$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa File: 3cd4923c-6128-376c-8446-baffa366fd39.roa (raw, json) Hash identifier: 8Bd9k9djiokG90rQblk528orlzvLf43rU9dKSMfv+Hs= Subject key identifier: 50:DF:71:E9:FA:5D:79:EA:C6:28:05:8F:43:2F:B6:46:32:21:C0:C7 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584CAA270A58F74B4B0E277BE280 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 14618 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0a:58:f7:4b:4b:0e:27:7b:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=5436aa67-197c-4525-8120-e23e2bbb60da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c2:fa:7f:48:a1:f3:73:76:50:ad:93:4b:6f: 63:87:22:af:d7:fd:ec:df:62:3a:82:39:5e:0b:d8: 7a:26:12:d0:02:2e:8f:93:15:b7:9e:51:2a:f4:a9: 57:ea:e4:30:7b:d2:8f:33:b8:a0:f3:d8:48:aa:7b: 9b:15:4e:0b:48:e7:a1:32:1d:a5:e2:2f:b9:63:89: c3:98:b9:42:76:ee:90:28:c9:6f:34:de:78:f6:f9: f3:f5:d7:ef:71:c4:29:d3:d0:c8:a1:a0:e9:01:33: 9e:f6:10:6c:56:2b:88:f4:ae:f0:07:38:eb:b1:d3: 8b:9a:cd:f2:f4:44:be:47:3a:c3:4d:e0:b0:db:a1: e5:31:74:81:22:30:f9:02:f8:c2:c9:45:03:ae:41: 11:32:22:a1:fa:5d:e1:6f:01:2b:31:ed:c9:36:5d: e7:be:02:05:37:df:b7:b5:59:9c:ad:43:6c:55:80: 57:4b:18:0a:90:5b:05:f8:17:92:c5:4f:92:16:1d: 8c:92:a3:fa:c0:2d:11:74:2f:ee:0c:8a:51:07:2d: 73:f4:b0:36:55:a7:33:a7:1d:9b:63:71:aa:6c:d8: b6:93:2e:ca:cf:92:56:b2:91:eb:6c:94:70:a0:e1: fa:2d:c2:d1:41:63:c1:d5:c9:5c:1b:17:07:99:39: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DF:71:E9:FA:5D:79:EA:C6:28:05:8F:43:2F:B6:46:32:21:C0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:29:9b:6c:0c:17:93:87:db:ba:2a:f6:bf:47:aa:9d:68:36: f5:2d:4a:20:6d:d5:cc:47:4c:d5:75:1c:8c:16:e5:8d:00:04: bd:ab:fa:fc:40:7d:37:23:3f:67:ec:9f:e9:26:25:b0:d6:7a: 77:ff:66:fd:bc:ec:c9:0c:b4:06:44:77:26:f2:ca:54:69:c6: 1b:a4:e9:1a:32:48:cd:49:0f:10:d9:3a:ac:5c:39:4b:70:c5: db:5b:dc:22:a3:26:26:64:89:17:54:ec:31:15:63:26:d2:f0: 5e:c3:0a:58:da:71:02:82:82:11:79:d2:4e:59:cd:aa:e4:f2: 84:79:ea:46:53:d6:4d:2c:c3:ba:d7:35:a5:86:f4:6d:5c:fe: ba:04:7d:dd:08:5c:de:99:ec:f0:4b:77:40:34:a4:9b:be:a6: 32:ce:e1:b3:f2:a0:a8:c2:4e:98:ba:cf:72:f8:4c:01:07:45: 8a:f3:95:64:1e:c1:d9:ac:8e:de:78:0e:75:2a:63:8a:e5:da: 51:19:ed:3c:06:01:54:7d:61:cd:7a:5a:42:37:f8:bd:5c:41: fd:ae:d9:15:12:32:d2:17:e0:5f:a4:51:91:21:27:9c:d3:07: 64:ba:9b:77:59:69:e4:23:0e:c1:05:9a:5e:aa:27:f1:23:1b: a2:e1:93:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwpY90tLDid74oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NTQzNmFhNjctMTk3Yy00NTI1LTgxMjAtZTIzZTJiYmI2MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcL6f0ih83N2UK2TS29jhyKv1/3s32I6gjle C9h6JhLQAi6PkxW3nlEq9KlX6uQwe9KPM7ig89hIqnubFU4LSOehMh2l4i+5Y4nD mLlCdu6QKMlvNN549vnz9dfvccQp09DIoaDpATOe9hBsViuI9K7wBzjrsdOLms3y 9ES+RzrDTeCw26HlMXSBIjD5AvjCyUUDrkERMiKh+l3hbwErMe3JNl3nvgIFN9+3 tVmcrUNsVYBXSxgKkFsF+BeSxU+SFh2MkqP6wC0RdC/uDIpRBy1z9LA2Vaczpx2b Y3GqbNi2ky7Kz5JWspHrbJRwoOH6LcLRQWPB1clcGxcHmTl3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDfcen6XXnqxigFj0MvtkYyIcDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvM2NkNDkyM2MtNjEyOC0z NzZjLTg0NDYtYmFmZmEzNjZmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACspm2wMF5OH27oq9r9Hqp1oNvUtSiBt1cxHTNV1HIwW5Y0ABL2r+vxA fTcjP2fsn+kmJbDWenf/Zv287MkMtAZEdybyylRpxhuk6RoySM1JDxDZOqxcOUtw xdtb3CKjJiZkiRdU7DEVYybS8F7DCljacQKCghF50k5Zzark8oR56kZT1k0sw7rX NaWG9G1c/roEfd0IXN6Z7PBLd0A0pJu+pjLO4bPyoKjCTpi6z3L4TAEHRYrzlWQe wdmsjt54DnUqY4rl2lEZ7TwGAVR9Yc16WkI3+L1cQf2u2RUSMtIX4F+kUZEhJ5zT B2S6m3dZaeQjDsEFml6qJ/EjG6Lhk5c= -----END CERTIFICATE-----Generated at Mon Mar 2 02:14:51 2026 by rpki-client