$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa File: 3cd4923c-6128-376c-8446-baffa366fd39.roa (raw, json) Hash identifier: H8hQLJcMqtln6+zCuG1mPUT1vJ6bvphlv0et/hI4Tvo= Subject key identifier: 4F:C8:F8:A0:7E:C3:D1:2C:3D:95:56:7A:4F:EE:A6:BF:5B:BB:2A:9B Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584F0D6CDD3ED38DE48CE4686980 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:dd:3e:d3:8d:e4:8c:e4:68:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=de667fa9-bc4a-4ab2-9418-42634e6f1a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:75:59:bd:2a:14:e7:3e:b2:23:94:d3:ce: 1f:76:c0:98:a1:37:dd:4d:ee:af:b3:81:ce:e4:ad: 82:4f:01:dc:f2:5f:61:51:0b:53:20:4b:80:6f:90: 48:7b:0a:07:3a:33:ec:2e:70:2e:3b:6d:dd:53:78: a8:fc:b9:53:c0:1a:ad:fb:b7:71:6f:97:03:5e:98: 09:9f:aa:a2:e6:9d:60:d8:77:a0:d4:6a:70:e1:b4: 7e:a5:04:91:6f:0a:ba:d8:43:c5:59:6f:22:17:23: ad:f9:41:0a:48:f7:71:fb:70:20:09:5b:76:75:e8: 25:e1:05:3c:e5:86:dc:02:5a:b2:4c:5c:ed:cb:a4: 4f:a3:43:15:44:08:a6:ec:a5:02:a2:e6:99:d8:e5: b1:c7:92:fc:4a:c6:82:bf:77:f2:06:39:3c:d8:16: 96:2c:3b:d3:95:cc:00:c2:63:b3:78:e9:29:af:d6: 28:f9:99:55:7f:5d:c3:1a:6f:97:c1:b7:b1:a2:18: 99:bb:22:cc:f4:d5:b8:3a:26:ec:5d:39:ed:aa:40: d9:0d:76:0a:3c:02:7a:d7:b3:e5:3b:9d:c4:1b:91: 1d:f0:01:cf:13:3a:a3:f2:4f:6d:2d:8e:12:5e:0e: 22:2f:24:3d:52:c7:c2:0e:86:e2:03:bd:4d:e2:a2: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C8:F8:A0:7E:C3:D1:2C:3D:95:56:7A:4F:EE:A6:BF:5B:BB:2A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:59:91:05:16:8e:d7:d1:8c:83:a8:99:5b:d1:3e:31:8b:18: f6:43:5c:41:2e:c5:5d:19:2b:cc:a9:9d:42:20:f8:93:31:4b: f9:2e:07:74:9f:9c:cb:fa:27:60:54:19:f6:d9:62:b4:aa:b6: c2:38:b3:5f:92:e7:0a:44:d1:f9:ae:79:88:ec:81:fd:f9:f2: 2b:33:0f:65:bd:3f:18:fc:eb:ad:c5:ae:78:73:e7:f7:26:ab: 26:13:5a:75:d1:23:fb:46:5d:da:45:e8:c1:15:00:8e:3d:df: b3:09:2f:b3:92:8e:b1:49:05:75:f9:e9:5d:b5:63:28:b9:4d: e1:9c:ac:d3:f2:25:f4:b4:b4:2f:22:4b:00:0c:c6:1b:ff:9a: 7a:bc:d5:0d:b4:48:25:ee:98:7e:59:0d:67:54:2b:d2:f0:ce: 09:ab:8a:16:1a:bb:5a:e3:73:b9:1f:3e:5a:cf:1b:86:ab:14: 84:68:40:43:c5:d4:1d:aa:7f:28:c8:0d:22:18:99:4a:d0:ed: ed:f4:37:cd:84:e7:5b:c2:84:d9:b1:c7:a3:16:b8:fb:f8:18: 8f:f0:b8:a9:76:c8:36:2a:02:fe:05:98:34:5d:0c:6b:60:17: 6d:18:b7:51:e5:5e:d0:75:8b:08:7b:b3:ba:dc:98:80:06:03: 8f:81:a2:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbN0+043kjORoaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZGU2NjdmYTktYmM0YS00YWIyLTk0MTgtNDI2MzRlNmYxYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocB1Wb0qFOc+siOU084fdsCYoTfdTe6vs4HO 5K2CTwHc8l9hUQtTIEuAb5BIewoHOjPsLnAuO23dU3io/LlTwBqt+7dxb5cDXpgJ n6qi5p1g2Heg1Gpw4bR+pQSRbwq62EPFWW8iFyOt+UEKSPdx+3AgCVt2degl4QU8 5YbcAlqyTFzty6RPo0MVRAim7KUCouaZ2OWxx5L8SsaCv3fyBjk82BaWLDvTlcwA wmOzeOkpr9Yo+ZlVf13DGm+XwbexohiZuyLM9NW4OibsXTntqkDZDXYKPAJ617Pl O53EG5Ed8AHPEzqj8k9tLY4SXg4iLyQ9UsfCDobiA71N4qIXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/I+KB+w9EsPZVWek/upr9buyqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvM2NkNDkyM2MtNjEyOC0z NzZjLTg0NDYtYmFmZmEzNjZmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBZkQUWjtfRjIOomVvRPjGLGPZDXEEuxV0ZK8ypnUIg+JMxS/kuB3Sf nMv6J2BUGfbZYrSqtsI4s1+S5wpE0fmueYjsgf358iszD2W9Pxj8663Frnhz5/cm qyYTWnXRI/tGXdpF6MEVAI4937MJL7OSjrFJBXX56V21Yyi5TeGcrNPyJfS0tC8i SwAMxhv/mnq81Q20SCXumH5ZDWdUK9LwzgmrihYau1rjc7kfPlrPG4arFIRoQEPF 1B2qfyjIDSIYmUrQ7e30N82E51vChNmxx6MWuPv4GI/wuKl2yDYqAv4FmDRdDGtg F20Yt1HlXtB1iwh7s7rcmIAGA4+BovQ= -----END CERTIFICATE-----Generated at Sat Sep 5 02:30:00 2026 by rpki-client