$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/21aa8a7c-dd55-3018-8233-62464fb0646d.roa File: 21aa8a7c-dd55-3018-8233-62464fb0646d.roa (raw, json) Hash identifier: cM/pdhz1q12qfFKR7vRDeWvF7YUbwyeL6GEtN1ltxew= Subject key identifier: 6E:79:76:BB:58:B3:F9:4D:C4:21:C7:C9:25:E6:A3:29:AB:9A:33:78 Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584D6DE4CAA4E4D61AB1337A6200 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/21aa8a7c-dd55-3018-8233-62464fb0646d.roa Signing time: Tue 07 Apr 2026 16:45:40 +0000 ROA not before: Tue 07 Apr 2026 16:45:40 +0000 ROA not after: Mon 06 Jul 2026 16:45:40 +0000 asID: 198949 IP address blocks: 162.210.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:e4:ca:a4:e4:d6:1a:b1:33:7a:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Apr 7 16:45:40 2026 GMT Not After : Jul 6 16:45:40 2026 GMT Subject: CN=0935f466-c0a3-4828-b60c-5a6e2bdb6f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:01:be:1d:f8:c2:6d:6a:89:33:8d:e0:05:95: ed:f9:f0:bd:19:cc:27:0f:d2:1e:b9:1f:46:26:37: dc:f9:92:a9:9c:ff:95:d7:66:84:54:85:e7:eb:b1: e5:97:aa:7f:00:b4:4e:9e:6b:38:90:e4:f1:c4:1e: ce:1d:1b:7a:b8:2b:ee:37:a3:a4:56:46:d2:4d:88: d0:81:d3:6b:36:73:38:14:38:bc:d2:5e:a3:4e:08: a1:6b:5c:bd:8f:93:1f:84:6f:f7:a4:d9:bd:ce:73: ca:66:da:7c:30:54:2a:a3:1a:81:7e:6e:16:2a:6a: 20:1a:59:bc:0d:2c:70:23:ae:83:db:bb:5a:14:23: 4b:4a:34:ca:9f:b0:8c:e9:af:80:d1:3e:13:2a:e0: d1:ee:a8:b4:01:0c:58:16:d6:28:69:e2:0b:97:e3: 24:e3:da:e6:d0:f1:2c:15:4c:d1:c2:7b:a0:ba:e0: 5f:08:a8:b4:6d:db:3f:1c:1f:23:24:48:cd:b7:9a: 1c:c9:3a:a5:7d:8c:61:4f:23:da:67:b8:16:0c:e8: 09:58:7a:3f:2f:18:fc:d9:04:14:33:02:d4:d7:5d: 68:89:2e:62:ed:f7:42:63:28:44:92:ab:89:d1:b2: a9:e2:2c:fb:53:a2:e4:d9:17:4c:bf:eb:4f:f2:aa: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:79:76:BB:58:B3:F9:4D:C4:21:C7:C9:25:E6:A3:29:AB:9A:33:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/21aa8a7c-dd55-3018-8233-62464fb0646d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 162.210.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e1:26:7a:c0:86:85:85:d6:73:bc:0b:f3:b5:3b:42:ec:60: 93:70:c4:f3:83:44:e6:f0:e5:d1:02:ca:7d:d0:46:2e:8e:94: 10:e4:a2:d5:19:95:ec:65:a3:cb:d6:28:1b:9e:e0:ce:27:4e: 55:0c:fa:59:9a:54:d5:1f:51:71:19:7c:5d:99:b4:a2:c3:ba: cc:e1:3b:4d:44:61:d4:7d:25:8e:02:39:e0:01:0d:dd:98:4f: cd:97:a2:59:5a:9f:d1:5b:cf:1f:64:4e:20:56:d3:5f:cb:bc: 3f:10:35:d1:5f:05:b2:45:c4:a5:7a:48:65:8d:16:2d:fd:6d: 50:8f:c7:ed:12:e4:08:7a:5a:71:85:29:4c:1c:0d:5f:fe:5e: 9e:c9:39:bd:23:0f:37:53:74:d6:c2:11:ef:4d:f0:3d:c8:12: bd:20:32:12:e8:25:06:d1:49:00:cf:ef:ce:15:bf:7d:d8:a4: 75:48:12:43:3f:5b:b8:5c:66:78:d1:90:6d:04:23:47:b7:81: fe:d7:3a:a0:8c:d5:70:ae:06:a2:bc:ac:85:f8:0b:e7:af:31: b8:56:cb:80:48:3e:0b:af:6b:6b:3c:4a:76:04:3e:91:86:77: e2:b5:bc:3f:95:a9:90:10:e5:a3:b7:27:7c:3c:57:6d:e4:ef: 92:07:a1:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t5Mqk5NYasTN6YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDQwNzE2NDU0MFoXDTI2MDcwNjE2NDU0MFowLzEtMCsGA1UEAxMk MDkzNWY0NjYtYzBhMy00ODI4LWI2MGMtNWE2ZTJiZGI2ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwG+HfjCbWqJM43gBZXt+fC9GcwnD9IeuR9G Jjfc+ZKpnP+V12aEVIXn67Hll6p/ALROnms4kOTxxB7OHRt6uCvuN6OkVkbSTYjQ gdNrNnM4FDi80l6jTgiha1y9j5MfhG/3pNm9znPKZtp8MFQqoxqBfm4WKmogGlm8 DSxwI66D27taFCNLSjTKn7CM6a+A0T4TKuDR7qi0AQxYFtYoaeILl+Mk49rm0PEs FUzRwnuguuBfCKi0bds/HB8jJEjNt5ocyTqlfYxhTyPaZ7gWDOgJWHo/Lxj82QQU MwLU111oiS5i7fdCYyhEkquJ0bKp4iz7U6Lk2RdMv+tP8qpN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG55drtYs/lNxCHHySXmoymrmjN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMjFhYThhN2MtZGQ1NS0z MDE4LTgyMzMtNjI0NjRmYjA2NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPhJnrAhoWF1nO8C/O1O0LsYJNwxPODRObw5dECyn3QRi6OlBDkotUZ lexlo8vWKBue4M4nTlUM+lmaVNUfUXEZfF2ZtKLDuszhO01EYdR9JY4COeABDd2Y T82Xollan9Fbzx9kTiBW01/LvD8QNdFfBbJFxKV6SGWNFi39bVCPx+0S5Ah6WnGF KUwcDV/+Xp7JOb0jDzdTdNbCEe9N8D3IEr0gMhLoJQbRSQDP784Vv33YpHVIEkM/ W7hcZnjRkG0EI0e3gf7XOqCM1XCuBqK8rIX4C+evMbhWy4BIPguva2s8SnYEPpGG d+K1vD+VqZAQ5aO3J3w8V23k75IHoXQ= -----END CERTIFICATE-----Generated at Mon Apr 13 17:13:58 2026 by rpki-client