$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa File: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (raw, json) Hash identifier: 2Dcidem3+aRRmCa43eIq2MK/58ALprwogzurGyJcN5w= Subject key identifier: 69:04:C0:C8:8D:0B:EE:4A:C8:68:08:11:9C:90:34:4A:2F:99:23:2B Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584CAA270E9755C4BF9448E91B00 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 16509 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0e:97:55:c4:bf:94:48:e9:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=0d0ccfa3-ee47-4245-be30-710992b18aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:86:fb:42:3c:92:d7:38:18:d4:63:5f:73: 9d:be:95:72:18:27:62:3b:ef:ec:07:1e:a2:3f:c7: 68:fb:cb:c4:fd:3d:9b:7b:54:6b:4e:2c:cb:e2:43: 53:fb:50:6f:fd:03:7d:cf:44:bb:33:b6:88:77:2b: 93:7e:9e:21:89:bc:47:e9:02:a6:59:9b:f7:64:8e: 0e:6b:21:ce:78:3d:a5:ec:b9:92:a1:10:40:b0:7b: a9:6e:86:e2:5c:aa:00:4e:1a:12:ca:21:48:42:a6: b4:40:d1:49:37:38:eb:38:37:26:83:19:92:29:24: 0c:01:21:33:8d:14:21:ee:b4:e8:5a:62:72:a8:bf: e4:8b:5d:bf:9f:16:7b:e8:9d:64:44:86:ed:2b:6c: e5:ea:6e:12:af:94:2c:30:14:04:10:6e:1d:27:26: f4:0f:e6:91:6e:c6:27:ea:00:fb:fe:c8:b8:d2:f2: 16:d9:33:27:9c:4a:1f:5c:21:38:76:85:89:dc:b0: f8:bb:4c:09:71:f0:32:11:1f:d3:01:a6:e4:8e:53: ce:fd:bd:71:19:11:d3:43:77:8b:a2:d2:b3:c7:01: b6:26:16:cc:cb:af:1b:72:9a:58:73:43:3c:35:b2: 70:e4:57:f2:97:a7:8a:2b:bf:cc:40:2a:0f:76:0a: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:04:C0:C8:8D:0B:EE:4A:C8:68:08:11:9C:90:34:4A:2F:99:23:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:29:59:98:91:1a:7d:ac:f5:6b:b5:cc:3c:29:85:07:8c:bd: 44:29:e5:00:20:8c:53:56:93:42:0c:5c:58:4c:66:bf:5b:c1: d6:e7:ab:f0:a1:85:22:05:f3:a9:34:e7:e7:08:eb:40:b5:a0: be:1b:40:1e:90:46:47:90:4b:9e:f0:a7:0e:c2:36:fa:c8:3f: 42:8d:f9:88:bf:b2:bc:11:ec:27:6b:60:4a:f0:60:39:dd:25: 64:4c:60:89:58:3c:a4:ec:a9:65:16:37:80:7e:f5:74:25:9c: 6f:2e:8b:b3:c7:9b:73:9a:c0:43:81:71:9e:b5:a4:2d:06:32: 05:b8:f1:88:b0:d3:24:0c:92:1f:42:3c:e3:37:09:8b:52:69: b1:e8:88:f8:d2:f3:a9:8e:6f:40:59:11:fa:b3:e0:8c:88:35: 06:ec:ab:e6:a2:1b:df:cc:de:58:fd:36:a9:e0:64:f2:7b:de: a9:af:ce:c1:69:2e:c5:ec:53:57:27:92:f8:d8:6e:71:6a:e0: d2:8a:7c:e1:28:63:fb:4d:89:10:42:ad:c6:20:b0:92:8a:68: 10:8f:29:72:03:46:1e:e7:6a:de:8c:e1:5c:b7:78:bb:fe:86: 22:62:47:8a:c9:99:e8:ce:b0:cd:19:25:18:1f:71:b0:21:d1: 56:58:f8:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJw6XVcS/lEjpGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MGQwY2NmYTMtZWU0Ny00MjQ1LWJlMzAtNzEwOTkyYjE4YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLqG+0I8ktc4GNRjX3OdvpVyGCdiO+/sBx6i P8do+8vE/T2be1RrTizL4kNT+1Bv/QN9z0S7M7aIdyuTfp4hibxH6QKmWZv3ZI4O ayHOeD2l7LmSoRBAsHupbobiXKoAThoSyiFIQqa0QNFJNzjrODcmgxmSKSQMASEz jRQh7rToWmJyqL/ki12/nxZ76J1kRIbtK2zl6m4Sr5QsMBQEEG4dJyb0D+aRbsYn 6gD7/si40vIW2TMnnEofXCE4doWJ3LD4u0wJcfAyER/TAabkjlPO/b1xGRHTQ3eL otKzxwG2JhbMy68bcppYc0M8NbJw5Ffyl6eKK7/MQCoPdgqDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkEwMiNC+5KyGgIEZyQNEovmSMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvNDZmNGY4NGEtZjc0Ny0z Y2FhLWJiZDAtNzA1NzFjYmVkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMpWZiRGn2s9Wu1zDwphQeMvUQp5QAgjFNWk0IMXFhMZr9bwdbnq/Ch hSIF86k05+cI60C1oL4bQB6QRkeQS57wpw7CNvrIP0KN+Yi/srwR7CdrYErwYDnd JWRMYIlYPKTsqWUWN4B+9XQlnG8ui7PHm3OawEOBcZ61pC0GMgW48Yiw0yQMkh9C POM3CYtSabHoiPjS86mOb0BZEfqz4IyINQbsq+aiG9/M3lj9NqngZPJ73qmvzsFp LsXsU1cnkvjYbnFq4NKKfOEoY/tNiRBCrcYgsJKKaBCPKXIDRh7nat6M4Vy3eLv+ hiJiR4rJmejOsM0ZJRgfcbAh0VZY+Nc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:44 2026 by rpki-client