$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa File: a0241a87-ee63-3ca4-8762-01bd022707da.roa (raw, json) Hash identifier: qT1K4pcNkqihOr3OJ3i+B9Qr+cQmU9LuCL/S2yVduB4= Subject key identifier: 1E:7D:6C:C6:8B:44:E6:FC:FE:21:0C:F1:88:34:E2:34:58:31:4D:19 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584EA7870025C976B6EE78436B80 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 208.90.236.0/24 maxlen: 24 208.90.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:00:25:c9:76:b6:ee:78:43:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3e8156cf-8e2b-4b36-83ec-2f39c8ba41d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:72:de:58:81:89:d8:3a:a5:aa:e4:ec:a4:e0: 2f:20:22:2a:27:dd:01:9c:cf:e1:d1:09:83:5a:cb: 6b:7c:6b:2f:40:1c:e9:f8:78:99:ce:ca:0e:d3:b8: a4:37:c5:25:31:4a:8a:a1:76:92:ae:b9:31:a3:b8: b5:d3:2d:28:13:45:30:d7:82:15:e1:19:26:74:dc: 1c:c5:da:21:68:b6:e1:8c:34:fb:c2:df:c2:40:e0: 81:69:3a:89:d0:80:02:8b:07:c0:e4:8d:1f:15:7a: e2:da:c2:03:e7:bd:76:f3:3c:d2:4c:a9:9f:fa:a4: 86:cf:68:41:5d:ae:9e:23:bc:54:d4:8b:c7:17:43: 07:ef:d2:a9:40:65:7f:b1:90:b4:54:12:23:47:5b: 37:05:23:d8:fe:06:86:ac:c1:34:b1:91:e0:7d:fb: d7:86:51:88:5b:90:33:63:ae:ea:f6:63:c9:ea:5a: a8:24:c6:47:44:77:ab:93:c1:c9:c5:6e:cb:71:b1: 5e:95:7d:90:cd:80:9f:61:bf:fc:a7:fb:0e:8b:cc: 08:2e:41:5e:dc:41:7a:71:ba:99:91:e2:90:a3:f6: f4:6a:77:90:60:c2:68:9d:ea:f9:fa:f4:79:61:1c: 27:4d:f1:72:c3:da:db:e1:db:75:fa:71:a0:12:97: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:6C:C6:8B:44:E6:FC:FE:21:0C:F1:88:34:E2:34:58:31:4D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:42:ed:5b:19:e8:bc:3c:85:72:91:41:b4:2b:46:ca:a8:4a: e9:aa:b5:00:a1:11:8b:46:21:60:f1:44:68:39:bf:bb:e4:e0: 4a:87:1c:97:3a:fc:3c:7d:c3:70:65:6a:00:0b:5f:9f:52:f9: 29:04:20:85:ea:34:46:23:f0:69:f5:aa:c2:96:76:b8:7f:86: e0:1a:cb:2c:f0:91:d1:b2:6b:cf:31:be:25:08:eb:ec:08:92: df:24:e6:ed:6b:cf:2f:dc:5b:e8:39:d9:2b:18:1d:71:77:1f: ac:d5:b5:dd:e5:ed:70:90:61:fa:db:cc:b5:07:5d:14:06:ea: b7:7c:4f:3d:9c:78:eb:f4:dc:e6:07:12:dc:9e:50:f2:97:ed: e4:6c:0c:28:03:d7:80:b0:3f:28:b4:ae:40:25:46:68:dc:c7: d9:31:a3:81:ba:3c:18:ce:24:b3:69:06:dc:c1:2c:e5:5f:5a: 9a:97:85:61:12:2f:e0:f6:08:41:e4:05:39:96:7a:74:89:e3: fb:12:4f:6f:66:44:6c:97:34:7b:a4:db:6f:26:19:f3:08:4a: f2:f9:40:17:67:9a:d4:05:c4:de:f6:b9:cd:d2:c8:ff:58:bd: 6c:51:44:ee:1d:62:fa:0b:2f:d8:8e:c8:de:68:1a:b8:47:da: e5:59:b4:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhwAlyXa27nhDa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2U4MTU2Y2YtOGUyYi00YjM2LTgzZWMtMmYzOWM4YmE0MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XLeWIGJ2DqlquTspOAvICIqJ90BnM/h0QmD WstrfGsvQBzp+HiZzsoO07ikN8UlMUqKoXaSrrkxo7i10y0oE0Uw14IV4RkmdNwc xdohaLbhjDT7wt/CQOCBaTqJ0IACiwfA5I0fFXri2sID57128zzSTKmf+qSGz2hB Xa6eI7xU1IvHF0MH79KpQGV/sZC0VBIjR1s3BSPY/gaGrME0sZHgffvXhlGIW5Az Y67q9mPJ6lqoJMZHRHerk8HJxW7LcbFelX2QzYCfYb/8p/sOi8wILkFe3EF6cbqZ keKQo/b0aneQYMJoner5+vR5YRwnTfFyw9rb4dt1+nGgEpc3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB59bMaLROb8/iEM8Yg04jRYMU0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvYTAyNDFhODctZWU2My0z Y2E0LTg3NjItMDFiZDAyMjcwN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdC7VsZ6Lw8hXKRQbQrRsqoSumqtQChEYtGIWDxRGg5v7vk4EqHHJc6 /Dx9w3BlagALX59S+SkEIIXqNEYj8Gn1qsKWdrh/huAayyzwkdGya88xviUI6+wI kt8k5u1rzy/cW+g52SsYHXF3H6zVtd3l7XCQYfrbzLUHXRQG6rd8Tz2ceOv03OYH EtyeUPKX7eRsDCgD14CwPyi0rkAlRmjcx9kxo4G6PBjOJLNpBtzBLOVfWpqXhWES L+D2CEHkBTmWenSJ4/sST29mRGyXNHuk228mGfMISvL5QBdnmtQFxN72uc3SyP9Y vWxRRO4dYvoLL9iOyN5oGrhH2uVZtEg= -----END CERTIFICATE-----Generated at Sat Sep 5 01:03:24 2026 by rpki-client