$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa File: e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa (raw, json) Hash identifier: VJHZv6B0xjxtsFw6FplfJ70JlR7p5lLHf0uibGjdxaw= Subject key identifier: E6:FC:36:02:B0:F6:22:5C:44:F5:18:20:E4:35:D9:5B:12:B2:CA:01 Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584CF90239F6A05B47CD2E9C3E00 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa Signing time: Tue 24 Feb 2026 19:55:24 +0000 ROA not before: Tue 24 Feb 2026 19:55:24 +0000 ROA not after: Mon 25 May 2026 18:55:24 +0000 asID: 30048 IP address blocks: 199.33.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:02:39:f6:a0:5b:47:cd:2e:9c:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Feb 24 19:55:24 2026 GMT Not After : May 25 18:55:24 2026 GMT Subject: CN=ef93e454-a03e-4a92-86d0-1e6ead283b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:a3:06:c6:95:a7:ae:ec:6e:09:74:e8:d2: 9a:33:db:45:64:d4:9f:08:2e:e9:b1:b2:ca:1c:ea: ab:6d:c2:a2:59:5b:c7:54:68:62:14:0a:50:e0:8f: e3:67:94:1d:1d:fa:2d:5f:1d:5e:0c:41:b1:c6:3b: a4:ba:fd:fe:1f:0a:89:b4:af:ec:7a:57:e7:38:cc: 9f:5f:a6:d8:c0:56:eb:b6:dc:74:fd:b7:cd:30:03: da:2a:78:c6:b8:13:b1:4e:45:96:a1:33:24:44:98: 62:b3:e7:0b:68:fa:e7:1b:d9:91:45:41:cb:46:07: 97:2a:eb:5c:de:53:bc:bc:68:98:5a:68:94:64:d9: a2:bf:23:b0:64:87:61:e7:20:9d:85:a0:ba:82:f3: 7e:a6:a2:f9:8e:38:03:ec:79:9e:cb:74:bf:df:6e: cf:66:e6:43:0c:af:76:6b:5c:74:ca:dd:5b:f1:12: 2c:e5:7b:63:04:80:f6:f5:d3:d7:15:98:43:8b:b6: d9:49:70:5f:a2:69:e9:6c:11:3d:2d:e4:3c:fb:93: 62:f1:d1:e0:69:ad:7c:9e:d7:11:72:94:d0:c6:a9: c0:0a:81:69:63:9c:52:fa:67:c7:87:6d:1e:38:ea: 66:cc:b8:c9:20:e1:9e:76:95:c3:fb:7f:26:47:1f: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FC:36:02:B0:F6:22:5C:44:F5:18:20:E4:35:D9:5B:12:B2:CA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/e88a34c9-05d0-3fde-a516-7e58ba3857f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:d9:df:ab:be:56:82:2c:f5:d0:0e:a3:e6:7c:81:48:bb:b6: 73:f2:1a:39:71:ce:ed:c9:d2:58:ed:e0:c1:52:54:d2:48:53: ec:e0:9b:08:b5:5b:14:31:18:77:5a:86:dd:a0:ef:7c:84:24: a1:ab:44:02:ea:8c:58:0d:9d:28:a2:a1:42:7c:c4:d5:4e:1d: 22:2c:e2:e1:7b:c8:5d:53:cf:34:ff:f7:65:86:3f:97:ff:17: 5b:16:a3:34:f0:91:f9:d6:09:03:fb:cf:08:c2:3f:3e:84:95: b4:3b:15:9a:56:c3:5d:de:3a:5f:3d:8b:7f:46:06:8f:8e:4f: b1:2f:39:dd:04:ab:e5:1e:f2:fe:23:01:8c:28:39:e5:ac:8e: 53:3a:2d:19:3a:32:d1:d3:1e:c3:ae:24:9a:94:18:ff:ae:52: 36:79:8c:81:83:8c:3f:d1:5b:e3:94:20:ca:fc:a3:90:ff:85: 7a:76:5e:c2:5d:1a:48:d6:48:28:80:70:48:a8:ec:b8:19:5f: 16:70:5c:91:03:d6:76:23:45:65:5f:1b:7c:e0:f2:1a:33:3b: 84:d4:92:2c:b9:ea:ed:08:8b:90:64:ff:79:ea:2c:69:ca:66: 31:40:ee:91:d1:d3:96:cc:20:a9:a5:d4:f9:64:d7:29:91:c2: 6f:c8:fd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5Ajn2oFtHzS6cPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDIyNDE5NTUyNFoXDTI2MDUyNTE4NTUyNFowLzEtMCsGA1UEAxMk ZWY5M2U0NTQtYTAzZS00YTkyLTg2ZDAtMWU2ZWFkMjgzYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTGjBsaVp67sbgl06NKaM9tFZNSfCC7psbLK HOqrbcKiWVvHVGhiFApQ4I/jZ5QdHfotXx1eDEGxxjukuv3+HwqJtK/selfnOMyf X6bYwFbrttx0/bfNMAPaKnjGuBOxTkWWoTMkRJhis+cLaPrnG9mRRUHLRgeXKutc 3lO8vGiYWmiUZNmivyOwZIdh5yCdhaC6gvN+pqL5jjgD7Hmey3S/327PZuZDDK92 a1x0yt1b8RIs5XtjBID29dPXFZhDi7bZSXBfomnpbBE9LeQ8+5Ni8dHgaa18ntcR cpTQxqnACoFpY5xS+mfHh20eOOpmzLjJIOGedpXD+38mRx/OuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb8NgKw9iJcRPUYIOQ12VsSssoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZTg4YTM0YzktMDVkMC0z ZmRlLWE1MTYtN2U1OGJhMzg1N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7Z36u+VoIs9dAOo+Z8gUi7tnPyGjlxzu3J0ljt4MFSVNJIU+zgmwi1 WxQxGHdaht2g73yEJKGrRALqjFgNnSiioUJ8xNVOHSIs4uF7yF1TzzT/92WGP5f/ F1sWozTwkfnWCQP7zwjCPz6ElbQ7FZpWw13eOl89i39GBo+OT7EvOd0Eq+Ue8v4j AYwoOeWsjlM6LRk6MtHTHsOuJJqUGP+uUjZ5jIGDjD/RW+OUIMr8o5D/hXp2XsJd GkjWSCiAcEio7LgZXxZwXJED1nYjRWVfG3zg8hozO4TUkiy56u0Ii5Bk/3nqLGnK ZjFA7pHR05bMIKml1Plk1ymRwm/I/Qo= -----END CERTIFICATE-----Generated at Fri Feb 27 07:28:17 2026 by rpki-client