$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa File: 90a9dec8-a24a-3de0-9901-58e74af63e3e.roa (raw, json) Hash identifier: xj/nI6z99t4Ht0LNkw97ov34DFd4i2ru7QVXZ7r99t0= Subject key identifier: B2:2D:DA:81:BA:9F:61:0A:00:3A:C9:E0:B9:4C:6B:E4:74:BB:D6:9B Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584D4A8F9E82DBEB957470F7A680 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 22147 IP address blocks: 208.118.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9e:82:db:eb:95:74:70:f7:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=a194c023-9948-46d6-a689-d1add6bfefd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:9b:29:97:c7:57:b3:ae:69:df:fc:d0:a5: 11:9a:63:7b:0d:c3:d9:d0:bf:1a:8b:24:1f:1c:8e: 62:fc:e1:ee:5e:6b:35:36:c0:6a:bc:4d:2b:6d:02: a4:96:4c:19:73:2d:7f:e8:b3:e1:a3:49:04:84:f8: 63:1d:93:4b:8d:f4:d6:88:d1:da:ff:4a:09:d4:b5: fb:53:50:ee:1d:35:1c:be:20:a1:39:64:0a:6c:05: e5:d5:6f:30:85:fd:4b:18:eb:ea:58:68:9b:89:6b: d3:87:fe:2d:25:0c:76:a2:2a:4c:85:12:c1:eb:84: f7:c7:ad:9d:b6:f8:00:f4:45:5e:28:1e:28:8a:24: 71:74:2a:f0:85:01:f4:cd:9a:7c:be:7f:b0:c0:c4: eb:d1:ce:ab:f9:c4:6a:37:52:c0:a5:a5:11:cf:73: b7:d5:2a:db:fc:39:43:aa:02:82:56:a8:f4:6e:eb: ff:d4:c0:07:b7:db:89:2e:a8:1e:bc:1b:12:4f:f6: d3:f8:af:3e:5e:05:40:7e:97:61:a2:b6:10:84:50: 25:26:f0:df:c2:68:e4:58:a7:a7:b7:23:47:d5:d0: 18:9a:cf:c4:fc:f3:4b:6b:27:2d:cd:4d:7e:7f:c6: 7f:ce:1b:26:98:4b:a6:b0:e9:f9:50:53:17:74:93: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2D:DA:81:BA:9F:61:0A:00:3A:C9:E0:B9:4C:6B:E4:74:BB:D6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a2:7b:65:bc:ad:67:c6:b1:46:08:c3:85:92:88:2c:58:70: d7:e4:09:e7:a4:36:e8:d9:e9:f7:03:8a:92:0f:d0:38:f3:d0: 66:bb:40:9d:7d:32:e3:1e:07:30:13:49:49:ce:4e:63:d1:44: 6d:6c:b2:d6:9b:98:a1:6a:f8:34:9a:08:e0:77:39:1b:34:cc: 20:0f:84:f6:32:c2:35:3b:58:fc:20:fa:62:64:35:c5:4d:9e: 70:c2:79:bc:13:b4:a9:fb:c3:e6:b7:bd:01:d0:25:91:5d:d7: e9:97:35:6a:87:d0:0b:8c:a8:2e:c4:1d:94:75:92:64:6d:8d: 1a:62:07:ac:f3:0d:09:72:97:c0:09:3e:38:30:0c:ec:1e:d8: ba:9d:d4:a0:4a:35:05:84:76:32:27:d3:03:bd:68:c6:90:4a: c9:c5:5d:e7:ee:bf:8d:95:1d:55:3a:3e:14:1a:8f:94:7e:52: 61:93:1a:c0:1b:a1:c1:1d:ee:a8:52:aa:9a:68:5b:d0:bf:02: 66:2f:bc:30:9b:7a:5a:07:77:36:3c:a0:20:da:33:83:1e:7b: 3a:57:b8:64:eb:92:c5:6d:38:37:5a:fb:e5:90:9d:8c:6d:e7: 35:41:0e:32:85:3c:e9:6c:09:9f:0f:37:88:2d:76:f0:12:99: 30:ac:d4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj56C2+uVdHD3poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk YTE5NGMwMjMtOTk0OC00NmQ2LWE2ODktZDFhZGQ2YmZlZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj56bKZfHV7Ouad/80KURmmN7DcPZ0L8aiyQf HI5i/OHuXms1NsBqvE0rbQKklkwZcy1/6LPho0kEhPhjHZNLjfTWiNHa/0oJ1LX7 U1DuHTUcviChOWQKbAXl1W8whf1LGOvqWGibiWvTh/4tJQx2oipMhRLB64T3x62d tvgA9EVeKB4oiiRxdCrwhQH0zZp8vn+wwMTr0c6r+cRqN1LApaURz3O31Srb/DlD qgKCVqj0buv/1MAHt9uJLqgevBsST/bT+K8+XgVAfpdhorYQhFAlJvDfwmjkWKen tyNH1dAYms/E/PNLayctzU1+f8Z/zhsmmEumsOn5UFMXdJOr+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIt2oG6n2EKADrJ4LlMa+R0u9abMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTBhOWRlYzgtYTI0YS0z ZGUwLTk5MDEtNThlNzRhZjYzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqie2W8rWfGsUYIw4WSiCxYcNfkCeekNujZ6fcDipIP0Djz0Ga7QJ19 MuMeBzATSUnOTmPRRG1sstabmKFq+DSaCOB3ORs0zCAPhPYywjU7WPwg+mJkNcVN nnDCebwTtKn7w+a3vQHQJZFd1+mXNWqH0AuMqC7EHZR1kmRtjRpiB6zzDQlyl8AJ PjgwDOwe2Lqd1KBKNQWEdjIn0wO9aMaQSsnFXefuv42VHVU6PhQaj5R+UmGTGsAb ocEd7qhSqppoW9C/AmYvvDCbeloHdzY8oCDaM4MeezpXuGTrksVtODda++WQnYxt 5zVBDjKFPOlsCZ8PN4gtdvASmTCs1NI= -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:03 2026 by rpki-client