$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa File: a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json) Hash identifier: LP8q1OKteaNSzQlQXsI8fkDEFdZXrPzEjBC8y/tuP2Q= Subject key identifier: C4:EA:F4:0A:D9:35:16:32:6E:9F:03:B2:36:62:EC:6C:0F:F8:C9:E3 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584E921FA0B1429858A8D4878200 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 46432 IP address blocks: 208.88.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a0:b1:42:98:58:a8:d4:87:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=799c322f-bf77-4337-8d3a-74bb1ec017bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b9:62:fb:d1:39:c7:6a:e0:a3:f7:b5:f1:ee: 82:37:bc:12:9f:74:d8:28:86:b9:f4:28:5b:34:23: 14:35:b7:72:fd:4f:e4:ea:e8:6e:dd:8a:37:ec:eb: 66:a7:05:99:49:28:69:54:21:28:c4:28:17:bc:88: 47:ee:dd:a8:f3:ba:4f:81:6c:e8:3a:38:76:95:e7: cb:b9:70:6e:5c:22:12:1d:3a:d6:c2:a9:9d:f5:2f: ba:8b:3a:ba:72:0b:93:b3:d1:b2:cd:db:52:54:52: e1:d6:43:d9:ff:79:53:50:51:e6:9e:14:8d:14:3f: a3:4e:6a:3f:52:09:b1:15:ec:49:3b:8b:18:7c:5f: d4:ce:1d:f6:b5:02:88:8b:6e:cc:8b:d6:56:e6:98: bc:10:bb:c4:a3:be:74:e4:22:ff:c0:27:3c:77:9c: c5:b4:3c:8f:c5:b9:76:d5:9c:bf:b2:ed:34:1f:08: c1:ec:d4:fb:ad:0c:de:43:21:b7:d9:e8:cd:a8:e4: 20:12:e3:c7:d6:46:ce:17:ab:b6:d8:79:e0:06:1d: 44:0d:da:5e:d7:8c:87:84:75:f7:bd:1d:6c:fc:66: 06:38:51:c3:ed:f7:c5:29:30:de:77:6f:40:85:32: 67:05:c3:e1:98:1d:24:f3:e3:d0:c0:82:f6:65:66: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:F4:0A:D9:35:16:32:6E:9F:03:B2:36:62:EC:6C:0F:F8:C9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:38:fa:e0:da:e9:de:f2:3f:5a:8a:3e:1e:e1:fe:bd:55:5e: c5:bd:ce:40:89:f0:a0:77:41:62:e5:e8:45:ef:69:07:d0:fd: 36:c4:c6:4c:f3:83:e7:db:d6:00:7e:12:67:ba:58:e6:1a:15: 8f:a9:9d:be:0f:87:55:8e:fb:a7:1d:b6:fd:c7:c8:66:32:8b: 40:22:9f:76:3c:f0:c1:3f:17:b9:dc:9e:6b:2a:49:3b:60:79: 5e:70:18:de:49:f9:e0:26:ac:ec:4e:ca:2a:ca:d3:76:b2:19: e7:01:ae:10:fa:9a:41:d3:5a:a9:13:fc:ab:b5:4b:30:ee:95: 50:36:a7:8d:ba:b2:07:42:1e:a7:37:89:de:d4:5c:f1:e9:d4: 15:10:18:43:6c:42:1e:8f:d7:72:64:58:98:54:7e:60:47:2c: 93:3a:93:54:de:da:5b:49:ac:8d:c6:04:cc:84:ef:e7:74:2d: 46:32:76:af:27:12:e0:cc:e4:37:7b:e1:d1:95:9f:33:72:4f: ff:4e:79:61:f2:85:4e:5a:16:10:c9:92:fb:16:54:25:85:cd: c9:a5:8e:db:51:2c:85:57:e4:98:d5:2a:a7:37:6e:89:96:fc: 5b:7c:6d:15:8d:13:2b:6d:9c:f2:e5:76:fe:e2:e2:29:39:f5: 9c:e5:6a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6CxQphYqNSHggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk Nzk5YzMyMmYtYmY3Ny00MzM3LThkM2EtNzRiYjFlYzAxN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07li+9E5x2rgo/e18e6CN7wSn3TYKIa59Chb NCMUNbdy/U/k6uhu3Yo37OtmpwWZSShpVCEoxCgXvIhH7t2o87pPgWzoOjh2lefL uXBuXCISHTrWwqmd9S+6izq6cguTs9GyzdtSVFLh1kPZ/3lTUFHmnhSNFD+jTmo/ UgmxFexJO4sYfF/Uzh32tQKIi27Mi9ZW5pi8ELvEo7505CL/wCc8d5zFtDyPxbl2 1Zy/su00HwjB7NT7rQzeQyG32ejNqOQgEuPH1kbOF6u22HngBh1EDdpe14yHhHX3 vR1s/GYGOFHD7ffFKTDed29AhTJnBcPhmB0k8+PQwIL2ZWZicQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTq9ArZNRYybp8DsjZi7GwP+MnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTk0M2E2MmUtOGFmNC0z NzI4LWFjMjEtZGI5NThiNTMxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA84+uDa6d7yP1qKPh7h/r1VXsW9zkCJ8KB3QWLl6EXvaQfQ/TbExkzz g+fb1gB+Eme6WOYaFY+pnb4Ph1WO+6cdtv3HyGYyi0Ain3Y88ME/F7ncnmsqSTtg eV5wGN5J+eAmrOxOyirK03ayGecBrhD6mkHTWqkT/Ku1SzDulVA2p426sgdCHqc3 id7UXPHp1BUQGENsQh6P13JkWJhUfmBHLJM6k1Te2ltJrI3GBMyE7+d0LUYydq8n EuDM5Dd74dGVnzNyT/9OeWHyhU5aFhDJkvsWVCWFzcmljttRLIVX5JjVKqc3bomW /Ft8bRWNEyttnPLldv7i4ik59Zzlaos= -----END CERTIFICATE-----Generated at Fri Jul 24 14:02:19 2026 by rpki-client