$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa File: e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa (raw, json) Hash identifier: prJoSdqCWigCGmLJiJTwxIq+uIXIabD9wJT+NW7wQzk= Subject key identifier: D2:8F:26:A8:96:4D:B0:92:FF:93:A8:62:60:AA:5B:1E:AF:AE:EA:5D Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Certificate serial: 010D0C9F4328584D5B4FA218F220ED230FA16B80 Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 26383 IP address blocks: 207.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a2:18:f2:20:ed:23:0f:a1:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=421d0aa9-7bf0-415d-ac1b-0d25468abc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:e7:62:da:61:4f:cb:66:e3:c5:ab:fc:b9: f2:00:fd:25:31:db:d6:be:79:9b:01:a5:2f:a3:e2: 8c:1d:1d:a8:9c:dd:30:f1:f6:30:c5:20:dc:cb:46: ac:8f:3a:1a:9a:30:da:87:45:ee:67:e6:e4:cc:1b: 6d:10:a6:0c:92:6c:f3:b7:3f:45:ce:2b:ad:e3:5a: 19:ef:8a:39:dc:ec:0f:9c:83:39:ee:61:25:92:0f: 13:29:46:8a:c3:1f:fb:ac:0b:ba:cd:11:0b:04:d8: 6d:03:36:4c:9b:17:2a:83:b7:5d:fc:c8:37:6e:4e: 3b:a1:2d:d9:87:c4:3b:54:84:8a:4e:d9:e3:3a:b4: 71:2e:15:4e:1b:bc:91:fe:be:ca:09:38:69:3f:fa: 81:be:4e:5b:8d:af:e2:a9:26:be:37:e1:4e:21:df: 35:0d:0e:51:53:34:b2:ed:4d:0d:67:c5:9f:74:18: 08:44:85:e3:2a:26:b1:03:38:b1:d4:0f:67:cd:e3: 8d:e6:5d:0e:c7:87:b5:47:2a:8f:05:ec:80:39:19: d6:72:cf:70:06:19:ba:59:19:c3:d2:73:23:e1:fe: 8e:ab:08:bd:3c:e9:8c:2e:1d:7e:e2:54:78:c7:a5: 65:e9:9e:8a:bc:be:08:81:bc:f8:f2:5e:eb:49:e4: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8F:26:A8:96:4D:B0:92:FF:93:A8:62:60:AA:5B:1E:AF:AE:EA:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl X509v3 Authority Key Identifier: keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer sbgp-ipAddrBlock: critical IPv4: 207.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:9e:22:0c:a4:11:65:d4:2f:c7:9b:13:6b:46:54:54:3c:9c: ad:d9:3d:14:ad:b5:15:84:9e:d0:0a:cd:c1:54:04:01:f3:bb: 4e:c0:a5:69:79:81:60:ce:94:ca:2b:bf:41:f0:c7:d0:00:96: bc:a9:1a:63:28:8f:a9:e8:5e:bd:4d:58:d0:43:38:77:01:71: c9:8f:4f:ac:8f:a7:60:96:66:bd:f8:82:bd:b4:e1:9b:6c:a7: f6:f0:8c:07:0d:51:ec:79:e2:8b:c6:50:f8:1f:c6:15:ea:10: 61:9b:f9:1e:cc:8f:04:79:b9:c9:5a:62:68:2f:bd:af:3a:02: 75:11:6d:ae:96:84:88:73:b5:bb:c9:21:ec:4d:01:bc:d6:0b: 6d:a5:0d:53:c4:66:b8:0a:78:2e:43:e6:4c:a6:5e:3d:0c:00: e8:07:18:24:da:3c:2c:be:85:13:62:c7:fa:41:60:eb:5d:82: ae:af:65:f8:d4:f1:6a:cc:67:e4:00:d7:39:6b:33:2e:70:10: 47:2f:0f:43:1c:4e:8a:3a:c2:6f:55:73:84:fa:0d:80:54:01: 2b:f1:73:0c:9a:23:12:83:3a:09:27:87:7e:cc:d8:c1:84:ce: a4:61:05:37:7d:ad:ce:be:f7:ed:d7:55:25:2d:76:60:bf:0c: 7e:2c:ab:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6IY8iDtIw+ha4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4 ZjgxMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NDIxZDBhYTktN2JmMC00MTVkLWFjMWItMGQyNTQ2OGFiYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/LnYtphT8tm48Wr/LnyAP0lMdvWvnmbAaUv o+KMHR2onN0w8fYwxSDcy0asjzoamjDah0XuZ+bkzBttEKYMkmzztz9Fziut41oZ 74o53OwPnIM57mElkg8TKUaKwx/7rAu6zRELBNhtAzZMmxcqg7dd/Mg3bk47oS3Z h8Q7VISKTtnjOrRxLhVOG7yR/r7KCThpP/qBvk5bja/iqSa+N+FOId81DQ5RUzSy 7U0NZ8WfdBgIRIXjKiaxAzix1A9nzeON5l0Ox4e1RyqPBeyAORnWcs9wBhm6WRnD 0nMj4f6Oqwi9POmMLh1+4lR4x6Vl6Z6KvL4Igbz48l7rSeQ+7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKPJqiWTbCS/5OoYmCqWx6vrupdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvZTk5ODZlNGItZDU0OC0z ZThiLTk5NWYtYWU2MjNlNWQwNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5 OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy ZDA4OThmODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1ruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOeIgykEWXUL8ebE2tGVFQ8nK3ZPRSttRWEntAKzcFUBAHzu07ApWl5 gWDOlMorv0Hwx9AAlrypGmMoj6noXr1NWNBDOHcBccmPT6yPp2CWZr34gr204Zts p/bwjAcNUex54ovGUPgfxhXqEGGb+R7MjwR5uclaYmgvva86AnURba6WhIhztbvJ IexNAbzWC22lDVPEZrgKeC5D5kymXj0MAOgHGCTaPCy+hRNix/pBYOtdgq6vZfjU 8WrMZ+QA1zlrMy5wEEcvD0McToo6wm9Vc4T6DYBUASvxcwyaIxKDOgknh37M2MGE zqRhBTd9rc6+9+3XVSUtdmC/DH4sq0E= -----END CERTIFICATE-----Generated at Fri Apr 17 10:36:42 2026 by rpki-client