$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa File: a0241a87-ee63-3ca4-8762-01bd022707da.roa (raw, json) Hash identifier: 8OlEwfdVSiv5hpAB0P44J2097+8LKqNMs1F3aqzZT6w= Subject key identifier: A4:FC:E2:54:C3:38:DD:FF:21:87:00:4D:1F:A9:21:F3:32:E8:2C:53 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584DC8304404738A668435498500 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 8075 IP address blocks: 208.90.236.0/24 maxlen: 24 208.90.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:44:04:73:8a:66:84:35:49:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=f31d1c26-ea11-4767-9661-c2381fae2548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:ee:53:0a:da:8f:de:c1:52:e6:07:88:6e: 47:4e:0b:ac:fa:3c:fa:18:ea:6f:3b:f5:4b:ca:b3: 5c:65:73:64:7b:72:53:1a:43:b7:a8:0b:e2:d0:35: e1:32:6f:75:db:16:93:b6:31:c5:63:bb:f0:12:88: 78:71:4b:8e:75:71:92:54:bd:04:37:c5:bf:7e:5b: ff:39:ae:06:cb:cf:c0:a9:ca:51:99:62:13:2a:8b: ea:ba:fd:40:4e:fa:53:1c:96:cb:cc:37:b4:cd:33: a1:1c:c6:18:b9:5e:a5:4e:39:d8:39:5b:1a:74:2f: 66:e1:07:4d:72:b9:8b:97:54:87:22:72:94:ab:b3: 48:16:bc:f9:6e:41:09:5c:2c:26:c3:d1:12:e4:c8: eb:6f:3a:9c:7c:2f:00:3e:21:5a:d5:47:8b:0a:35: e9:10:73:e6:d0:97:d4:47:e1:ee:c2:aa:a7:6a:96: 98:0e:02:5d:95:8f:1f:72:85:d0:e2:f3:d8:50:ef: 67:cf:52:fd:b6:a8:d3:fc:e5:8f:d7:b7:b7:1f:99: f7:58:72:33:43:e5:f0:02:a1:55:69:89:63:89:f0: fd:6f:c5:b4:51:33:8d:9f:89:e2:8a:82:01:c8:ed: c5:fa:b5:a6:8d:e8:9e:cd:8d:5e:87:c7:d6:d9:eb: f4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FC:E2:54:C3:38:DD:FF:21:87:00:4D:1F:A9:21:F3:32:E8:2C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f0:f8:9f:9f:fc:6a:65:dd:fd:5d:7e:bf:1e:89:dd:0c:d4: 6c:18:16:cb:6e:2c:7b:98:28:42:f0:8e:7b:a2:29:3d:7d:ab: 88:d9:ff:c3:b9:b8:94:b9:56:ea:4d:9d:57:b7:0c:25:5a:7e: c5:ed:37:01:55:d0:8a:89:87:5e:e1:1d:2f:02:15:64:08:4e: 86:9c:d4:1c:18:e8:fc:4c:46:c1:77:14:5d:98:a0:b4:04:7a: 8c:57:db:02:d8:75:48:7f:e0:8d:c5:30:2d:43:ac:de:08:77: e0:86:18:01:e0:41:91:34:ec:08:80:19:33:21:d3:30:01:db: de:88:70:b8:0c:2d:7c:27:a9:d1:ec:7e:fc:9e:66:d0:56:0e: d8:d7:61:6f:8e:98:18:77:94:fb:15:e3:97:e2:92:6e:66:df: 3e:35:21:e1:3d:6a:b9:57:55:84:76:1c:f9:7f:90:4d:d7:76: fc:ed:7f:46:a5:26:32:b8:eb:05:ff:6d:c9:d4:23:03:f4:1e: c5:4b:be:e7:48:62:46:b6:54:40:e8:4e:1c:40:4a:4e:ac:28: dc:19:93:be:df:65:44:ba:2d:d1:db:30:76:e8:53:95:65:38: 51:8d:b0:f1:5e:fd:93:7d:29:aa:ec:7a:01:60:c1:04:26:d4: f4:1e:9f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMEQEc4pmhDVJhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk ZjMxZDFjMjYtZWExMS00NzY3LTk2NjEtYzIzODFmYWUyNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQPuUwraj97BUuYHiG5HTgus+jz6GOpvO/VL yrNcZXNke3JTGkO3qAvi0DXhMm912xaTtjHFY7vwEoh4cUuOdXGSVL0EN8W/flv/ Oa4Gy8/AqcpRmWITKovquv1ATvpTHJbLzDe0zTOhHMYYuV6lTjnYOVsadC9m4QdN crmLl1SHInKUq7NIFrz5bkEJXCwmw9ES5MjrbzqcfC8APiFa1UeLCjXpEHPm0JfU R+HuwqqnapaYDgJdlY8fcoXQ4vPYUO9nz1L9tqjT/OWP17e3H5n3WHIzQ+XwAqFV aYljifD9b8W0UTONn4niioIByO3F+rWmjeiezY1eh8fW2ev0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT84lTDON3/IYcATR+pIfMy6CxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvYTAyNDFhODctZWU2My0z Y2E0LTg3NjItMDFiZDAyMjcwN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADw+J+f/Gpl3f1dfr8eid0M1GwYFstuLHuYKELwjnuiKT19q4jZ/8O5 uJS5VupNnVe3DCVafsXtNwFV0IqJh17hHS8CFWQIToac1BwY6PxMRsF3FF2YoLQE eoxX2wLYdUh/4I3FMC1DrN4Id+CGGAHgQZE07AiAGTMh0zAB296IcLgMLXwnqdHs fvyeZtBWDtjXYW+OmBh3lPsV45fikm5m3z41IeE9arlXVYR2HPl/kE3Xdvztf0al JjK46wX/bcnUIwP0HsVLvudIYka2VEDoThxASk6sKNwZk77fZUS6LdHbMHboU5Vl OFGNsPFe/ZN9KarsegFgwQQm1PQen2Y= -----END CERTIFICATE-----Generated at Wed May 13 07:04:25 2026 by rpki-client