$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/09cc1575-76c9-3013-869c-60560a4d603d.roa File: 09cc1575-76c9-3013-869c-60560a4d603d.roa (raw, json) Hash identifier: lhmd5cD+tYOKCLftJCLuSOuH9+a7Qr9brhqZC+pa4cs= Subject key identifier: 1F:86:82:F8:22:48:95:A8:1C:57:CC:72:89:D3:74:78:5F:3F:34:34 Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584DF6E9AE728655D681FC0B5420 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/09cc1575-76c9-3013-869c-60560a4d603d.roa Signing time: Tue 26 May 2026 18:41:16 +0000 ROA not before: Tue 26 May 2026 18:41:16 +0000 ROA not after: Mon 24 Aug 2026 18:41:16 +0000 asID: 26337 IP address blocks: 104.254.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:e9:ae:72:86:55:d6:81:fc:0b:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: May 26 18:41:16 2026 GMT Not After : Aug 24 18:41:16 2026 GMT Subject: CN=28ae8a7f-0be1-4d9e-897a-4e15c9cceb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:db:e9:27:61:2d:03:cc:31:ae:ea:3e:60:d5: 31:9b:fe:d2:64:15:27:8c:85:b1:cd:be:76:94:fa: 59:2d:8e:80:4d:36:b0:42:c8:59:08:55:d1:45:58: a3:c1:f6:f5:b9:6a:5f:e8:9d:7c:4e:a5:e9:0f:3d: 0e:c1:61:11:ae:ce:22:20:b4:1b:4f:e0:4f:cb:4c: 48:ef:3a:06:b0:ef:ad:d3:b1:52:c2:dc:21:fa:b2: c9:a9:fa:b2:d1:fb:b6:a2:fe:92:51:99:2a:a2:c7: a6:11:89:f3:54:1f:4a:15:b5:7c:ba:50:98:db:b0: cf:aa:1b:a3:8d:54:97:89:39:91:4b:2b:fa:e9:3c: b1:93:bd:e8:bf:cf:fd:82:5f:ee:e3:0b:3c:d7:8e: 18:6f:52:9b:c3:ba:b7:f1:58:74:91:dc:27:df:59: d9:e0:9a:94:42:c4:4c:18:60:52:26:73:86:f8:fb: 1f:a1:95:18:03:15:82:e4:9f:c5:48:50:1a:f1:ad: c4:58:b2:b9:73:49:fe:40:7f:c9:d4:a8:1f:88:c6: 50:e1:68:bf:05:05:af:89:dc:09:4c:46:01:f6:3f: 70:e2:4d:ed:2d:54:d3:8a:52:1f:80:a2:c7:e9:24: 39:19:0c:50:48:df:f4:1f:77:67:de:a9:65:14:bb: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:86:82:F8:22:48:95:A8:1C:57:CC:72:89:D3:74:78:5F:3F:34:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/09cc1575-76c9-3013-869c-60560a4d603d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 104.254.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:de:40:72:f3:cd:f0:25:56:e4:ef:68:16:85:ee:0c:1d:03: c8:ef:93:39:63:5b:82:a2:04:c1:e9:27:80:21:4a:4b:8e:ec: 30:66:34:97:54:c3:0d:54:31:d6:a5:9b:34:67:96:09:61:3f: f6:98:ec:5a:85:5c:af:8f:0d:33:a9:4a:80:ba:b3:54:d9:0b: 80:d8:04:46:f7:ac:a4:d3:20:8d:fd:09:8e:62:49:10:0c:d2: 97:1e:52:6e:ff:2d:1a:c8:ef:80:97:af:88:a0:1d:60:5a:af: a4:e5:2e:46:3b:c6:37:70:8a:8c:5f:48:61:17:ea:bf:af:a2: a3:48:c0:c3:34:0d:43:47:ab:c7:22:ec:ea:5e:04:be:7d:f7: 7a:da:51:b8:fb:80:d4:85:d8:00:73:28:84:60:60:af:f6:a4: 10:b4:77:db:7c:d3:1b:8a:ce:c9:f7:06:d6:ac:a2:85:c1:b7: 93:10:dc:50:b4:d7:b2:ef:94:b1:65:f0:2f:2d:f7:81:0c:5b: 98:3d:fb:2b:44:72:8b:35:b3:05:45:f5:60:2d:97:c1:3b:04: 84:8a:42:ca:82:0d:03:8b:e7:68:f6:61:40:d9:f2:82:0b:77: 67:d1:da:79:29:b0:97:cf:db:67:9e:a4:75:0a:49:cb:b6:b3: b4:0c:1a:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE326a5yhlXWgfwLVCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDUyNjE4NDExNloXDTI2MDgyNDE4NDExNlowLzEtMCsGA1UEAxMk MjhhZThhN2YtMGJlMS00ZDllLTg5N2EtNGUxNWM5Y2NlYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydvpJ2EtA8wxruo+YNUxm/7SZBUnjIWxzb52 lPpZLY6ATTawQshZCFXRRVijwfb1uWpf6J18TqXpDz0OwWERrs4iILQbT+BPy0xI 7zoGsO+t07FSwtwh+rLJqfqy0fu2ov6SUZkqosemEYnzVB9KFbV8ulCY27DPqhuj jVSXiTmRSyv66Tyxk73ov8/9gl/u4ws8144Yb1Kbw7q38Vh0kdwn31nZ4JqUQsRM GGBSJnOG+PsfoZUYAxWC5J/FSFAa8a3EWLK5c0n+QH/J1KgfiMZQ4Wi/BQWvidwJ TEYB9j9w4k3tLVTTilIfgKLH6SQ5GQxQSN/0H3dn3qllFLvLLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+GgvgiSJWoHFfMconTdHhfPzQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMDljYzE1NzUtNzZjOS0z MDEzLTg2OWMtNjA1NjBhNGQ2MDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAreQHLzzfAlVuTvaBaF7gwdA8jvkzljW4KiBMHpJ4AhSkuO7DBmNJdU ww1UMdalmzRnlglhP/aY7FqFXK+PDTOpSoC6s1TZC4DYBEb3rKTTII39CY5iSRAM 0pceUm7/LRrI74CXr4igHWBar6TlLkY7xjdwioxfSGEX6r+voqNIwMM0DUNHq8ci 7OpeBL5993raUbj7gNSF2ABzKIRgYK/2pBC0d9t80xuKzsn3BtasooXBt5MQ3FC0 17LvlLFl8C8t94EMW5g9+ytEcos1swVF9WAtl8E7BISKQsqCDQOL52j2YUDZ8oIL d2fR2nkpsJfP22eepHUKScu2s7QMGvI= -----END CERTIFICATE-----Generated at Tue Jun 2 22:08:56 2026 by rpki-client