$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa File: 46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa (raw, json) Hash identifier: qcWJfanAv2BB7On+v1YEtGnh3+o+WZ0IR7DPB285Bns= Subject key identifier: BF:1C:13:7C:01:3A:E4:3D:E1:55:37:E1:73:F3:D8:AB:77:2E:5B:CE Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584D8AC53CF27ED74D1CEF921100 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3c:f2:7e:d7:4d:1c:ef:92:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=f6c5cc20-0ce6-4307-842e-777989ca52cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:1b:cb:a7:a3:ee:d1:bc:eb:45:80:af:47: bc:c2:a7:62:77:37:77:e4:b6:f0:48:67:14:dc:1c: bf:e7:b5:f8:94:60:4b:11:12:e8:a7:e0:1e:bc:00: 9f:da:83:ff:82:20:37:78:97:ce:9b:69:81:e7:aa: 26:28:27:80:a4:65:b6:6d:9a:59:b4:8d:b4:87:2e: 1b:5a:19:2d:8b:d4:6a:b4:0d:6b:8a:f7:56:03:63: d8:f4:8d:fa:28:de:a9:ae:da:39:f4:2a:7d:f0:c4: 22:57:73:49:99:bb:10:f5:c7:18:75:f1:b6:d3:73: fe:5b:15:24:fc:c8:f8:75:b7:e9:89:a6:3a:56:7d: e1:8a:1a:ae:4b:a2:9a:f8:95:ea:07:16:d9:fa:3f: 66:37:33:04:e1:3b:5d:9c:8a:96:1c:29:95:02:04: d2:4d:ef:ba:a5:ff:74:17:42:2a:fd:3b:3c:1a:94: 59:a0:98:e1:0d:81:a6:8c:7b:00:50:57:3a:73:fb: 53:08:58:f6:81:6e:59:53:c1:b1:69:7a:79:ea:c1: 64:e1:9c:ee:64:7c:c0:9d:7a:60:6d:a4:9f:a7:56: 97:79:16:d7:e8:a7:f2:a4:78:27:7f:fd:b8:d2:1a: 1e:82:05:fe:b1:9a:be:52:de:dd:c4:48:2f:b9:ef: be:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1C:13:7C:01:3A:E4:3D:E1:55:37:E1:73:F3:D8:AB:77:2E:5B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/46f4f84a-f747-3caa-bbd0-70571cbedb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:3d:11:0a:e6:38:90:dc:95:95:26:09:de:bb:0d:fe:70:11: bf:7a:b0:f2:2a:90:69:e8:eb:35:f8:59:71:51:9f:58:3c:73: a7:c7:9c:e3:72:ab:6a:ab:42:93:29:6c:7e:03:a7:29:e1:ac: e0:b3:f4:6f:04:01:eb:5f:bf:e2:29:c1:3f:65:71:c3:22:9b: 44:36:a9:e1:87:c2:0c:d5:51:bf:6f:2b:21:94:f4:6b:dc:5a: 5c:4a:23:22:e8:72:fa:18:ed:ce:d6:17:5a:50:86:5f:01:e3: 57:04:5d:33:68:02:42:7a:a4:43:df:03:26:ed:71:fd:fa:07: a0:cf:25:e0:cf:58:4e:1b:5c:3c:8f:a7:6f:54:c2:ee:1a:01: 73:61:94:b4:2d:e7:3b:a6:e6:c0:72:98:90:cb:83:29:af:13: d0:a6:17:bb:19:b1:94:6b:1c:cf:08:24:86:31:1d:e2:42:b9: d7:dc:b1:7f:61:16:07:13:17:33:80:f7:76:17:15:87:64:f6: bf:db:35:22:31:8e:8a:62:f3:ec:a8:37:1c:06:66:27:6c:44: 62:a0:46:14:22:9f:03:13:df:58:6d:8b:43:61:47:d9:a8:0e: dd:db:2c:fb:ad:65:62:f7:c9:38:8d:36:aa:c4:09:4b:97:40: c9:f0:50:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTzyftdNHO+SEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZjZjNWNjMjAtMGNlNi00MzA3LTg0MmUtNzc3OTg5Y2E1MmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP4by6ej7tG860WAr0e8wqdidzd35LbwSGcU 3By/57X4lGBLERLop+AevACf2oP/giA3eJfOm2mB56omKCeApGW2bZpZtI20hy4b Whkti9RqtA1rivdWA2PY9I36KN6prto59Cp98MQiV3NJmbsQ9ccYdfG203P+WxUk /Mj4dbfpiaY6Vn3hihquS6Ka+JXqBxbZ+j9mNzME4TtdnIqWHCmVAgTSTe+6pf90 F0Iq/Ts8GpRZoJjhDYGmjHsAUFc6c/tTCFj2gW5ZU8GxaXp56sFk4ZzuZHzAnXpg baSfp1aXeRbX6KfypHgnf/240hoeggX+sZq+Ut7dxEgvue++vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8cE3wBOuQ94VU34XPz2Kt3LlvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvNDZmNGY4NGEtZjc0Ny0z Y2FhLWJiZDAtNzA1NzFjYmVkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ9EQrmOJDclZUmCd67Df5wEb96sPIqkGno6zX4WXFRn1g8c6fHnONy q2qrQpMpbH4DpynhrOCz9G8EAetfv+IpwT9lccMim0Q2qeGHwgzVUb9vKyGU9Gvc WlxKIyLocvoY7c7WF1pQhl8B41cEXTNoAkJ6pEPfAybtcf36B6DPJeDPWE4bXDyP p29Uwu4aAXNhlLQt5zum5sBymJDLgymvE9CmF7sZsZRrHM8IJIYxHeJCudfcsX9h FgcTFzOA93YXFYdk9r/bNSIxjopi8+yoNxwGZidsRGKgRhQinwMT31hti0NhR9mo Dt3bLPutZWL3yTiNNqrECUuXQMnwUNg= -----END CERTIFICATE-----Generated at Sun Apr 19 02:24:01 2026 by rpki-client