$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa File: d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa (raw, json) Hash identifier: XACpRT5xKgLjOwesh85sxQNXSG1us7Fl19GOJHT2KQE= Subject key identifier: 3D:74:03:7E:98:39:9E:1F:C9:A0:C7:A9:24:A0:8A:C1:8C:00:7E:A5 Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Certificate serial: 010D0C9F4328584E48248DFF7107A86BC0747940 Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 17103 IP address blocks: 208.90.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:8d:ff:71:07:a8:6b:c0:74:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=1e01feae-c21a-40b2-b3a4-8b24fb20a864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:62:de:33:d4:93:e6:8f:f6:b2:a8:1b:65:d2: b3:fe:c1:8b:b0:b0:e7:bb:99:e2:5b:41:2a:54:e5: 50:20:19:5d:5d:4a:91:ed:83:6e:f3:d9:3b:50:e5: 09:68:b4:da:e4:36:de:81:42:69:f6:e3:83:24:f6: ba:96:a6:54:e8:6e:21:03:19:47:c2:10:80:5a:81: 50:d3:0d:ac:8f:18:33:5f:c3:36:ad:d6:58:a0:57: ef:86:f5:37:12:22:5b:b0:33:a2:c0:25:25:d4:31: 31:21:ad:6c:0e:b9:08:40:cb:be:34:6b:dd:c8:87: 1f:c3:5c:1c:be:ad:62:44:ef:0a:28:5a:ee:e9:af: 53:16:6c:e7:47:0c:4b:2d:c4:05:f9:82:a7:9f:d9: 25:ca:1e:a4:28:07:96:da:3d:b2:6a:ae:3c:cc:db: 0d:e5:99:30:8d:c4:b3:e6:df:4a:b1:e8:9a:9e:d9: 6d:3d:02:aa:6b:a9:ec:ff:d1:d3:9a:09:0b:94:66: 4e:0d:b1:3f:4f:73:77:24:e5:97:fb:95:9a:35:7d: 93:04:ae:d7:12:ea:91:0a:1a:27:41:23:0b:c9:9d: b8:53:62:c8:5e:2b:31:62:d9:f2:1b:3b:a1:4c:b6: 47:ce:bb:3c:c7:1f:56:12:82:95:88:da:19:3e:39: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:74:03:7E:98:39:9E:1F:C9:A0:C7:A9:24:A0:8A:C1:8C:00:7E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl X509v3 Authority Key Identifier: keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer sbgp-ipAddrBlock: critical IPv4: 208.90.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:42:39:4d:05:e1:de:62:67:56:e5:22:26:ea:47:7c:76:42: 33:20:d5:d4:ef:6b:a9:7e:ad:89:d3:b5:cc:6a:48:7a:5c:b6: 9a:41:cc:a0:2d:3d:37:3b:c1:82:03:d4:c9:fa:ce:1a:bf:2f: c5:56:44:c9:b1:f5:2b:01:77:53:dc:8a:03:3f:27:7f:33:01: b0:9b:de:50:9c:55:a0:97:47:35:d7:11:dd:e7:ae:4a:b0:fa: c2:05:0f:ed:46:3d:37:13:6d:85:d3:fa:9c:ac:5d:10:ce:7e: 6f:6b:44:59:28:60:77:48:2c:a9:dd:7a:65:3b:f1:41:85:ae: b5:ca:ed:7c:a4:43:c0:ea:a7:bc:68:51:06:8f:cc:d7:ac:d1: bd:3f:a9:1f:1c:a3:c2:80:04:a1:85:4a:90:2e:a9:3b:69:e0: 2d:7f:16:d4:31:a5:4a:1b:5b:f7:09:90:f4:55:6f:f5:ce:32: 65:95:a1:f8:71:b1:c3:52:cf:3c:1b:8d:8b:b4:b1:40:f9:77: c9:1f:f5:5a:30:04:fc:5f:fb:80:81:3b:ce:97:6f:96:63:d1: cd:23:2d:a4:22:23:9a:7e:28:af:95:f1:87:5a:96:97:fd:47: 76:fc:04:26:4d:b5:a9:d2:71:36:22:97:7b:aa:ab:51:58:b6: b2:d8:2c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJI3/cQeoa8B0eUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNk ZTE3MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk MWUwMWZlYWUtYzIxYS00MGIyLWIzYTQtOGIyNGZiMjBhODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGLeM9ST5o/2sqgbZdKz/sGLsLDnu5niW0Eq VOVQIBldXUqR7YNu89k7UOUJaLTa5DbegUJp9uODJPa6lqZU6G4hAxlHwhCAWoFQ 0w2sjxgzX8M2rdZYoFfvhvU3EiJbsDOiwCUl1DExIa1sDrkIQMu+NGvdyIcfw1wc vq1iRO8KKFru6a9TFmznRwxLLcQF+YKnn9klyh6kKAeW2j2yaq48zNsN5ZkwjcSz 5t9KseiantltPQKqa6ns/9HTmgkLlGZODbE/T3N3JOWX+5WaNX2TBK7XEuqRChon QSMLyZ24U2LIXisxYtnyGzuhTLZHzrs8xx9WEoKViNoZPjmsRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD10A36YOZ4fyaDHqSSgisGMAH6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNGIx MDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvZDNkZGIxOGYtNWVmNi0z ZmVhLWI4ZTYtZDM4MGU1MTNhMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzRiMTAwMGEtZGRkZS00NGE3LWFk OWMtMTJkMDQ5YWNkZTE3LzM0YjEwMDBhLWRkZGUtNDRhNy1hZDljLTEyZDA0OWFj ZGUxNy5jcmwwHwYDVR0jBBgwFoAUHuwP9vEdh6YT86HbKJO1hz7Ht4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQw NDlhY2RlMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdCOU0F4d5iZ1blIibqR3x2QjMg1dTva6l+rYnTtcxqSHpctppBzKAt PTc7wYID1Mn6zhq/L8VWRMmx9SsBd1PcigM/J38zAbCb3lCcVaCXRzXXEd3nrkqw +sIFD+1GPTcTbYXT+pysXRDOfm9rRFkoYHdILKndemU78UGFrrXK7XykQ8Dqp7xo UQaPzNes0b0/qR8co8KABKGFSpAuqTtp4C1/FtQxpUobW/cJkPRVb/XOMmWVofhx scNSzzwbjYu0sUD5d8kf9VowBPxf+4CBO86Xb5Zj0c0jLaQiI5p+KK+V8Ydalpf9 R3b8BCZNtanScTYil3uqq1FYtrLYLDE= -----END CERTIFICATE-----Generated at Fri Jul 24 03:48:18 2026 by rpki-client