$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa File: 3cd4923c-6128-376c-8446-baffa366fd39.roa (raw, json) Hash identifier: X+o06w9sMvdDmO4rR+lNDYniEaS6mo+WxBtJOuST9Yg= Subject key identifier: 4E:E9:30:EE:D7:50:8B:F6:87:26:C6:18:70:E1:01:FD:62:6F:5F:54 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584E6B0A1291D820F24100854D88 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:12:91:d8:20:f2:41:00:85:4d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=8f13ca89-b651-44d8-adfe-a4a4a08bc8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cd:cd:71:38:43:32:21:f8:5a:0c:13:8f:4e: 9a:32:70:97:0a:8d:e5:8f:ec:54:51:b6:be:e6:de: 0f:22:18:0a:e1:54:a2:e6:71:ba:2c:1c:03:c9:f6: ba:d7:45:d5:8b:7a:26:1c:c3:f9:b0:1c:0c:1f:86: 9f:52:61:58:68:b2:39:4a:86:ea:ea:32:fd:36:01: f4:44:b1:3d:a1:35:ee:a3:a6:97:af:41:32:bc:65: db:97:1e:20:28:6e:12:60:ea:63:d0:42:56:4b:f6: 9e:bb:d6:a3:b6:64:04:54:da:87:f6:8b:63:d8:7e: 21:ac:ea:b1:ce:7b:19:64:ca:13:09:69:13:f6:b7: 5e:e5:0d:f0:cf:53:19:7b:82:6e:9e:39:1b:54:05: 3c:41:12:69:b4:8b:39:6b:ce:fd:d1:01:31:b5:c5: c0:20:2b:73:a7:f8:72:99:91:c3:29:f2:4f:47:3d: 2f:a8:43:86:60:a2:e8:d8:f1:0f:a4:25:c7:4e:db: 71:e2:13:5e:49:b5:61:51:28:d6:8c:72:0d:d5:a1: 1d:95:a6:66:19:fb:ce:23:43:4b:93:46:e5:41:de: 3f:fd:3c:12:91:46:cf:7e:09:92:99:1d:14:3b:2b: c8:52:51:c0:dd:5b:86:cc:13:62:3b:09:c2:b7:a2: 1a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E9:30:EE:D7:50:8B:F6:87:26:C6:18:70:E1:01:FD:62:6F:5F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ab:e1:a4:ff:da:ad:e8:c0:1f:f0:85:cb:ce:f1:ac:e6:17: 0f:b2:61:3e:73:93:4a:f5:70:74:de:a5:55:fb:83:ad:c4:c5: 55:94:13:f8:3b:2c:8f:07:2d:6e:c6:ed:f6:11:2a:bf:de:bc: 26:7a:b6:1e:00:26:be:9c:d9:46:d1:4f:f8:dc:82:f8:fc:30: 39:58:65:d3:fb:e4:ac:4b:7b:e9:45:08:28:57:48:0c:a9:b5: b5:2a:d2:32:db:3d:b0:c2:39:85:84:ca:4b:e3:13:fa:41:13: 2d:f8:2e:91:0b:39:38:8b:a0:dc:85:29:0d:e9:a9:d9:8f:b2: 88:e5:bb:04:9d:4a:d6:58:e7:09:ec:34:e2:a6:04:6b:9c:07: 46:56:6a:dc:b4:ca:c2:39:c7:9e:99:f0:63:91:3c:44:0f:b6: 6b:e5:40:22:da:fb:08:0b:af:2f:c1:a3:1a:3f:70:05:e7:23: d4:67:ee:26:9b:0d:c9:f8:d7:d5:0a:a9:3e:51:1c:f9:bd:13: 4a:e8:35:d2:61:4c:e4:08:bc:9f:0d:5f:e3:a3:fb:9b:ff:a7: 3f:b8:73:fe:5f:aa:b3:68:3b:16:7c:38:5b:83:37:4a:67:aa: 13:95:b3:ba:be:ba:f9:e6:b0:b8:a1:64:f9:a1:be:a5:3b:6f: be:a1:53:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChKR2CDyQQCFTYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk OGYxM2NhODktYjY1MS00NGQ4LWFkZmUtYTRhNGEwOGJjOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs3NcThDMiH4WgwTj06aMnCXCo3lj+xUUba+ 5t4PIhgK4VSi5nG6LBwDyfa610XVi3omHMP5sBwMH4afUmFYaLI5Sobq6jL9NgH0 RLE9oTXuo6aXr0EyvGXblx4gKG4SYOpj0EJWS/aeu9ajtmQEVNqH9otj2H4hrOqx znsZZMoTCWkT9rde5Q3wz1MZe4JunjkbVAU8QRJptIs5a8790QExtcXAICtzp/hy mZHDKfJPRz0vqEOGYKLo2PEPpCXHTttx4hNeSbVhUSjWjHIN1aEdlaZmGfvOI0NL k0blQd4//TwSkUbPfgmSmR0UOyvIUlHA3VuGzBNiOwnCt6IazQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7pMO7XUIv2hybGGHDhAf1ib19UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvM2NkNDkyM2MtNjEyOC0z NzZjLTg0NDYtYmFmZmEzNjZmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmr4aT/2q3owB/whcvO8azmFw+yYT5zk0r1cHTepVX7g63ExVWUE/g7 LI8HLW7G7fYRKr/evCZ6th4AJr6c2UbRT/jcgvj8MDlYZdP75KxLe+lFCChXSAyp tbUq0jLbPbDCOYWEykvjE/pBEy34LpELOTiLoNyFKQ3pqdmPsojluwSdStZY5wns NOKmBGucB0ZWaty0ysI5x56Z8GORPEQPtmvlQCLa+wgLry/Boxo/cAXnI9Rn7iab Dcn419UKqT5RHPm9E0roNdJhTOQIvJ8NX+Oj+5v/pz+4c/5fqrNoOxZ8OFuDN0pn qhOVs7q+uvnmsLihZPmhvqU7b76hU8I= -----END CERTIFICATE-----Generated at Tue Jul 21 15:34:34 2026 by rpki-client