509v3 Authority Key Identifier: keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer sbgp-ipAddrBlock: critical IPv4: 137.89.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:37:51:5f:74:c2:95:ab:81:e7:21:6f:90:a0:11:55:de:dc: 8b:77:af:d1:7d:a9:6a:db:d2:e1:28:05:c3:b9:29:f7:a6:57: 2d:64:b1:42:70:f7:b9:a4:20:fb:53:68:26:0e:be:6e:c9:72: f7:ce:3a:80:dd:2a:c1:72:cd:7c:77:dd:e9:92:1f:82:07:0f: e1:be:86:a2:e4:21:2c:d3:68:83:07:e5:50:6e:27:97:44:04: 73:de:aa:01:3d:23:07:cf:71:a0:35:fa:11:80:c5:92:73:70: 3d:cf:32:df:57:8d:17:c7:b1:67:b6:fa:77:c1:33:f5:9a:25: b9:69:61:ef:00:94:0d:b2:ba:69:d0:f6:05:7a:f3:09:b9:e0: 12:4e:79:e5:6a:d0:8e:95:a2:ea:26:a1:28:3e:6e:b6:b0:13: 3a:a3:b9:b7:b9:3d:91:69:89:d9:d5:e6:48:46:5b:9a:e7:2d: f5:89:db:a5:9c:d0:70:09:57:7c:00:4c:36:47:d7:da:c0:1e: 3c:9f:a7:bc:28:c6:47:77:c0:37:9a:fa:83:7b:ac:a6:57:4d: d3:ee:26:53:88:a5:e6:f5:35:bb:6c:15:bc:9d:ec:c7:d3:95: 1c:30:33:0b:04:75:20:69:4e:13:8c:ef:7d:e8:5d:de:06:ef: 40:bb:ac:4a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWExexp5QTEIdtZ4N6mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm ZDhmMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MzVlNzk4ZGEtMDhjZi00ZGE1LWJhMzEtYmUxNTk1NTE3M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1zgUj1rphoxHpWT+6nRUCZbjzHrPbdBK66f qz/htOvR1DpWSzcsipUqpmlyX7fYEWb3cDrBU1XFuK+p9TuH9fktExzDCmiJjmdw 5DcqA2IsYbQFBGuLnPHJXscxNueTQRCHUzWUhpjBt22lSiBZiKCWkjiZaF67kacv qpFZoPygmnH7FnM/35vLK6NvtXahJ15vFCw5VPqWXCGcxjVzN5SgZonN4iJIvEb3 QcHJNkwwdw9gXJD8Sl9JR7jZlaAlsTHdtCh/F1qes9T/r9et67z3T1tghomDMxu9 NKPdx+cENbzQSbVZUbcZq1SYM8/ARvVGqYMx/MaUMVG810wC9QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFkIkedbbY3xrR5o9a/zERMZNISxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5 MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvOTIyYTdlYWYtM2JhMy0z YjMwLWJlZmEtOGJiZWRmZWYwNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAyzdRX3TClauB5yFvkKARVd7ci3ev0X2patvS4SgFw7kp96ZXLWSxQnD3 uaQg+1NoJg6+bsly9846gN0qwXLNfHfd6ZIfggcP4b6GouQhLNNogwflUG4nl0QE c96qAT0jB89xoDX6EYDFknNwPc8y31eNF8exZ7b6d8Ez9ZoluWlh7wCUDbK6adD2 BXrzCbngEk555WrQjpWi6iahKD5utrATOqO5t7k9kWmJ2dXmSEZbmuct9YnbpZzQ cAlXfABMNkfX2sAePJ+nvCjGR3fAN5r6g3uspldN0+4mU4il5vU1u2wVvJ3sx9OV HDAzCwR1IGlOE4zvfehd3gbvQLusSg== -----END CERTIFICATE-----Generated at Wed Feb 18 07:33:55 2026 by rpki-client