$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa File: da7256ed-b8b3-3316-80e4-db695c434382.roa (raw, json) Hash identifier: RiXmBlqj2e0doovDeS+kKXU3spfyTGU++Zn9mOiewuk= Subject key identifier: 0D:D5:46:8B:5F:B9:5D:61:3F:DF:BA:52:E0:1C:88:1B:A3:F9:A3:BE Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584D1B1A62DE2751B3E642A11EC0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16417 IP address blocks: 208.90.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:62:de:27:51:b3:e6:42:a1:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=2a02b81a-8735-4a20-9ace-38665906ae45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:15:b8:6a:50:da:31:ac:ab:91:de:09:89: 1e:68:35:b0:95:91:c5:e6:62:5f:84:42:5a:ed:cc: 09:9b:3b:7a:75:7a:58:22:72:58:20:3b:3a:ca:30: a0:ba:dd:0f:24:36:c8:27:e8:ce:64:6c:46:b9:ce: f1:0c:68:39:52:91:bf:5c:3d:5e:87:95:f9:45:f5: 13:b7:64:c8:dc:45:1e:00:d6:66:a5:99:7c:e4:9f: a3:b1:42:28:6b:37:75:f8:d9:77:e8:4d:e7:8e:c0: c6:1c:6c:ef:6d:ac:85:54:ce:52:f9:11:79:21:ef: 35:b5:a3:d8:e4:79:d7:98:5a:b8:f2:8d:b8:51:e4: a0:a8:89:f3:a5:77:a5:89:b5:ce:99:58:4c:d3:83: 77:dc:8d:3b:1c:75:fe:14:69:bb:1b:b1:b1:ff:6a: 0a:fb:ab:9d:b9:f3:5b:ba:1f:8f:3c:7d:f8:df:81: 5e:49:17:8e:76:c9:aa:d7:a2:fb:9f:a0:99:db:93: 58:7c:9d:bc:1d:67:a3:b2:33:80:fe:66:4c:09:17: 51:fd:85:72:91:ab:08:3c:08:a6:99:9e:c0:ba:db: 79:c8:35:62:3b:ba:e0:00:45:d7:81:2e:62:30:5b: 0e:52:a6:5a:76:f7:d0:85:f0:65:e3:e2:9b:65:14: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D5:46:8B:5F:B9:5D:61:3F:DF:BA:52:E0:1C:88:1B:A3:F9:A3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 208.90.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:18:ff:68:dc:df:9c:d4:93:0d:94:90:f7:53:e5:58:bc:01: fd:3f:7b:38:30:12:4b:0e:c0:89:8b:b2:64:b5:40:fc:f4:57: 19:75:9b:46:fe:e4:f7:2a:88:44:b3:7c:c9:06:ac:c2:bd:72: 83:6d:f1:c8:87:96:3c:7e:fa:56:e5:9f:88:2d:bd:6f:e6:2b: 30:a7:28:2e:2e:52:55:f1:f9:bb:bf:6b:65:60:79:93:53:04: 50:b5:7f:87:40:5a:cb:84:34:c6:00:52:90:b2:ba:ea:ba:8a: 21:67:64:65:00:e4:63:15:2c:9c:39:49:47:8b:3f:3a:a6:00: 85:4b:1c:2b:04:a2:1b:62:b2:9b:d3:f5:84:aa:7b:e7:cf:50: 80:da:ab:17:87:75:9b:12:49:e3:be:89:0a:d4:48:9a:9e:0a: 12:f1:b4:40:43:55:b9:14:b3:b4:84:4c:87:92:a4:e6:d0:43: 13:75:c5:4f:24:f2:33:8c:06:06:41:cb:a4:09:98:ac:61:77: d3:1b:10:5e:90:20:50:3f:c5:39:e9:fb:e6:41:ee:50:50:3e: 30:c4:e0:8a:bf:f9:ed:68:d0:93:fc:88:19:69:94:d5:4d:4c: 06:10:5c:5c:7c:be:4d:c7:78:41:b5:71:28:7c:f4:00:23:fc: e4:1d:ae:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmLeJ1Gz5kKhHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MmEwMmI4MWEtODczNS00YTIwLTlhY2UtMzg2NjU5MDZhZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiksVuGpQ2jGsq5HeCYkeaDWwlZHF5mJfhEJa 7cwJmzt6dXpYInJYIDs6yjCgut0PJDbIJ+jOZGxGuc7xDGg5UpG/XD1eh5X5RfUT t2TI3EUeANZmpZl85J+jsUIoazd1+Nl36E3njsDGHGzvbayFVM5S+RF5Ie81taPY 5HnXmFq48o24UeSgqInzpXelibXOmVhM04N33I07HHX+FGm7G7Gx/2oK+6udufNb uh+PPH3434FeSReOdsmq16L7n6CZ25NYfJ28HWejsjOA/mZMCRdR/YVykasIPAim mZ7Autt5yDViO7rgAEXXgS5iMFsOUqZadvfQhfBl4+KbZRT6SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3VRotfuV1hP9+6UuAciBuj+aO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGE3MjU2ZWQtYjhiMy0z MzE2LTgwZTQtZGI2OTVjNDM0MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIY/2jc35zUkw2UkPdT5Vi8Af0/ezgwEksOwImLsmS1QPz0Vxl1m0b+ 5PcqiESzfMkGrMK9coNt8ciHljx++lbln4gtvW/mKzCnKC4uUlXx+bu/a2VgeZNT BFC1f4dAWsuENMYAUpCyuuq6iiFnZGUA5GMVLJw5SUeLPzqmAIVLHCsEohtispvT 9YSqe+fPUIDaqxeHdZsSSeO+iQrUSJqeChLxtEBDVbkUs7SETIeSpObQQxN1xU8k 8jOMBgZBy6QJmKxhd9MbEF6QIFA/xTnp++ZB7lBQPjDE4Iq/+e1o0JP8iBlplNVN TAYQXFx8vk3HeEG1cSh89AAj/OQdrpo= -----END CERTIFICATE-----Generated at Thu Mar 19 21:40:49 2026 by rpki-client