$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa File: 3cd4923c-6128-376c-8446-baffa366fd39.roa (raw, json) Hash identifier: NH0yZs0OPCSJigQ21yHgM4omBF3ogOHPd9VIPd5K2KI= Subject key identifier: 7B:57:6C:74:FF:E5:6C:59:A1:16:C2:0D:DB:B2:AC:2B:7E:14:41:05 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584D8AC539B622E7D4DB73323860 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:39:b6:22:e7:d4:db:73:32:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=ad148d1f-c767-4ff3-9f43-2293de70bcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:c0:16:ab:de:f0:34:97:6d:ff:ca:df:b8: 7b:b4:47:ab:bb:42:19:63:f5:b5:a5:c6:a9:18:34: a9:5c:f7:41:98:4e:73:23:97:0a:b8:08:af:ae:96: 44:62:33:b0:34:92:da:d5:7d:11:ee:35:19:df:05: d0:1a:1d:27:43:5e:df:3a:a6:f8:ba:de:b5:ed:28: 0d:f6:b6:28:1b:50:0d:fd:7d:f6:2c:d7:3e:6a:63: 12:2b:a5:83:6b:ce:93:fa:fd:2c:cd:e5:e7:36:fe: 23:75:be:10:22:68:4c:5b:97:5b:92:92:88:a7:f3: 25:0e:52:d4:15:69:da:f6:c8:84:ba:86:c1:8f:f1: f5:0a:98:37:4c:f4:d0:63:99:1f:5c:83:1e:a3:d6: 03:9b:40:c7:d0:55:33:aa:fb:79:f6:9c:73:bb:3e: 20:ce:50:89:b8:fe:ef:d2:93:1d:17:28:8d:50:3e: db:4e:2a:c0:a7:ec:19:f2:2e:40:ff:ba:f0:a2:96: b8:12:2c:07:17:8f:c6:0f:38:46:76:e1:ff:a8:93: 40:fb:d5:09:61:bf:00:2d:3d:b5:81:a5:2e:2b:29: c1:bf:86:c4:d3:6e:72:19:5f:3d:eb:11:d5:ed:80: f9:3d:16:cb:ea:37:ee:d8:11:85:fc:14:a5:ec:57: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:57:6C:74:FF:E5:6C:59:A1:16:C2:0D:DB:B2:AC:2B:7E:14:41:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:75:26:3d:bf:38:fb:63:fc:b5:2c:af:8f:41:37:96:fc:4f: af:35:fe:46:58:e3:d1:8d:0e:f8:29:69:63:7b:88:99:4c:38: e7:7a:4f:8c:75:a2:f7:cc:ad:01:fd:90:a8:42:68:e9:3c:dc: b2:34:80:73:01:a3:93:fd:7b:5d:68:1c:8e:ed:31:5e:9f:92: f8:cb:03:3f:29:f3:1a:ce:cb:bf:c4:e9:1e:86:86:23:bb:bf: 7e:b2:51:95:a0:8d:d4:03:5a:18:a0:41:d8:31:ea:e0:7a:62: 82:22:75:a5:8c:2b:0a:4b:59:95:64:0d:f0:b6:91:a7:9d:85: 4f:3f:ac:57:d8:2f:9d:0b:e7:19:03:dc:90:b1:79:09:96:54: 3b:44:bf:c1:37:49:e1:ce:9f:20:6a:06:43:15:e9:51:dc:44: 91:4f:26:00:09:64:c8:36:1b:ac:da:3d:f9:87:7a:0e:6e:f4: 43:c3:7f:3d:fc:4f:d9:05:b6:e2:b9:4a:bc:85:d3:90:d2:f0: a3:90:a1:17:f9:c3:8e:54:2c:ad:83:0c:cb:0d:1f:b4:a3:2f: f9:82:f7:8e:39:e6:93:d8:01:4c:58:2f:df:52:03:df:a7:a1: 0f:ec:d2:27:e3:61:3e:57:6c:7e:72:c3:34:a2:43:96:fb:b9: ad:41:80:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTm2IufU23MyOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YWQxNDhkMWYtYzc2Ny00ZmYzLTlmNDMtMjI5M2RlNzBiY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZfAFqve8DSXbf/K37h7tEeru0IZY/W1pcap GDSpXPdBmE5zI5cKuAivrpZEYjOwNJLa1X0R7jUZ3wXQGh0nQ17fOqb4ut617SgN 9rYoG1AN/X32LNc+amMSK6WDa86T+v0szeXnNv4jdb4QImhMW5dbkpKIp/MlDlLU FWna9siEuobBj/H1Cpg3TPTQY5kfXIMeo9YDm0DH0FUzqvt59pxzuz4gzlCJuP7v 0pMdFyiNUD7bTirAp+wZ8i5A/7rwopa4EiwHF4/GDzhGduH/qJNA+9UJYb8ALT21 gaUuKynBv4bE025yGV896xHV7YD5PRbL6jfu2BGF/BSl7Fc4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtXbHT/5WxZoRbCDduyrCt+FEEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvM2NkNDkyM2MtNjEyOC0z NzZjLTg0NDYtYmFmZmEzNjZmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ1Jj2/OPtj/LUsr49BN5b8T681/kZY49GNDvgpaWN7iJlMOOd6T4x1 ovfMrQH9kKhCaOk83LI0gHMBo5P9e11oHI7tMV6fkvjLAz8p8xrOy7/E6R6GhiO7 v36yUZWgjdQDWhigQdgx6uB6YoIidaWMKwpLWZVkDfC2kaedhU8/rFfYL50L5xkD 3JCxeQmWVDtEv8E3SeHOnyBqBkMV6VHcRJFPJgAJZMg2G6zaPfmHeg5u9EPDfz38 T9kFtuK5SryF05DS8KOQoRf5w45ULK2DDMsNH7SjL/mC94455pPYAUxYL99SA9+n oQ/s0ifjYT5XbH5ywzSiQ5b7ua1BgF4= -----END CERTIFICATE-----Generated at Sun Apr 19 02:22:48 2026 by rpki-client