$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa File: a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json) Hash identifier: HWTXr+87upiXCA7u6VM9dEhIUUG/8waAbuNi053zvGY= Subject key identifier: 8E:C1:FF:CF:C6:61:C4:8A:73:5D:4A:05:9B:C0:B2:6A:46:B0:E3:3E Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584CD13CA55C18E71697EAAE6300 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 46432 IP address blocks: 208.88.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:a5:5c:18:e7:16:97:ea:ae:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=0b3ab4f6-2d80-46d2-90eb-d28f900c0ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:32:fa:f2:f3:9e:ef:83:b1:cd:06:f1:7b: c3:2b:c8:82:27:f5:81:df:91:b0:8d:18:73:02:e2: 55:a2:9c:2c:e9:10:6a:b3:0d:2e:e7:d5:35:ef:fc: 7f:b7:b4:65:22:cb:25:d8:65:4f:f7:c4:83:2e:0f: 1f:22:18:f6:3d:59:82:7c:59:e8:40:a3:2b:bd:52: 82:f0:1d:40:a4:fd:d1:a4:75:eb:71:a7:a8:ff:df: 84:3b:2f:a2:3a:a2:e8:85:48:8d:f3:9e:dc:9b:a5: e7:da:fd:bb:24:e4:94:8b:34:0e:c9:72:71:40:75: 4a:37:70:7b:4e:01:39:a8:a9:a3:2c:67:c8:83:37: f8:ba:c3:06:6e:34:c3:19:30:51:04:ad:6e:4c:ee: 99:1b:8b:06:14:92:08:6d:4c:f1:e2:7d:a2:46:d8: 46:b7:15:4f:08:3c:45:b2:86:55:c9:6e:21:c3:ce: db:7b:aa:fd:a1:95:d4:ea:0d:47:5d:19:97:e2:ad: b1:a0:e7:a0:a2:0a:41:36:c3:4a:96:78:b6:6e:08: a4:28:39:2f:d3:d0:8a:39:8c:98:af:e5:3d:29:51: 88:25:11:50:c6:5e:1d:fe:06:28:50:0c:79:12:68: f7:ab:9d:f6:be:13:16:cb:cb:cd:f4:ab:7f:88:f2: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:FF:CF:C6:61:C4:8A:73:5D:4A:05:9B:C0:B2:6A:46:B0:E3:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:dd:ff:76:d9:ad:14:3f:e8:3d:2a:2e:61:df:5c:f3:77:a7: 0e:ef:a4:a1:50:51:e0:eb:76:00:a6:77:3e:fe:8f:92:a3:73: 0a:01:01:35:82:45:b9:33:5b:0e:5b:65:1b:e9:bb:d2:6c:91: 05:00:39:b7:d3:da:24:8e:8f:d8:42:4c:7c:33:1d:c8:1c:82: a7:26:cf:6c:3e:3c:85:69:0e:08:1d:6e:44:03:22:2a:7e:0d: e0:26:2f:49:29:11:3b:b3:1d:11:8b:d1:55:68:40:57:a4:5e: 81:a6:76:3e:c2:ab:c0:61:67:82:95:4c:7c:f8:cb:57:1f:0a: 0d:71:75:ae:ba:c7:6a:7f:0a:7c:fe:a9:6b:b7:ac:cf:32:13: da:95:d8:de:73:ef:43:18:b8:39:0b:74:37:c1:47:56:45:e4: 94:ca:95:72:9f:14:1e:04:53:fb:6c:8e:25:83:da:99:66:53: 71:62:7c:f8:97:1e:d1:b7:0e:bc:75:80:c7:88:a0:d5:b3:09: 95:19:12:68:b6:4a:7b:2e:24:d3:c8:5b:01:c6:8d:b7:ae:89: 6b:91:27:9c:5b:38:11:f8:b6:ce:3f:bb:c4:ab:64:d2:83:cf: d6:14:3a:ad:45:df:0b:74:ce:e9:29:92:e9:03:b6:e1:87:07: 18:b1:ce:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzRPKVcGOcWl+quYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk MGIzYWI0ZjYtMmQ4MC00NmQyLTkwZWItZDI4ZjkwMGMwZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RIy+vLznu+Dsc0G8XvDK8iCJ/WB35GwjRhz AuJVopws6RBqsw0u59U17/x/t7RlIssl2GVP98SDLg8fIhj2PVmCfFnoQKMrvVKC 8B1ApP3RpHXrcaeo/9+EOy+iOqLohUiN857cm6Xn2v27JOSUizQOyXJxQHVKN3B7 TgE5qKmjLGfIgzf4usMGbjTDGTBRBK1uTO6ZG4sGFJIIbUzx4n2iRthGtxVPCDxF soZVyW4hw87be6r9oZXU6g1HXRmX4q2xoOegogpBNsNKlni2bgikKDkv09CKOYyY r+U9KVGIJRFQxl4d/gYoUAx5Emj3q532vhMWy8vN9Kt/iPItlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7B/8/GYcSKc11KBZvAsmpGsOM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTk0M2E2MmUtOGFmNC0z NzI4LWFjMjEtZGI5NThiNTMxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7d/3bZrRQ/6D0qLmHfXPN3pw7vpKFQUeDrdgCmdz7+j5KjcwoBATWC RbkzWw5bZRvpu9JskQUAObfT2iSOj9hCTHwzHcgcgqcmz2w+PIVpDggdbkQDIip+ DeAmL0kpETuzHRGL0VVoQFekXoGmdj7Cq8BhZ4KVTHz4y1cfCg1xda66x2p/Cnz+ qWu3rM8yE9qV2N5z70MYuDkLdDfBR1ZF5JTKlXKfFB4EU/tsjiWD2plmU3FifPiX HtG3Drx1gMeIoNWzCZUZEmi2SnsuJNPIWwHGjbeuiWuRJ5xbOBH4ts4/u8SrZNKD z9YUOq1F3wt0zukpkukDtuGHBxixzlQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:41 2026 by rpki-client