$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa File: 990c86a2-020c-323f-9309-b0b1e6971b6d.roa (raw, json) Hash identifier: PahHj9ZrO2Plcy/38fF6GTlO/6XXFYV8dxiPSBzPsUQ= Subject key identifier: 3B:80:E8:5F:8B:BE:70:FF:53:7C:FA:2F:04:DC:68:7B:F3:C8:44:60 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584F4976FCC0DF6DE80718B0F080 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 59 IP address blocks: 198.133.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:fc:c0:df:6d:e8:07:18:b0:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f6c90fba-9458-49b6-8e9e-82e2a60603fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:1b:27:18:cb:28:f5:fc:6b:d3:a4:59:a6: 7e:88:e5:61:8e:2c:27:a6:fa:15:01:66:28:0d:27: ee:50:66:d7:5f:b4:d6:f1:46:51:e1:ff:49:91:da: ea:62:c3:77:7e:0e:b8:d2:b7:76:33:32:7d:7e:8a: ab:dc:3d:05:34:e8:7b:0d:dc:e3:8f:f2:9b:fc:07: 39:a8:5e:17:ed:34:db:23:60:14:ad:47:17:e8:ec: 88:41:3b:a6:05:c9:e6:d5:f4:ce:11:02:8a:3a:3d: 0d:78:26:b3:c4:2a:39:0e:6f:82:07:3f:11:94:e9: 70:b6:e4:c6:d7:3c:c9:cc:3b:07:93:3c:a3:23:1b: a7:09:46:b5:7c:1d:da:0d:d5:60:b4:94:a2:d2:b0: b5:4d:3c:51:bd:9f:79:58:ac:49:c9:90:cd:6a:d3: 53:c1:f1:f1:00:fd:f1:a4:d1:53:67:36:ab:2d:e5: d0:28:b7:70:5e:3e:77:89:9a:cf:2c:5f:1c:6f:3e: e7:da:48:a2:b1:5d:fc:2f:b2:c1:aa:cc:0f:a6:27: ea:b6:d4:48:89:93:a6:48:a1:f0:b7:c8:ec:93:ed: 36:26:1a:bc:2b:0a:2c:33:f9:f1:10:30:08:f9:1a: bc:2a:2e:51:2d:73:a2:b8:1b:47:cb:b7:78:86:49: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:80:E8:5F:8B:BE:70:FF:53:7C:FA:2F:04:DC:68:7B:F3:C8:44:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b8:ba:8a:20:3f:a7:62:b6:b3:59:38:17:86:82:50:3a:e1: 5c:13:c6:8f:b1:68:31:57:bd:2f:b9:4b:18:1b:b5:30:40:ba: ae:0b:aa:3c:4b:4e:d4:e6:ba:26:f9:e6:86:08:72:47:cc:a8: 6e:a7:37:02:3e:c7:a4:84:b2:76:7b:46:75:52:48:61:cf:78: ea:4d:24:c1:b3:37:81:b8:08:7e:84:cf:ee:9d:5d:b5:77:9c: 45:a5:f8:e5:4e:f7:41:d6:67:85:d2:3a:61:3b:3e:5a:f8:28: 5b:a9:82:a2:ed:dd:4a:8f:ce:86:d9:6c:0d:2b:7b:76:48:1c: 24:0c:a8:4d:9a:72:2d:8b:f6:31:51:13:dd:34:c4:80:02:fe: 8e:64:c5:12:a8:1b:15:84:0d:ad:26:b9:f4:7a:3e:20:9b:a6: 8c:3a:f4:ec:13:41:31:5b:98:51:24:4c:09:63:46:ea:f6:51: 4d:90:c2:21:0d:93:5d:55:f6:e1:cf:07:0f:de:f5:07:9c:b9: b4:fd:65:f4:f5:08:5d:fd:ea:26:75:0d:b2:9d:09:fc:88:c3: f4:d1:de:0d:08:5c:b3:09:50:aa:c6:01:45:32:dc:18:ac:be: f7:0f:01:eb:b2:7a:0e:a7:c1:b0:89:b7:4c:06:31:ab:11:9d: 38:91:26:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdvzA323oBxiw8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjZjOTBmYmEtOTQ1OC00OWI2LThlOWUtODJlMmE2MDYwM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApngbJxjLKPX8a9OkWaZ+iOVhjiwnpvoVAWYo DSfuUGbXX7TW8UZR4f9JkdrqYsN3fg640rd2MzJ9foqr3D0FNOh7Ddzjj/Kb/Ac5 qF4X7TTbI2AUrUcX6OyIQTumBcnm1fTOEQKKOj0NeCazxCo5Dm+CBz8RlOlwtuTG 1zzJzDsHkzyjIxunCUa1fB3aDdVgtJSi0rC1TTxRvZ95WKxJyZDNatNTwfHxAP3x pNFTZzarLeXQKLdwXj53iZrPLF8cbz7n2kiisV38L7LBqswPpifqttRIiZOmSKHw t8jsk+02Jhq8KwosM/nxEDAI+Rq8Ki5RLXOiuBtHy7d4hklXJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuA6F+LvnD/U3z6LwTcaHvzyERgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOTkwYzg2YTItMDIwYy0z MjNmLTkzMDktYjBiMWU2OTcxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm4uoogP6ditrNZOBeGglA64VwTxo+xaDFXvS+5SxgbtTBAuq4LqjxL TtTmuib55oYIckfMqG6nNwI+x6SEsnZ7RnVSSGHPeOpNJMGzN4G4CH6Ez+6dXbV3 nEWl+OVO90HWZ4XSOmE7Plr4KFupgqLt3UqPzobZbA0re3ZIHCQMqE2aci2L9jFR E900xIAC/o5kxRKoGxWEDa0mufR6PiCbpow69OwTQTFbmFEkTAljRur2UU2QwiEN k11V9uHPBw/e9QecubT9ZfT1CF396iZ1DbKdCfyIw/TR3g0IXLMJUKrGAUUy3Bis vvcPAeuyeg6nwbCJt0wGMasRnTiRJpQ= -----END CERTIFICATE-----Generated at Sat Sep 26 03:35:28 2026 by rpki-client