$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa File: aff81813-3cd1-36c9-97ca-eaec48ce378a.roa (raw, json) Hash identifier: NbM4tpbl9w3yGnRIX5N6IF8suEewgwtrVHNvIhKYtXA= Subject key identifier: AB:75:F1:D7:3E:A9:71:D1:75:9B:38:12:68:14:28:8C:B3:A3:1B:74 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584CB121CF5B208CA01218319D80 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 36692 IP address blocks: 198.41.8.0/22 maxlen: 22 198.41.8.0/23 maxlen: 23 198.41.8.0/24 maxlen: 24 198.41.9.0/24 maxlen: 24 198.41.10.0/23 maxlen: 23 198.41.10.0/24 maxlen: 24 198.41.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:cf:5b:20:8c:a0:12:18:31:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=d5a9dd15-23e6-4513-bf6f-f00643d8b848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:5f:49:3a:62:e6:e0:e4:d3:6f:57:c0:7e: 8e:0e:f0:7e:ef:f6:76:f5:a2:f1:78:8b:1a:af:e9: fa:42:88:aa:21:b2:bb:8e:ab:1a:f9:70:a8:cb:f2: 9d:08:81:8b:17:6d:9a:13:48:4d:45:0a:d8:c0:23: 59:6e:b7:a7:dd:5b:62:64:fe:08:39:3b:7b:66:13: ac:5d:39:d4:0d:1c:e4:42:2e:34:2f:6d:e1:c8:7a: 5b:d2:bf:45:57:d9:fd:bf:e4:1d:18:10:07:b8:7e: 8a:69:8a:66:ef:a9:37:39:bc:44:34:c2:24:c7:34: cc:5c:0d:9b:8e:fc:19:32:a2:ff:40:5e:d5:5a:64: e7:ed:bf:23:4a:0f:57:10:95:13:56:5d:ae:b8:d8: 49:27:c2:f7:72:4f:a8:21:cd:1c:1d:55:5b:bc:05: 4b:61:13:8b:48:09:2c:49:84:05:37:ba:a1:3c:c1: f0:e7:95:7f:d5:70:02:aa:d9:aa:73:6e:69:75:9d: c0:ca:69:41:4b:98:ca:13:86:6b:ce:ce:70:3c:c2: 60:67:90:ef:01:6f:24:8e:00:ad:9c:92:f1:2f:5a: 4f:af:c6:2c:04:67:8c:4b:0c:5a:27:e8:55:88:64: 85:d4:c9:fe:e9:56:01:d9:90:1a:26:d9:26:ab:d9: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:75:F1:D7:3E:A9:71:D1:75:9B:38:12:68:14:28:8C:B3:A3:1B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/aff81813-3cd1-36c9-97ca-eaec48ce378a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 198.41.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:11:75:cf:51:81:72:0d:a6:65:5a:2b:e1:78:36:02:32:98: 21:5b:a6:37:fa:77:5c:7c:f0:2b:ef:a9:95:a3:ef:18:d7:ca: 46:07:d6:30:85:59:11:b6:98:fc:81:d5:95:9f:71:31:27:a3: b4:91:1e:47:1d:90:b1:f6:6a:06:10:9e:d5:5c:e1:d7:b8:16: bf:4e:73:ea:90:a6:bc:05:a7:7f:53:33:83:05:ac:69:55:a3: 49:9d:1a:ec:66:0e:e5:bc:d0:c6:ea:82:80:fe:01:ce:38:2a: 36:21:d9:4f:9e:44:13:d5:d3:a6:ca:16:6f:96:88:51:ac:8d: 7e:cc:95:d9:c0:48:4a:c1:56:ee:5c:92:e4:ea:24:2b:f5:9b: 97:3a:b7:4f:82:9f:15:25:81:cb:df:2d:c3:fc:47:75:01:36: ed:8a:25:bf:7e:45:a5:c2:fd:50:5b:01:f4:ee:9e:77:ec:12: 3e:e1:be:f1:b8:4d:c3:86:ce:b1:64:01:0b:2f:ec:eb:fc:a6: 68:c1:75:38:54:64:8a:78:53:21:8b:99:71:a8:03:09:e8:c2: 65:e3:27:5b:11:ab:bd:5e:8b:eb:a5:9d:d1:5b:a6:71:da:08: 5c:a2:97:9e:84:ff:e9:17:29:4d:69:d7:00:68:63:97:06:14: 9d:db:d5:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIc9bIIygEhgxnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDVhOWRkMTUtMjNlNi00NTEzLWJmNmYtZjAwNjQzZDhiODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtctfSTpi5uDk029XwH6ODvB+7/Z29aLxeIsa r+n6QoiqIbK7jqsa+XCoy/KdCIGLF22aE0hNRQrYwCNZbren3VtiZP4IOTt7ZhOs XTnUDRzkQi40L23hyHpb0r9FV9n9v+QdGBAHuH6KaYpm76k3ObxENMIkxzTMXA2b jvwZMqL/QF7VWmTn7b8jSg9XEJUTVl2uuNhJJ8L3ck+oIc0cHVVbvAVLYROLSAks SYQFN7qhPMHw55V/1XACqtmqc25pdZ3AymlBS5jKE4Zrzs5wPMJgZ5DvAW8kjgCt nJLxL1pPr8YsBGeMSwxaJ+hViGSF1Mn+6VYB2ZAaJtkmq9kl9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt18dc+qXHRdZs4EmgUKIyzoxt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvYWZmODE4MTMtM2NkMS0z NmM5LTk3Y2EtZWFlYzQ4Y2UzNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxikIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIRdc9RgXINpmVaK+F4NgIymCFbpjf6d1x88CvvqZWj7xjXykYH1jCF WRG2mPyB1ZWfcTEno7SRHkcdkLH2agYQntVc4de4Fr9Oc+qQprwFp39TM4MFrGlV o0mdGuxmDuW80MbqgoD+Ac44KjYh2U+eRBPV06bKFm+WiFGsjX7MldnASErBVu5c kuTqJCv1m5c6t0+CnxUlgcvfLcP8R3UBNu2KJb9+RaXC/VBbAfTunnfsEj7hvvG4 TcOGzrFkAQsv7Ov8pmjBdThUZIp4UyGLmXGoAwnowmXjJ1sRq71ei+ulndFbpnHa CFyil56E/+kXKU1p1wBoY5cGFJ3b1eY= -----END CERTIFICATE-----Generated at Sat Feb 21 07:27:12 2026 by rpki-client