$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa File: a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json) Hash identifier: r6JVWxghOD6nYPLrgU2bWRQjm5T8TNwbyEAVr7Al3ek= Subject key identifier: 6B:D1:04:6B:4B:89:D9:F4:90:99:44:8B:13:76:30:3B:6E:76:26:73 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584F34826BA4B0049C3EC5D9FF00 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 46432 IP address blocks: 208.88.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:6b:a4:b0:04:9c:3e:c5:d9:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=cc923170-cf41-4f00-ae5e-49709f2640b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:08:3b:16:0d:3e:33:2c:6f:1e:db:f3:e9:e8: 38:11:d2:f9:56:b2:0e:ae:02:ba:9a:c4:71:76:b5: d0:73:a8:a3:4b:da:aa:e9:ca:9b:9d:63:80:85:9a: 69:6c:d7:d8:37:29:02:49:4b:97:ac:26:37:6b:9c: 27:43:d5:fc:5a:27:40:1d:29:4c:41:40:f2:6a:2a: 45:62:64:bd:9b:7f:b0:71:84:de:b2:09:a5:36:82: d8:dc:7d:da:6c:ba:33:5c:d9:1b:f7:b7:0f:dc:94: f5:37:87:3a:5d:e4:25:81:56:9c:74:25:37:78:8c: 19:00:b3:0f:6e:1f:c4:8b:47:d3:ad:d7:f5:bc:06: 73:15:09:13:8e:13:be:52:6e:c0:0a:a6:9f:bd:65: 20:da:9a:53:ed:d4:af:0f:92:7d:06:d1:ac:93:47: 6a:af:fc:09:d2:9c:e6:a7:f8:d3:82:19:22:42:75: 67:4a:43:9b:6b:be:2e:01:41:02:34:fd:44:cc:9e: 81:0c:9b:92:77:60:cf:be:1a:9c:38:e0:2d:0b:97: 40:cf:15:3a:ed:cb:8e:d1:85:d3:aa:ff:0a:28:f6: 5b:f5:d3:61:3b:e4:81:9c:01:de:be:22:97:81:29: 80:e0:1b:19:99:da:99:79:e6:57:91:d7:5d:94:00: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D1:04:6B:4B:89:D9:F4:90:99:44:8B:13:76:30:3B:6E:76:26:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:14:47:2a:de:12:dd:d5:a8:e4:38:d8:1c:b4:26:d1:40:6c: 0e:ce:ff:56:72:99:64:e0:e0:01:57:47:a2:b1:92:e6:3d:fa: 32:dd:cc:28:44:a6:6c:95:16:5c:af:67:66:6d:b9:c6:87:68: 95:23:2f:af:73:3b:78:fc:0f:c7:82:f6:53:4c:58:8e:3f:94: 8f:fb:41:92:40:98:82:34:f7:fe:b6:bc:18:55:3b:45:c0:1a: 10:30:48:9b:60:15:5c:46:1e:89:2f:c9:21:80:dc:bd:1d:8b: 71:c6:75:46:d1:d8:a6:d3:17:ba:54:79:70:67:57:f0:28:f4: 4e:5c:34:37:6f:f3:1b:76:1e:bd:e8:84:20:78:80:7d:c5:25: 31:fd:2a:3f:1d:10:f6:d0:ad:fd:75:1e:bb:b5:95:f6:f4:af: 6b:bc:63:30:2d:2e:06:da:cd:cf:c0:2a:66:d0:31:2e:d6:2e: f4:2f:32:e7:dd:18:ec:a8:1c:d5:d7:dd:14:d9:cb:63:8d:66: 92:03:e4:8a:8c:91:8f:34:91:a2:b7:58:5a:cd:63:e8:7f:b3: 1e:1c:3a:3e:3d:5b:a9:5b:34:fa:5d:0c:dd:c0:11:1d:a9:6d: d8:c6:cd:22:e0:64:0c:e1:d6:5a:f5:da:cd:3e:a5:f4:f4:b8: 9a:b1:ae:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gmuksAScPsXZ/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2M5MjMxNzAtY2Y0MS00ZjAwLWFlNWUtNDk3MDlmMjY0MGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Qg7Fg0+MyxvHtvz6eg4EdL5VrIOrgK6msRx drXQc6ijS9qq6cqbnWOAhZppbNfYNykCSUuXrCY3a5wnQ9X8WidAHSlMQUDyaipF YmS9m3+wcYTesgmlNoLY3H3abLozXNkb97cP3JT1N4c6XeQlgVacdCU3eIwZALMP bh/Ei0fTrdf1vAZzFQkTjhO+Um7ACqafvWUg2ppT7dSvD5J9BtGsk0dqr/wJ0pzm p/jTghkiQnVnSkOba74uAUECNP1EzJ6BDJuSd2DPvhqcOOAtC5dAzxU67cuO0YXT qv8KKPZb9dNhO+SBnAHeviKXgSmA4BsZmdqZeeZXkdddlAAwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvRBGtLidn0kJlEixN2MDtudiZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTk0M2E2MmUtOGFmNC0z NzI4LWFjMjEtZGI5NThiNTMxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0URyreEt3VqOQ42By0JtFAbA7O/1ZymWTg4AFXR6KxkuY9+jLdzChE pmyVFlyvZ2ZtucaHaJUjL69zO3j8D8eC9lNMWI4/lI/7QZJAmII09/62vBhVO0XA GhAwSJtgFVxGHokvySGA3L0di3HGdUbR2KbTF7pUeXBnV/Ao9E5cNDdv8xt2Hr3o hCB4gH3FJTH9Kj8dEPbQrf11Hru1lfb0r2u8YzAtLgbazc/AKmbQMS7WLvQvMufd GOyoHNXX3RTZy2ONZpID5IqMkY80kaK3WFrNY+h/sx4cOj49W6lbNPpdDN3AER2p bdjGzSLgZAzh1lr12s0+pfT0uJqxrns= -----END CERTIFICATE-----Generated at Sat Sep 26 15:40:57 2026 by rpki-client