$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa File: a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json) Hash identifier: SnFQBvNRD2FikCJsFzEPrWKpzs1WvR/Pjkud9HuFXIA= Subject key identifier: 09:FD:16:9A:D8:52:B6:78:C6:F6:E7:9A:20:47:7B:B7:75:CE:6B:A9 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584DB1DAC71DBDD7420FFAE7A4C0 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 46432 IP address blocks: 208.88.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:c7:1d:bd:d7:42:0f:fa:e7:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=1968f325-bc62-420d-807d-fefd3dfdc74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:e0:33:85:62:22:71:88:d0:7b:23:9e:eb: 1c:c6:e1:1b:10:6f:96:bc:ee:b2:a3:06:cc:55:92: 91:b1:b1:89:7b:98:d6:33:82:5b:18:00:ec:15:d5: c7:3f:1a:77:3b:6b:66:1b:c5:fb:7d:6d:f1:ca:4c: 4e:16:82:93:c8:0f:4b:4f:cc:e7:fe:45:7c:06:d1: c3:6d:33:99:5b:de:25:f1:25:e4:0b:02:53:38:3a: 27:68:ed:e5:f0:b9:73:7b:aa:9c:57:1e:02:84:53: 4c:7a:df:1f:f9:86:0a:a6:52:c0:7e:c1:80:42:3e: 05:1b:82:89:56:b2:a8:5e:c2:42:ae:fc:de:c3:89: 2f:3f:f0:0c:49:8a:1b:7a:3e:f4:58:22:3e:b6:c3: be:42:9e:27:91:6d:ee:26:a2:89:ce:0f:69:29:47: ce:cb:ff:e0:13:db:07:f4:55:c3:43:78:c1:05:e2: 25:4a:48:41:db:02:63:2c:75:7f:89:77:b1:9a:47: 3d:11:a7:22:72:4d:95:7f:1b:4d:10:b4:b8:1b:b9: 81:f9:cc:05:fb:85:cf:7a:fb:84:61:95:b4:59:40: b2:ad:0a:16:61:50:4e:68:36:ca:6b:94:70:36:fd: 6f:94:33:23:9a:21:08:33:d9:2b:af:04:8e:5d:36: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FD:16:9A:D8:52:B6:78:C6:F6:E7:9A:20:47:7B:B7:75:CE:6B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b6:b1:6f:27:51:ac:4f:3b:ce:85:99:6a:f3:49:a6:28:09: c2:f9:80:1f:6c:87:49:ac:dd:a3:8b:19:a8:3c:c6:a9:fc:b8: 28:86:01:c5:9a:3b:92:b3:ba:c4:52:4d:17:77:e3:4f:43:c5: ed:32:b6:ea:5f:24:ef:48:1d:2b:4d:30:9f:06:bf:9d:2f:ac: ae:80:0c:c0:0d:18:08:84:c6:46:2c:22:cf:04:e4:e1:53:2d: c6:45:33:64:ac:06:49:f3:90:4e:51:1e:3c:e4:6a:46:9e:95: 76:d5:87:50:01:47:28:71:97:17:e7:67:45:6b:e9:8c:39:f7: 94:25:89:fa:95:a1:72:b4:e6:c1:db:53:d4:a8:e1:72:16:91: d7:e1:e8:fc:b1:d0:f0:f3:82:4f:c0:d7:29:3e:82:99:83:67: 00:d6:9d:42:a4:52:21:7b:b9:36:50:e0:05:32:d5:b9:e3:97: 19:af:d2:a9:51:26:2e:59:0d:82:8d:57:a8:69:60:de:0b:8a: 49:ea:19:6c:d8:eb:b1:a2:63:84:1e:c7:4b:fb:57:5a:5c:35: d4:f2:4e:8d:19:32:f7:72:36:b7:db:c4:89:21:9a:f6:d7:dd: 8c:29:9a:ba:bb:4e:2f:d6:8f:98:49:a4:85:53:04:80:6b:94: 30:cc:41:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2scdvddCD/rnpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk MTk2OGYzMjUtYmM2Mi00MjBkLTgwN2QtZmVmZDNkZmRjNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU3gM4ViInGI0HsjnuscxuEbEG+WvO6yowbM VZKRsbGJe5jWM4JbGADsFdXHPxp3O2tmG8X7fW3xykxOFoKTyA9LT8zn/kV8BtHD bTOZW94l8SXkCwJTODonaO3l8Llze6qcVx4ChFNMet8f+YYKplLAfsGAQj4FG4KJ VrKoXsJCrvzew4kvP/AMSYobej70WCI+tsO+Qp4nkW3uJqKJzg9pKUfOy//gE9sH 9FXDQ3jBBeIlSkhB2wJjLHV/iXexmkc9Eacick2VfxtNELS4G7mB+cwF+4XPevuE YZW0WUCyrQoWYVBOaDbKa5RwNv1vlDMjmiEIM9krrwSOXTbPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn9FprYUrZ4xvbnmiBHe7d1zmupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTk0M2E2MmUtOGFmNC0z NzI4LWFjMjEtZGI5NThiNTMxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG2sW8nUaxPO86FmWrzSaYoCcL5gB9sh0ms3aOLGag8xqn8uCiGAcWa O5KzusRSTRd3409Dxe0ytupfJO9IHStNMJ8Gv50vrK6ADMANGAiExkYsIs8E5OFT LcZFM2SsBknzkE5RHjzkakaelXbVh1ABRyhxlxfnZ0Vr6Yw595QlifqVoXK05sHb U9So4XIWkdfh6Pyx0PDzgk/A1yk+gpmDZwDWnUKkUiF7uTZQ4AUy1bnjlxmv0qlR Ji5ZDYKNV6hpYN4LiknqGWzY67GiY4Qex0v7V1pcNdTyTo0ZMvdyNrfbxIkhmvbX 3Ywpmrq7Ti/Wj5hJpIVTBIBrlDDMQU4= -----END CERTIFICATE-----Generated at Wed May 13 13:37:41 2026 by rpki-client