$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa File: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (raw, json) Hash identifier: XDISLAzxd0nHirct6zzoHEsw6Zo2PLRkUUmuvQiOwMk= Subject key identifier: C0:75:90:5E:4F:B6:92:2A:E5:2F:F7:0B:5F:02:A7:9E:8A:78:CA:8B Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584E6B0A152D35ECA72DAECA8500 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:15:2d:35:ec:a7:2d:ae:ca:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=ba6fef59-676d-414d-82fd-03530587fe70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:6d:b8:38:76:5f:5c:5a:dd:57:31:5b:a5: 88:b5:65:77:96:aa:76:0f:36:94:a7:47:1f:cc:01: d9:fb:6b:dc:36:e6:78:4a:8a:d0:70:89:4c:84:00: 14:71:e5:e8:2f:db:4a:45:89:fa:d5:28:4f:48:7b: e8:5a:6c:32:7c:c6:11:e1:5d:db:c3:99:f6:01:a5: 40:91:39:4e:80:cc:75:ea:49:cd:8d:bb:54:cf:b2: dd:69:75:02:24:ad:8e:18:d4:b2:d4:65:76:25:b8: 88:69:40:1d:e8:d4:d5:ab:8e:d5:08:57:64:68:1a: 2b:1a:12:63:06:34:7e:13:ee:1e:91:e6:27:57:6f: 28:13:11:36:63:01:b4:1a:f8:5a:a7:2d:ba:ad:08: 6f:aa:55:c8:b1:ac:6a:52:81:e6:ec:d4:43:a9:7a: 14:5f:9f:b3:00:22:df:e0:b2:9c:0c:63:a1:b4:6f: 1e:15:d8:c2:ad:6b:b9:ed:ea:61:44:f1:2a:60:e6: b4:0f:2b:02:a6:b3:47:2d:10:60:79:2c:6c:2a:d2: 80:0a:19:36:d7:f2:c3:e4:3d:a4:c1:43:10:80:8a: ea:f3:39:f2:9c:bf:bd:35:79:d8:43:c5:24:f1:98: e3:0d:92:a5:36:e3:35:8b:fd:08:53:01:91:a5:18: 51:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:75:90:5E:4F:B6:92:2A:E5:2F:F7:0B:5F:02:A7:9E:8A:78:CA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5a:a6:95:d9:01:d7:ad:e2:ae:04:17:79:4f:6c:3d:8c:bf: 25:97:99:5b:68:8a:62:e4:c8:72:d9:bb:cd:50:9a:8e:e0:93: 38:05:8b:36:ac:f6:53:20:6a:9d:a5:06:7c:ec:67:fd:02:6c: 18:b6:f2:76:29:34:4f:47:da:fd:5b:cd:6c:fe:fc:91:67:34: ab:48:d1:18:b2:cc:55:1b:22:f6:39:44:14:13:24:43:14:2d: 7e:81:d4:14:b6:46:40:7f:15:70:51:a5:d0:ee:ac:28:76:93: 7c:8f:bd:61:db:de:b8:c8:4a:e4:4b:e8:7b:84:86:0c:49:85: f1:a0:c8:c9:42:a9:d6:29:81:dd:e6:05:62:70:9c:c2:7a:05: 1a:d5:5c:d8:60:38:16:c1:66:95:93:6a:d8:2d:7e:1d:b3:a9: 79:ce:4c:4e:20:25:7a:05:44:02:3e:24:93:4a:4e:cd:09:37: 04:c9:a8:33:c1:b3:94:1f:80:e7:68:a3:77:13:bc:4d:6a:8a: be:43:32:c8:cc:14:17:ea:6d:8a:4b:7f:59:9d:c1:8d:73:0c: 83:1f:ec:f4:ea:9a:1e:bd:57:3f:c1:3e:37:6f:54:3b:f4:2a: 30:fb:7b:17:88:53:33:97:a0:a1:ce:d2:c2:fd:7a:78:b3:c7: f6:8e:8d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChUtNeynLa7KhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk YmE2ZmVmNTktNjc2ZC00MTRkLTgyZmQtMDM1MzA1ODdmZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5NtuDh2X1xa3VcxW6WItWV3lqp2DzaUp0cf zAHZ+2vcNuZ4SorQcIlMhAAUceXoL9tKRYn61ShPSHvoWmwyfMYR4V3bw5n2AaVA kTlOgMx16knNjbtUz7LdaXUCJK2OGNSy1GV2JbiIaUAd6NTVq47VCFdkaBorGhJj BjR+E+4ekeYnV28oExE2YwG0Gvhapy26rQhvqlXIsaxqUoHm7NRDqXoUX5+zACLf 4LKcDGOhtG8eFdjCrWu57ephRPEqYOa0DysCprNHLRBgeSxsKtKAChk21/LD5D2k wUMQgIrq8znynL+9NXnYQ8Uk8ZjjDZKlNuM1i/0IUwGRpRhRlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMB1kF5PtpIq5S/3C18Cp56KeMqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvNDZmNGY4NGEtZjc0Ny0z Y2FhLWJiZDAtNzA1NzFjYmVkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNappXZAdet4q4EF3lPbD2MvyWXmVtoimLkyHLZu81Qmo7gkzgFizas 9lMgap2lBnzsZ/0CbBi28nYpNE9H2v1bzWz+/JFnNKtI0RiyzFUbIvY5RBQTJEMU LX6B1BS2RkB/FXBRpdDurCh2k3yPvWHb3rjISuRL6HuEhgxJhfGgyMlCqdYpgd3m BWJwnMJ6BRrVXNhgOBbBZpWTatgtfh2zqXnOTE4gJXoFRAI+JJNKTs0JNwTJqDPB s5QfgOdoo3cTvE1qir5DMsjMFBfqbYpLf1mdwY1zDIMf7PTqmh69Vz/BPjdvVDv0 KjD7exeIUzOXoKHO0sL9enizx/aOjVk= -----END CERTIFICATE-----Generated at Tue Jul 21 15:34:32 2026 by rpki-client