$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa File: 06aa229e-21d5-3132-8604-c88f6941821b.roa (raw, json) Hash identifier: 8L/VtRuZnk8DO50udjMOSqDxQaFZjfy7EMKvtpkOZmg= Subject key identifier: C8:FC:07:0E:76:1E:3F:A2:DC:4F:DE:CE:1E:83:37:DA:3F:E0:05:84 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584DB1DACABCBEDF087097384BC0 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 46432 IP address blocks: 208.88.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:ca:bc:be:df:08:70:97:38:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=c7b06658-abce-4cac-9b90-add40a9f4fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:c7:f3:14:8a:8a:2e:e9:f8:dc:48:41:3c: 2d:fe:5b:42:73:88:fc:8b:28:42:83:ab:05:53:97: ef:32:71:ae:ce:4b:3c:bc:d5:c3:45:e5:aa:15:98: 9e:dd:39:b4:97:5b:fe:e7:63:d5:03:ad:4d:ca:3e: a4:0a:e6:c4:ff:26:14:a9:a8:48:49:06:70:b1:e9: ca:91:b2:c1:58:e4:fe:58:0a:2a:41:ce:2e:a7:9f: 4a:19:ce:8a:8b:df:16:c1:06:9b:cf:3b:19:08:ff: 06:3e:6a:4d:29:88:2f:9a:4e:eb:50:79:68:0c:50: 81:c7:96:20:88:47:04:2f:24:a1:30:ad:19:d7:9c: c2:3c:7a:10:fd:59:12:80:f8:9d:0a:45:51:43:0f: 3e:c0:6f:aa:fd:57:67:49:ef:02:b1:cd:60:7e:c5: 95:1b:af:3d:b6:b3:bc:39:00:fa:52:d3:d7:33:e2: 15:1e:bd:9f:8f:dc:49:0a:f4:54:19:28:52:f3:2c: a9:ec:28:43:8d:d9:3d:e6:4a:91:69:3d:bd:db:fa: 73:8b:fe:da:f2:7e:ce:30:a0:75:a4:5e:a2:5a:5a: 29:09:33:6c:c5:90:58:22:c3:01:aa:cd:d5:61:8d: dd:3a:b6:aa:b8:03:b7:80:ff:b0:51:7b:af:ca:79: ce:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FC:07:0E:76:1E:3F:A2:DC:4F:DE:CE:1E:83:37:DA:3F:E0:05:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fe:58:66:37:5c:ca:db:5c:c3:56:03:26:a1:10:2f:b3:07: 76:b5:dd:f4:3c:eb:4b:fd:5f:1d:97:f6:b3:e7:59:79:3e:b9: 74:b4:ba:e1:b3:7f:4e:fd:42:13:c3:12:ec:7e:45:1e:8c:f4: 94:02:f3:ef:53:6d:6e:a5:f5:f3:4e:95:8b:8e:b2:b2:44:b8: 01:63:cb:ef:2e:fd:2d:12:39:57:af:41:b0:ee:04:c6:50:1d: a7:40:13:bc:87:aa:59:dc:ab:0d:5b:c0:bf:6e:ad:95:f7:f7: 6d:88:6e:e2:07:bd:60:5a:ea:7a:02:b8:33:da:59:a3:f6:b8: b3:8b:72:88:70:d4:5b:77:5b:84:21:f6:d8:8d:c7:a1:38:54: 6f:a9:77:5d:da:1a:81:a1:ad:2c:6f:68:1f:0a:4b:2b:a2:c9: a2:c4:7c:13:16:82:ab:db:fc:f5:29:2b:ae:76:cf:10:c5:fe: eb:1e:a3:22:0d:c8:4b:ac:11:9f:75:57:54:79:85:bc:eb:3a: 04:51:af:35:9b:f8:ad:01:06:44:3a:f0:41:2c:d8:69:c3:96: 2a:38:8e:f0:d3:b0:7f:1f:0a:ac:95:09:d6:91:25:48:6f:30: 25:7a:b2:33:0e:5c:5f:28:ba:08:b1:ab:ae:da:aa:7c:50:f5: a4:1b:7d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2sq8vt8IcJc4S8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk YzdiMDY2NTgtYWJjZS00Y2FjLTliOTAtYWRkNDBhOWY0ZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17nH8xSKii7p+NxIQTwt/ltCc4j8iyhCg6sF U5fvMnGuzks8vNXDReWqFZie3Tm0l1v+52PVA61Nyj6kCubE/yYUqahISQZwsenK kbLBWOT+WAoqQc4up59KGc6Ki98WwQabzzsZCP8GPmpNKYgvmk7rUHloDFCBx5Yg iEcELyShMK0Z15zCPHoQ/VkSgPidCkVRQw8+wG+q/VdnSe8Csc1gfsWVG689trO8 OQD6UtPXM+IVHr2fj9xJCvRUGShS8yyp7ChDjdk95kqRaT292/pzi/7a8n7OMKB1 pF6iWlopCTNsxZBYIsMBqs3VYY3dOraquAO3gP+wUXuvynnOKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj8Bw52Hj+i3E/ezh6DN9o/4AWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvMDZhYTIyOWUtMjFkNS0z MTMyLTg2MDQtYzg4ZjY5NDE4MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj+WGY3XMrbXMNWAyahEC+zB3a13fQ860v9Xx2X9rPnWXk+uXS0uuGz f079QhPDEux+RR6M9JQC8+9TbW6l9fNOlYuOsrJEuAFjy+8u/S0SOVevQbDuBMZQ HadAE7yHqlncqw1bwL9urZX3922IbuIHvWBa6noCuDPaWaP2uLOLcohw1Ft3W4Qh 9tiNx6E4VG+pd13aGoGhrSxvaB8KSyuiyaLEfBMWgqvb/PUpK652zxDF/useoyIN yEusEZ91V1R5hbzrOgRRrzWb+K0BBkQ68EEs2GnDlio4jvDTsH8fCqyVCdaRJUhv MCV6sjMOXF8ougixq67aqnxQ9aQbfSU= -----END CERTIFICATE-----Generated at Wed May 6 02:51:42 2026 by rpki-client