$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa File: 06aa229e-21d5-3132-8604-c88f6941821b.roa (raw, json) Hash identifier: /vEmDk3hB8g3MdFIu3rxLTMqTR+4/iU4+lf0uOswdqA= Subject key identifier: EB:8B:5F:48:AC:84:D1:68:30:C7:F0:3D:46:0A:F1:3F:9A:78:5B:9B Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584E921FA34583DCFAF7D44D2FC0 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 46432 IP address blocks: 208.88.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a3:45:83:dc:fa:f7:d4:4d:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=3124c2a4-f3d0-4463-9b2f-e94ff14fc6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:4d:4c:e1:e1:23:55:15:e3:64:e5:7a:c8: 4e:3f:78:c7:00:05:12:ee:ce:60:97:92:36:ef:d1: 02:e9:19:8b:8e:b2:c3:b2:e5:e3:d5:da:aa:8b:53: b6:4d:bc:f5:77:ab:5f:b4:88:5c:fd:e0:7a:dc:c3: bf:a3:9f:f1:95:f7:71:83:e6:3c:cc:93:95:28:8d: 57:00:42:c2:b6:bb:92:e8:ae:94:ae:71:37:36:2c: dd:0b:cd:af:25:37:ba:f9:f6:89:fb:82:92:09:06: 86:61:c0:20:ee:91:01:5d:4e:61:69:e6:21:1f:bc: 52:55:1b:e1:95:de:12:0c:4c:80:75:59:92:d6:06: c7:de:19:28:a5:16:53:a2:da:fd:b7:f7:58:1e:4f: 72:49:e4:2b:42:72:d8:36:e7:c4:7a:f0:56:7d:5d: 61:5c:b3:c4:35:8b:c1:17:cb:6f:65:16:e0:13:cc: c6:59:7c:d8:b8:8b:b8:77:82:4d:0a:ae:e5:f5:fe: b5:bc:fb:a6:7c:08:fb:19:57:ae:d3:e5:4c:36:46: cb:12:01:62:ff:01:46:52:27:13:33:8d:16:71:df: 0c:0f:44:da:95:8f:70:94:54:76:0e:4f:5d:f6:c6: e1:82:20:ca:5d:3e:42:6e:26:b5:e7:a7:c6:2a:2a: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8B:5F:48:AC:84:D1:68:30:C7:F0:3D:46:0A:F1:3F:9A:78:5B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:23:a3:b0:bf:ac:ba:49:17:7c:21:98:a9:6c:7c:d3:2b:c7: 34:2e:a9:9e:95:c4:b5:79:45:53:c1:ee:16:6d:01:ce:43:bc: e3:b7:e2:62:6b:71:a7:aa:09:36:db:94:91:2f:6f:f3:d3:ca: 32:5d:75:fa:a9:cd:69:4e:5a:03:2d:51:6f:fb:bb:be:5e:7e: 56:28:60:cf:75:33:01:59:d4:ea:82:d7:a2:f8:0b:3c:57:c1: 9f:a2:fb:0d:7a:00:69:f7:2f:3b:61:99:78:bc:90:14:2c:1e: fd:cf:cd:13:61:18:b7:b1:57:05:cc:1a:70:32:17:f9:72:ad: 64:22:88:86:b0:50:93:bd:86:09:ba:01:e8:4e:ba:fb:f3:f0: 6f:28:68:4f:3c:39:c0:18:57:4d:57:af:6b:c9:d7:fe:3f:7b: aa:9e:ad:78:f9:5a:b1:11:54:4f:fd:71:14:4e:aa:be:1e:7d: 49:b4:99:a4:f6:b8:ec:e6:87:c9:30:7f:3b:a6:88:07:9e:ed: 49:03:f4:09:6a:f3:9d:56:62:ac:91:a7:19:e9:2c:81:0e:16: 80:66:46:b6:ed:ea:80:44:69:0c:a8:a9:a9:93:3c:1f:24:cb: 28:6c:89:ab:04:4a:14:57:10:ca:6f:29:f7:a9:f0:d7:e1:3b: 2b:ec:00:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6NFg9z699RNL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk MzEyNGMyYTQtZjNkMC00NDYzLTliMmYtZTk0ZmYxNGZjNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW9NTOHhI1UV42TleshOP3jHAAUS7s5gl5I2 79EC6RmLjrLDsuXj1dqqi1O2Tbz1d6tftIhc/eB63MO/o5/xlfdxg+Y8zJOVKI1X AELCtruS6K6UrnE3NizdC82vJTe6+faJ+4KSCQaGYcAg7pEBXU5haeYhH7xSVRvh ld4SDEyAdVmS1gbH3hkopRZTotr9t/dYHk9ySeQrQnLYNufEevBWfV1hXLPENYvB F8tvZRbgE8zGWXzYuIu4d4JNCq7l9f61vPumfAj7GVeu0+VMNkbLEgFi/wFGUicT M40Wcd8MD0TalY9wlFR2Dk9d9sbhgiDKXT5Cbia156fGKirJHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuLX0ishNFoMMfwPUYK8T+aeFubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvMDZhYTIyOWUtMjFkNS0z MTMyLTg2MDQtYzg4ZjY5NDE4MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEjo7C/rLpJF3whmKlsfNMrxzQuqZ6VxLV5RVPB7hZtAc5DvOO34mJr caeqCTbblJEvb/PTyjJddfqpzWlOWgMtUW/7u75eflYoYM91MwFZ1OqC16L4CzxX wZ+i+w16AGn3LzthmXi8kBQsHv3PzRNhGLexVwXMGnAyF/lyrWQiiIawUJO9hgm6 AehOuvvz8G8oaE88OcAYV01Xr2vJ1/4/e6qerXj5WrERVE/9cRROqr4efUm0maT2 uOzmh8kwfzumiAee7UkD9Alq851WYqyRpxnpLIEOFoBmRrbt6oBEaQyoqamTPB8k yyhsiasEShRXEMpvKfep8NfhOyvsABY= -----END CERTIFICATE-----Generated at Fri Jul 24 14:38:26 2026 by rpki-client