$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa File: 06aa229e-21d5-3132-8604-c88f6941821b.roa (raw, json) Hash identifier: Mlm/GfRpMy4AWwDrbtvHGZNrQ1ypzg7iSH5gwcldp8Q= Subject key identifier: D4:9B:B8:5D:94:D3:DC:8A:29:0B:DA:9D:83:45:1E:22:F7:A0:59:98 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584CD13CAAE15569DD39E28BF440 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 46432 IP address blocks: 208.88.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:aa:e1:55:69:dd:39:e2:8b:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=1e539544-ac30-4ef2-a3f4-9eff4439406e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:5b:2e:a2:46:dd:36:2e:d5:8d:3c:f1:8c: 2a:d3:67:b9:6c:12:b5:a7:a1:db:0b:25:7a:0b:11: e9:e4:df:66:98:a3:85:dd:4d:a5:cf:38:b3:e0:3b: 04:31:71:4c:61:89:6f:a2:7a:13:fc:cd:39:54:48: dd:7b:4c:30:98:8a:5d:80:d2:66:56:00:57:15:5d: e4:dd:ac:d6:ff:cb:5b:6a:c1:33:00:65:9d:99:6a: 81:7e:ba:d7:5a:24:1c:d8:4a:23:50:90:92:eb:db: 08:56:fe:28:09:22:2a:72:da:d0:88:82:b7:ec:86: 01:41:15:d4:34:97:f5:ec:d4:82:96:f5:06:50:69: 5a:b7:88:2f:e3:58:8c:29:0f:cd:45:b5:1e:97:aa: 0c:a4:53:2b:06:ee:a4:9e:f9:a2:ce:45:25:89:9d: 2a:80:55:0f:d4:9e:0b:25:a0:dc:7f:7a:69:ba:44: 6d:da:4f:14:ea:5d:f0:94:63:e9:52:31:19:5c:d6: 6a:d6:4c:29:0f:f4:ea:77:d1:95:1a:f1:7b:b8:7c: e1:f5:6a:01:91:87:02:57:9a:c9:96:ce:e9:7b:68: 5b:19:5a:6b:59:1e:c7:20:ae:4c:c3:5a:69:6e:49: dd:37:a3:c6:a4:45:5b:fa:de:07:08:39:1b:94:af: 83:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9B:B8:5D:94:D3:DC:8A:29:0B:DA:9D:83:45:1E:22:F7:A0:59:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:18:be:2d:49:3c:3b:a0:4b:9c:92:cd:21:29:20:18:97:a8: 44:4e:db:3a:7d:7e:6c:b1:b2:20:5f:1f:b3:44:3d:6d:18:05: a4:83:75:79:b0:1b:2d:6d:55:a1:ae:b5:d7:03:08:1c:f2:86: e5:42:28:df:d8:c6:dc:88:96:da:80:49:16:2a:3d:3e:e2:1a: bf:50:70:b6:3d:2b:83:d3:3e:96:bf:cd:bc:f1:d7:9d:8b:5e: 73:6d:f1:0b:16:0e:f5:15:03:35:a0:6d:6b:3c:dc:f5:7e:32: 25:cd:0d:c8:68:02:aa:86:25:6e:67:d4:b6:a5:d2:2c:83:a3: cd:a9:cc:9d:44:80:6c:c1:da:45:ce:05:7a:f1:f3:19:31:56: 9b:9f:42:1d:f9:03:48:22:ba:3e:a1:e2:20:08:80:69:05:5e: 1f:f9:31:9f:be:06:0f:1f:ed:19:3b:a8:96:a6:5d:95:49:c2: 96:4f:15:97:97:12:67:62:e7:c1:b7:aa:2b:25:eb:31:30:59: 04:17:fc:83:29:7e:c4:4c:a4:d1:2b:f4:14:a8:ae:0b:75:37: 8b:a3:49:d8:94:85:ac:0c:b0:e4:b6:f5:f1:b1:d3:64:20:8e: ee:0c:90:a0:89:8f:10:16:a3:5c:ac:c7:92:1d:e2:7a:1b:4d: a0:a7:07:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKrhVWndOeKL9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk MWU1Mzk1NDQtYWMzMC00ZWYyLWEzZjQtOWVmZjQ0Mzk0MDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZFbLqJG3TYu1Y088Ywq02e5bBK1p6HbCyV6 CxHp5N9mmKOF3U2lzziz4DsEMXFMYYlvonoT/M05VEjde0wwmIpdgNJmVgBXFV3k 3azW/8tbasEzAGWdmWqBfrrXWiQc2EojUJCS69sIVv4oCSIqctrQiIK37IYBQRXU NJf17NSClvUGUGlat4gv41iMKQ/NRbUel6oMpFMrBu6knvmizkUliZ0qgFUP1J4L JaDcf3ppukRt2k8U6l3wlGPpUjEZXNZq1kwpD/Tqd9GVGvF7uHzh9WoBkYcCV5rJ ls7pe2hbGVprWR7HIK5Mw1ppbkndN6PGpEVb+t4HCDkblK+DbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSbuF2U09yKKQvanYNFHiL3oFmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvMDZhYTIyOWUtMjFkNS0z MTMyLTg2MDQtYzg4ZjY5NDE4MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0Yvi1JPDugS5ySzSEpIBiXqERO2zp9fmyxsiBfH7NEPW0YBaSDdXmw Gy1tVaGutdcDCBzyhuVCKN/YxtyIltqASRYqPT7iGr9QcLY9K4PTPpa/zbzx152L XnNt8QsWDvUVAzWgbWs83PV+MiXNDchoAqqGJW5n1Lal0iyDo82pzJ1EgGzB2kXO BXrx8xkxVpufQh35A0giuj6h4iAIgGkFXh/5MZ++Bg8f7Rk7qJamXZVJwpZPFZeX Emdi58G3qisl6zEwWQQX/IMpfsRMpNEr9BSorgt1N4ujSdiUhawMsOS29fGx02Qg ju4MkKCJjxAWo1ysx5Id4nobTaCnB+8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:25 2026 by rpki-client