$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa File: 6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa (raw, json) Hash identifier: th/URFfI/amzE0g939PXiD6dJ78Kul1KZAk7kvomolc= Subject key identifier: 50:01:1D:F9:8F:04:FF:49:04:28:B0:C5:25:8F:42:95:FD:C4:03:42 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584CD13CA5407633001CB95EC480 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 46432 IP address blocks: 208.88.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:a5:40:76:33:00:1c:b9:5e:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=2402e605-69e3-406c-bbf8-1eb95744fc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:d5:19:39:cf:bd:ce:38:50:95:2a:f4:94: 84:b9:c4:5f:b3:16:78:b2:38:35:bb:32:3f:d2:4c: 92:e0:63:6c:c6:32:f3:fe:f7:70:b5:5d:59:51:19: 11:f1:a0:b3:63:5e:c3:85:8c:a6:e7:a9:1e:f7:71: 1b:3c:31:4c:df:f4:8f:a0:54:32:dd:87:06:b3:c0: 26:22:c7:9e:84:32:af:90:d8:ed:e0:52:f0:59:1c: 77:cb:df:c9:33:c8:6e:3e:01:e8:c6:5b:af:bf:af: 54:44:a8:50:58:4b:c9:87:c1:70:2f:70:00:00:ad: 0d:0e:e0:65:b1:81:ae:f6:1e:07:0a:d8:c1:b8:0c: 2c:29:dd:44:55:22:11:6f:95:4e:83:3f:52:e8:b9: 0a:62:72:4a:f5:8f:2e:23:40:f4:ff:86:84:f6:3a: cf:30:73:e7:4b:27:ef:8b:94:15:cc:df:32:d4:74: 3d:45:a7:5d:91:f4:d5:25:96:fe:d3:43:1a:c5:82: 5a:34:30:35:fe:2f:bd:5b:77:5d:46:d5:3e:49:64: 9f:67:dc:b7:be:72:0a:60:16:86:7b:58:64:ef:d2: de:8c:8b:bd:f7:99:08:07:03:3f:2b:df:fa:8c:4d: 32:a4:54:1b:5d:b4:49:30:b8:98:fe:fb:31:19:29: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:01:1D:F9:8F:04:FF:49:04:28:B0:C5:25:8F:42:95:FD:C4:03:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b8:05:ad:10:8e:fb:f6:35:07:d3:05:ad:84:eb:fd:16:fd: c4:6a:44:8d:32:35:4b:56:24:47:42:88:28:c9:ce:df:56:97: 46:18:a9:6f:10:41:9b:46:b0:5c:ae:7d:32:94:97:76:c5:06: 70:71:49:3f:48:ae:e4:63:ee:5e:0d:c7:33:0f:2a:55:5c:e1: fd:bd:b3:e1:4c:8a:0c:91:28:5d:37:52:84:8f:77:ae:a4:16: e7:0b:01:d4:02:31:39:6e:33:4b:58:c8:52:10:7d:3c:a2:a1: 29:cb:dc:8d:4f:57:5d:12:a8:0d:1e:ee:d3:a3:5b:6d:b9:49: 9d:e4:1b:3c:80:ac:74:96:f2:4a:26:c6:ec:68:c9:46:be:e5: b8:13:48:4c:0a:57:12:13:e8:ff:78:7f:ac:ba:88:c5:cf:0b: 4f:4f:a9:cd:87:6b:33:f5:0e:22:7d:6f:b2:00:67:1d:0d:c7: 00:e3:6a:35:9d:0a:d5:89:17:76:16:41:fd:b8:6d:d5:ab:86: be:85:d1:94:ab:9f:de:f5:6a:7c:50:b4:75:68:b7:78:08:84: b3:03:53:5f:fb:80:30:d9:68:a1:82:4b:00:52:31:f0:6d:e2: 9a:f0:70:70:3b:f1:7a:c5:58:31:bf:bd:8d:6f:fe:c2:85:e9: da:9d:4f:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKVAdjMAHLlexIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk MjQwMmU2MDUtNjllMy00MDZjLWJiZjgtMWViOTU3NDRmYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBXVGTnPvc44UJUq9JSEucRfsxZ4sjg1uzI/ 0kyS4GNsxjLz/vdwtV1ZURkR8aCzY17DhYym56ke93EbPDFM3/SPoFQy3YcGs8Am IseehDKvkNjt4FLwWRx3y9/JM8huPgHoxluvv69URKhQWEvJh8FwL3AAAK0NDuBl sYGu9h4HCtjBuAwsKd1EVSIRb5VOgz9S6LkKYnJK9Y8uI0D0/4aE9jrPMHPnSyfv i5QVzN8y1HQ9RaddkfTVJZb+00MaxYJaNDA1/i+9W3ddRtU+SWSfZ9y3vnIKYBaG e1hk79LejIu995kIBwM/K9/6jE0ypFQbXbRJMLiY/vsxGSnmZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFABHfmPBP9JBCiwxSWPQpX9xANCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNjEwOWI5ZTktOWYxNC0z NDMyLWEzNTAtNGUyYmE3ZjQ5ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW4Ba0Qjvv2NQfTBa2E6/0W/cRqRI0yNUtWJEdCiCjJzt9Wl0YYqW8Q QZtGsFyufTKUl3bFBnBxST9IruRj7l4NxzMPKlVc4f29s+FMigyRKF03UoSPd66k FucLAdQCMTluM0tYyFIQfTyioSnL3I1PV10SqA0e7tOjW225SZ3kGzyArHSW8kom xuxoyUa+5bgTSEwKVxIT6P94f6y6iMXPC09Pqc2HazP1DiJ9b7IAZx0NxwDjajWd CtWJF3YWQf24bdWrhr6F0ZSrn971anxQtHVot3gIhLMDU1/7gDDZaKGCSwBSMfBt 4prwcHA78XrFWDG/vY1v/sKF6dqdT+w= -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:47 2026 by rpki-client