$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa File: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (raw, json) Hash identifier: CEiyGVil+UyeHVal4mt7SyrEkZOH/enKbTlto1X86NM= Subject key identifier: 81:B8:F2:E1:16:74:19:44:07:32:60:C5:3F:55:51:90:64:4E:96:B6 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584D5E1A737514E7BEBE5FEFD9C0 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16437 IP address blocks: 208.88.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:73:75:14:e7:be:be:5f:ef:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=bc6233cb-7a76-4eb3-862b-8074e9cb5189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:e2:b7:19:b1:af:00:9c:41:8e:9f:ff:b9: fe:50:80:b6:c6:47:91:8d:7c:ea:67:70:eb:d7:a2: 34:60:6e:84:a4:12:d2:f5:6f:e9:c6:e4:78:55:4e: 71:2a:8c:0e:6e:f7:d5:29:e2:26:a5:e7:0f:99:43: 6c:ba:f1:a3:d3:75:2f:ab:b5:70:53:24:86:40:d0: 75:53:08:aa:a9:46:48:47:7a:32:c7:3e:dd:c8:2f: 49:76:13:d2:e3:c2:c2:ba:fc:30:bc:b0:43:ae:23: dd:e3:1d:03:b6:07:16:c5:d8:93:7a:fe:47:9e:7d: a0:a1:bc:70:3c:45:5b:bc:f2:94:a0:7a:e6:9f:ad: 89:36:72:3a:7d:b5:70:31:28:58:95:89:d7:40:b3: e9:d1:1b:cf:ce:2f:62:e5:37:4f:27:20:18:d4:f7: 3f:63:8d:6e:fe:f2:42:d1:d8:d2:52:e5:98:25:ae: ad:39:6e:ae:5e:6c:cc:88:81:d2:a7:b7:11:29:bb: b2:d7:d1:89:40:c7:c9:e4:02:e0:f4:de:06:37:42: be:1f:81:07:d1:8c:b1:d4:cd:a6:e3:ea:c4:b3:69: 0a:4d:d2:81:80:fa:66:fc:52:56:a6:73:bf:72:6a: 61:95:cc:55:0a:78:a1:68:af:eb:4e:63:b1:8d:de: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B8:F2:E1:16:74:19:44:07:32:60:C5:3F:55:51:90:64:4E:96:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3a:93:65:dc:f7:b1:01:68:32:fc:cb:b0:20:14:53:17:94: 0c:89:58:80:e2:5f:c2:5e:d8:b7:ee:12:b6:da:b4:0c:b7:7e: 9f:b9:c7:17:8b:e1:e2:72:6c:b4:d6:ce:6f:51:1c:c9:47:fc: 92:0c:23:08:34:54:1d:a6:95:10:59:71:8f:90:b0:53:e8:9e: 6a:7f:1f:57:a1:c3:02:6c:f7:89:1e:d8:bf:cf:f9:20:05:f8: b6:48:5f:36:60:91:98:79:f1:33:99:76:a8:cd:37:99:38:a3: b4:00:14:2c:aa:50:9d:aa:c2:9c:16:0f:cf:0e:f4:79:e3:5d: 5d:f3:8e:05:d6:eb:50:b4:89:c3:aa:ea:cb:83:21:eb:98:f4: 10:d0:3f:ae:ba:e8:49:7f:df:45:7c:33:80:a7:8b:ce:5e:74: 49:1a:69:6e:66:a4:0a:27:99:ac:ac:f6:7b:7f:09:65:12:04: 60:fb:8b:08:80:cb:a5:72:fa:6c:8f:e6:dd:b4:cf:e7:79:59: c3:28:65:63:14:b7:ad:7b:ae:ac:93:22:18:63:cf:ba:1b:52: 57:64:a8:79:af:64:92:84:11:d4:64:d1:1a:0f:fa:c5:79:5f: 85:c7:4f:76:51:b0:9d:83:64:62:a5:12:ba:20:81:ae:64:fa: fc:e6:ae:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGnN1FOe+vl/v2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YmM2MjMzY2ItN2E3Ni00ZWIzLTg2MmItODA3NGU5Y2I1MTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5DitxmxrwCcQY6f/7n+UIC2xkeRjXzqZ3Dr 16I0YG6EpBLS9W/pxuR4VU5xKowObvfVKeImpecPmUNsuvGj03Uvq7VwUySGQNB1 UwiqqUZIR3oyxz7dyC9JdhPS48LCuvwwvLBDriPd4x0DtgcWxdiTev5Hnn2gobxw PEVbvPKUoHrmn62JNnI6fbVwMShYlYnXQLPp0RvPzi9i5TdPJyAY1Pc/Y41u/vJC 0djSUuWYJa6tOW6uXmzMiIHSp7cRKbuy19GJQMfJ5ALg9N4GN0K+H4EH0Yyx1M2m 4+rEs2kKTdKBgPpm/FJWpnO/cmphlcxVCnihaK/rTmOxjd5H9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG48uEWdBlEBzJgxT9VUZBkTpa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNGE3ZTFkYmQtNDcwNC0z NDJiLWI3NDEtNTZiMGM4ZTc1OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU6k2Xc97EBaDL8y7AgFFMXlAyJWIDiX8Je2LfuErbatAy3fp+5xxeL 4eJybLTWzm9RHMlH/JIMIwg0VB2mlRBZcY+QsFPonmp/H1ehwwJs94ke2L/P+SAF +LZIXzZgkZh58TOZdqjNN5k4o7QAFCyqUJ2qwpwWD88O9HnjXV3zjgXW61C0icOq 6suDIeuY9BDQP6666El/30V8M4Cni85edEkaaW5mpAonmays9nt/CWUSBGD7iwiA y6Vy+myP5t20z+d5WcMoZWMUt617rqyTIhhjz7obUldkqHmvZJKEEdRk0RoP+sV5 X4XHT3ZRsJ2DZGKlErogga5k+vzmrsY= -----END CERTIFICATE-----Generated at Sat Apr 18 02:47:16 2026 by rpki-client