$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa File: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (raw, json) Hash identifier: Rb+J3hCVgjG6UIfpvU6/6AinbrgHtEGCOlcuQ32mmS0= Subject key identifier: 30:86:D0:52:5B:21:4F:ED:6F:66:60:BB:1D:9C:3D:5C:56:B3:01:AC Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584AE8912930C9E29DAB18E20AC0 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:29:30:c9:e2:9d:ab:18:e2:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=3f9ba4e1-306e-4954-b384-5f3b8851df90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:8c:45:d3:1c:66:73:65:f0:6f:86:00:cf: 55:1a:45:b4:b3:44:3c:2b:ee:4c:c3:41:16:1e:e9: 62:48:5c:b5:9e:b2:ec:13:99:e7:a0:c4:60:8e:e2: 85:11:05:72:21:4b:19:36:7f:d3:11:c2:2c:06:86: 7e:1c:36:26:bf:8d:3b:53:7d:27:6b:8d:da:e6:f5: f8:19:3c:5f:8f:ae:62:73:26:83:09:c6:d6:92:37: 5d:06:9d:1c:4c:e3:5c:9b:c5:08:38:97:21:96:54: df:d4:f9:56:a1:e1:d5:f3:9f:d8:1d:67:13:2d:33: 81:97:3b:b8:06:40:71:a0:1d:4b:af:1b:fd:1e:c8: 79:c2:60:d6:75:a1:cf:ba:b7:0b:0b:27:fb:2e:99: be:83:c6:6c:98:06:1c:63:4f:18:15:eb:52:5c:07: 64:f2:d9:a4:8f:02:30:56:9b:7a:c5:9e:0f:e2:54: 2f:9f:cb:9d:3d:21:12:93:37:dc:60:36:9e:d5:bd: 0e:1e:ae:45:da:98:64:55:1d:64:98:31:e6:50:74: f7:f2:0b:b3:29:61:9b:b0:6a:c7:35:6a:b8:0f:b1: d7:d9:f2:a5:a7:d8:ca:dc:83:6e:b8:0c:3b:16:e8: 71:0b:9f:e6:ee:9a:35:9e:b6:13:99:53:10:1e:25: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:86:D0:52:5B:21:4F:ED:6F:66:60:BB:1D:9C:3D:5C:56:B3:01:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9a:88:69:0f:8f:d5:04:34:96:7a:4a:d5:80:f5:fe:8f:8a: 71:e1:fc:a7:bd:65:dc:4a:be:f3:40:20:ca:fe:d9:3b:d5:19: a7:98:fa:f6:5d:41:b7:48:1f:c1:c8:25:2d:22:93:6a:84:6b: 8d:3d:b5:92:35:ea:32:d2:60:c8:fe:d4:88:48:e2:72:ad:d2: f7:d8:5e:b1:07:0c:7e:28:f9:08:4d:00:c3:0d:c8:a7:f8:53: ca:eb:39:40:b0:f0:a4:02:11:1e:0c:21:bc:c1:14:cd:4b:da: 52:0d:46:57:fe:d2:70:d9:29:08:65:76:9e:ec:59:6a:9c:24: 92:86:58:b5:0a:bc:71:a6:ba:d1:32:ae:69:e8:0d:63:88:6b: 6c:5a:6c:ed:70:70:63:13:5a:7f:ef:a8:33:1d:a6:b7:d1:1f: 08:73:fe:ab:50:ac:41:72:b4:2e:e6:3a:c1:6b:52:9f:be:74: 2c:9f:ce:40:97:ef:b8:fe:4c:7c:ea:74:c8:98:62:b0:29:6c: f8:a3:f5:ea:a1:90:be:ba:90:90:c0:f7:2d:6c:ec:d5:38:db: c2:9e:76:71:87:a1:87:8b:cd:cb:9e:72:63:1d:2e:8f:39:f4: 81:50:00:0d:43:0a:49:2a:f8:53:70:65:47:9b:4b:03:24:8a: c5:e4:af:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSkwyeKdqxjiCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk M2Y5YmE0ZTEtMzA2ZS00OTU0LWIzODQtNWYzYjg4NTFkZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCyMRdMcZnNl8G+GAM9VGkW0s0Q8K+5Mw0EW HuliSFy1nrLsE5nnoMRgjuKFEQVyIUsZNn/TEcIsBoZ+HDYmv407U30na43a5vX4 GTxfj65icyaDCcbWkjddBp0cTONcm8UIOJchllTf1PlWoeHV85/YHWcTLTOBlzu4 BkBxoB1Lrxv9Hsh5wmDWdaHPurcLCyf7Lpm+g8ZsmAYcY08YFetSXAdk8tmkjwIw Vpt6xZ4P4lQvn8udPSESkzfcYDae1b0OHq5F2phkVR1kmDHmUHT38guzKWGbsGrH NWq4D7HX2fKlp9jK3INuuAw7FuhxC5/m7po1nrYTmVMQHiUXtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCG0FJbIU/tb2Zgux2cPVxWswGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvNDZmNGY4NGEtZjc0Ny0z Y2FhLWJiZDAtNzA1NzFjYmVkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOaiGkPj9UENJZ6StWA9f6PinHh/Ke9ZdxKvvNAIMr+2TvVGaeY+vZd QbdIH8HIJS0ik2qEa409tZI16jLSYMj+1IhI4nKt0vfYXrEHDH4o+QhNAMMNyKf4 U8rrOUCw8KQCER4MIbzBFM1L2lINRlf+0nDZKQhldp7sWWqcJJKGWLUKvHGmutEy rmnoDWOIa2xabO1wcGMTWn/vqDMdprfRHwhz/qtQrEFytC7mOsFrUp++dCyfzkCX 77j+THzqdMiYYrApbPij9eqhkL66kJDA9y1s7NU428KednGHoYeLzcuecmMdLo85 9IFQAA1DCkkq+FNwZUebSwMkisXkr5s= -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:21 2025 by rpki-client