$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa File: 3cd4923c-6128-376c-8446-baffa366fd39.roa (raw, json) Hash identifier: o4nF8d1t+pz16aAlVR8HUCAMIpv5wwcksg6ZnSE/ciM= Subject key identifier: D1:F0:E8:A8:CD:46:CF:23:59:63:22:EE:46:86:52:B7:1E:C3:88:3F Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584FAF588FC541C556476C6C8C00 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa Signing time: Sat 31 Oct 2026 13:00:13 +0000 ROA not before: Sat 31 Oct 2026 13:00:13 +0000 ROA not after: Fri 29 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:58:8f:c5:41:c5:56:47:6c:6c:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Oct 31 13:00:13 2026 GMT Not After : Jan 29 14:00:13 2027 GMT Subject: CN=64c15ecb-a390-4585-84d6-c184b75468a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:c6:1f:e9:78:17:41:6f:ec:95:f7:7a:aa: 9a:ca:4d:19:52:31:b5:28:1e:ab:41:a9:d0:df:04: b3:3e:62:11:3f:a2:c1:65:9f:e9:2a:9a:11:51:b3: ca:bc:f4:a5:c1:d0:08:84:b6:ce:25:92:d1:38:a2: f4:d2:d7:e5:e7:fd:31:54:b6:ab:86:97:e9:25:0c: 6c:f9:83:2a:e1:8e:b2:fa:db:2b:34:53:8b:26:2a: 00:6d:ab:b0:87:3a:bb:11:b9:8b:7a:d4:de:2c:53: 86:bc:c1:5c:3e:b8:59:c9:0e:59:9c:40:c2:a3:8d: 02:c7:dc:6f:f5:f0:ee:20:36:e6:04:3e:80:ed:c8: c5:2f:9a:5b:44:72:d8:dd:7e:32:f6:02:8b:ff:b8: 79:f0:cb:32:4b:31:94:ea:8a:4e:e6:39:c1:fc:cc: 55:61:67:8a:e4:85:53:9c:38:09:12:b7:f1:ef:11: 8f:cf:f1:1e:dd:77:2e:70:ae:ae:5e:f8:0d:bc:7a: cc:68:a8:d1:5b:bd:61:cf:1f:3f:3a:8a:cf:ef:3c: 41:59:33:e4:aa:12:11:b2:3c:65:d7:0f:0f:ef:b7: 66:03:a0:95:93:b1:0d:7c:e9:56:1f:ad:88:44:b0: fe:22:eb:41:dc:7a:b2:06:20:d6:e4:c6:9a:99:fe: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F0:E8:A8:CD:46:CF:23:59:63:22:EE:46:86:52:B7:1E:C3:88:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:95:cb:bb:81:b7:fe:cf:37:eb:d0:68:4a:cb:3e:61:66:6f: 50:53:09:ac:0e:de:6d:59:22:d7:67:1e:09:ac:7f:60:3f:3f: 7e:de:07:40:54:77:0e:1b:25:7e:ec:3e:d2:d0:79:a7:db:27: 8f:18:66:4c:19:47:40:d1:72:5a:ed:4f:a9:6b:b3:38:2b:b7: 83:50:de:ae:e3:46:ef:d8:98:9b:f2:36:81:94:a2:32:7b:80: b7:26:41:46:b6:35:b4:57:9b:03:f5:6e:5f:8c:b4:43:69:52: 22:6f:15:09:81:1c:6a:fc:b0:10:52:52:31:c5:f6:b1:8f:df: 62:d6:d5:d7:92:36:ec:b1:de:06:ee:d2:a5:2f:cb:ae:b1:10: ca:a6:b3:63:ad:4b:3b:e1:95:9c:50:cf:5a:93:a4:16:9c:10: c7:56:a2:ac:47:cf:10:56:76:0a:b8:d1:6a:55:f2:b3:4e:1b: c9:92:b0:0c:f4:a2:b4:df:c2:39:4c:4f:93:71:06:ab:ce:7f: 6b:97:50:b8:38:96:e6:60:c5:a1:2a:47:4f:53:6d:d9:68:eb: 5f:10:b7:b7:c3:8d:e9:9b:f1:f8:c9:f1:9f:c1:d3:e3:e0:43: 30:98:cf:e7:cf:f3:9b:14:2e:f6:6a:8c:52:dd:2d:a7:d8:a2: a0:ec:4c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vWI/FQcVWR2xsjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk NjRjMTVlY2ItYTM5MC00NTg1LTg0ZDYtYzE4NGI3NTQ2OGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNzGH+l4F0Fv7JX3eqqayk0ZUjG1KB6rQanQ 3wSzPmIRP6LBZZ/pKpoRUbPKvPSlwdAIhLbOJZLROKL00tfl5/0xVLarhpfpJQxs +YMq4Y6y+tsrNFOLJioAbauwhzq7EbmLetTeLFOGvMFcPrhZyQ5ZnEDCo40Cx9xv 9fDuIDbmBD6A7cjFL5pbRHLY3X4y9gKL/7h58MsySzGU6opO5jnB/MxVYWeK5IVT nDgJErfx7xGPz/Ee3XcucK6uXvgNvHrMaKjRW71hzx8/OorP7zxBWTPkqhIRsjxl 1w8P77dmA6CVk7ENfOlWH62IRLD+IutB3HqyBiDW5Maamf40CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHw6KjNRs8jWWMi7kaGUrcew4g/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvM2NkNDkyM2MtNjEyOC0z NzZjLTg0NDYtYmFmZmEzNjZmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeVy7uBt/7PN+vQaErLPmFmb1BTCawO3m1ZItdnHgmsf2A/P37eB0BU dw4bJX7sPtLQeafbJ48YZkwZR0DRclrtT6lrszgrt4NQ3q7jRu/YmJvyNoGUojJ7 gLcmQUa2NbRXmwP1bl+MtENpUiJvFQmBHGr8sBBSUjHF9rGP32LW1deSNuyx3gbu 0qUvy66xEMqms2OtSzvhlZxQz1qTpBacEMdWoqxHzxBWdgq40WpV8rNOG8mSsAz0 orTfwjlMT5NxBqvOf2uXULg4luZgxaEqR09Tbdlo618Qt7fDjemb8fjJ8Z/B0+Pg QzCYz+fP85sULvZqjFLdLafYoqDsTOs= -----END CERTIFICATE-----Generated at Sun Nov 15 17:07:55 2026 by rpki-client