$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/e3525c35-406d-35f3-949f-47300f9844d4.roa File: e3525c35-406d-35f3-949f-47300f9844d4.roa (raw, json) Hash identifier: 0Rw3lQuIGvd8qSVIbuxyd9m/yWVXOmcoFtVCIe1Cnog= Subject key identifier: 0A:20:26:7E:E8:49:92:5E:B5:A2:AE:56:1F:A1:46:A4:BA:18:16:19 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584ECB60DCC910D083127E74DF90 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/e3525c35-406d-35f3-949f-47300f9844d4.roa Signing time: Mon 10 Aug 2026 21:12:46 +0000 ROA not before: Mon 10 Aug 2026 21:12:46 +0000 ROA not after: Sun 08 Nov 2026 22:12:46 +0000 asID: 16437 IP address blocks: 208.88.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:60:dc:c9:10:d0:83:12:7e:74:df:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Aug 10 21:12:46 2026 GMT Not After : Nov 8 22:12:46 2026 GMT Subject: CN=4800689c-4188-4d70-9aa6-5a4f88c276be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a7:fb:8a:f2:45:27:4b:5c:23:28:0b:93:c4: 66:12:9a:c5:be:8b:39:3e:e7:3e:56:30:1a:34:33: 8d:fc:28:90:ed:cb:7d:4e:81:67:5e:20:50:6b:59: 95:63:84:1f:89:70:54:6a:a0:07:25:cb:ab:1f:fd: 60:99:f9:d9:f2:4a:16:97:1c:66:cd:66:6d:e5:12: da:de:7b:b1:35:c9:99:ac:1f:9a:6f:de:a1:13:14: a3:75:6d:12:dd:d6:ad:80:e0:26:71:75:c3:11:ca: be:3a:59:43:00:2b:94:34:d7:32:e3:65:0e:95:6f: 06:25:56:b5:3e:2c:a7:6c:07:48:c3:12:c3:36:65: c2:c3:04:f2:2c:5f:5b:63:2f:48:67:37:b4:48:0e: bf:2d:bb:c2:db:84:a3:c7:09:1b:2f:9d:90:e9:1c: ca:83:c4:37:f7:0f:84:70:e3:c2:85:5a:49:49:8e: cc:b8:f5:8a:d3:b2:7a:8d:86:59:45:2f:39:9f:b2: fc:42:fc:20:b7:8b:55:7a:c5:51:4f:72:67:43:c8: c5:62:43:1f:4a:73:dd:f6:8a:61:96:3d:c2:c9:7f: 95:f2:16:16:7d:37:a6:97:f5:88:6e:db:76:cf:d9: 54:28:7e:bf:4a:0b:c1:b8:a3:2c:2a:f4:d1:49:92: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:20:26:7E:E8:49:92:5E:B5:A2:AE:56:1F:A1:46:A4:BA:18:16:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/e3525c35-406d-35f3-949f-47300f9844d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f3:b8:ac:bf:79:12:fe:92:35:87:03:b1:53:3a:97:00:04: e9:1c:0c:1b:46:ed:94:69:c7:bb:41:ed:67:a7:3e:16:7d:56: c3:76:33:e0:74:5c:d7:ff:f5:9f:bf:28:2b:95:01:30:50:ed: 0d:6c:46:06:24:8f:82:9c:24:15:c2:8e:09:8b:ff:57:c4:24: 3a:95:c7:ac:88:e1:c0:9f:b0:54:7b:51:68:84:ef:1a:84:b7: 0b:47:8f:c1:d3:7f:02:79:f3:a6:db:b0:45:ea:50:b2:6e:90: 4b:fc:fc:66:96:e8:d8:d7:b7:93:dc:96:7e:0d:ed:c1:2c:c8: 5c:2e:19:0c:e1:1d:18:fb:00:15:fd:dc:2c:b3:a5:2e:f6:a8: 4c:74:6a:29:b7:12:1e:5d:a2:ab:91:a4:c3:3d:fb:1f:0b:b0: 74:b1:51:52:5f:2f:30:53:5e:8f:0f:5b:bb:47:32:7d:c7:bb: 96:64:0d:55:3b:4f:80:b3:85:02:ef:40:af:c1:13:21:3e:71: 6d:b0:e1:e6:76:62:cb:02:5e:74:f1:e9:5c:0c:a4:47:14:ac: a3:8f:9f:a9:27:b8:e0:74:b6:3e:89:c6:dd:19:6b:52:74:aa: 06:46:cc:df:28:ef:b9:9f:a9:e8:1c:49:21:5c:1f:89:8a:99: 29:83:47:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7LYNzJENCDEn5035AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDgxMDIxMTI0NloXDTI2MTEwODIyMTI0NlowLzEtMCsGA1UEAxMk NDgwMDY4OWMtNDE4OC00ZDcwLTlhYTYtNWE0Zjg4YzI3NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6f7ivJFJ0tcIygLk8RmEprFvos5Puc+VjAa NDON/CiQ7ct9ToFnXiBQa1mVY4QfiXBUaqAHJcurH/1gmfnZ8koWlxxmzWZt5RLa 3nuxNcmZrB+ab96hExSjdW0S3datgOAmcXXDEcq+OllDACuUNNcy42UOlW8GJVa1 PiynbAdIwxLDNmXCwwTyLF9bYy9IZze0SA6/LbvC24SjxwkbL52Q6RzKg8Q39w+E cOPChVpJSY7MuPWK07J6jYZZRS85n7L8Qvwgt4tVesVRT3JnQ8jFYkMfSnPd9oph lj3CyX+V8hYWfTeml/WIbtt2z9lUKH6/SgvBuKMsKvTRSZK5xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAogJn7oSZJetaKuVh+hRqS6GBYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvZTM1MjVjMzUtNDA2ZC0z NWYzLTk0OWYtNDczMDBmOTg0NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXzuKy/eRL+kjWHA7FTOpcABOkcDBtG7ZRpx7tB7WenPhZ9VsN2M+B0 XNf/9Z+/KCuVATBQ7Q1sRgYkj4KcJBXCjgmL/1fEJDqVx6yI4cCfsFR7UWiE7xqE twtHj8HTfwJ586bbsEXqULJukEv8/GaW6NjXt5Pcln4N7cEsyFwuGQzhHRj7ABX9 3CyzpS72qEx0aim3Eh5doquRpMM9+x8LsHSxUVJfLzBTXo8PW7tHMn3Hu5ZkDVU7 T4CzhQLvQK/BEyE+cW2w4eZ2YssCXnTx6VwMpEcUrKOPn6knuOB0tj6Jxt0Za1J0 qgZGzN8o77mfqegcSSFcH4mKmSmDR4g= -----END CERTIFICATE-----Generated at Tue Sep 1 04:06:38 2026 by rpki-client