$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/2930e92f-2c2b-3d36-bdfb-1299df0a8289.roa File: 2930e92f-2c2b-3d36-bdfb-1299df0a8289.roa (raw, json) Hash identifier: DTVN4OmjvkrSUm5lb5vfWLJUfvkVVxUsqokz7lEHfbQ= Subject key identifier: 4F:0C:03:E7:A6:9C:84:35:89:68:CD:66:92:E4:6A:7F:F9:00:26:0C Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584F9E9879111C527D0B9039DF80 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/2930e92f-2c2b-3d36-bdfb-1299df0a8289.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 198949 IP address blocks: 207.174.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:79:11:1c:52:7d:0b:90:39:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=1ee84b9b-3c80-4baa-9a93-26a72cd8f5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b0:75:61:ca:2f:10:7e:e3:dc:26:86:14:49: d3:86:f2:dc:d6:70:ac:99:01:29:b4:b9:87:54:83: d8:d0:d9:e1:cb:ff:3a:3a:29:3d:3e:0d:77:88:7c: 01:af:66:f7:cd:9d:5e:5a:b6:30:f2:80:9d:92:cb: fc:f6:21:9c:4a:9f:16:4d:8e:fc:d4:af:a1:5c:7c: d0:92:6f:ff:ed:e8:78:d8:cc:eb:9c:a1:79:21:59: 21:c3:a4:90:a6:c8:0b:77:49:31:3c:7e:5f:84:6e: 10:f7:98:98:65:5b:42:98:2d:80:2c:e6:8a:f4:e5: 66:7e:be:a6:bc:1b:8e:37:05:fe:33:aa:6e:6e:a8: ae:e5:4b:c7:a5:05:3f:4f:45:d6:f0:f0:a4:f8:f5: 3f:31:b7:78:3c:34:36:af:f1:d5:a3:98:ca:9a:31: 07:d6:fa:a1:3b:66:ad:25:56:25:b9:55:21:77:75: ac:6e:3b:25:b0:fa:5f:ed:b6:4e:21:76:51:ec:e5: 48:8b:c4:a4:8c:f8:0d:a2:cc:2c:9c:10:aa:77:85: 42:9e:ab:a5:6e:49:ad:24:b2:0b:b3:34:4d:c5:6a: a1:49:a8:a8:92:04:e9:0a:4d:16:bf:5d:40:17:08: 0a:7e:1e:b0:e4:50:ed:c0:32:95:66:13:ca:19:e1: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0C:03:E7:A6:9C:84:35:89:68:CD:66:92:E4:6A:7F:F9:00:26:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/2930e92f-2c2b-3d36-bdfb-1299df0a8289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 207.174.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:3e:d3:dc:b8:36:80:ae:02:10:9e:e1:a8:b1:be:b3:b2:37: 06:26:6c:6a:fd:6c:3f:74:50:6e:fd:cd:93:a5:c5:8c:2f:05: d8:69:4d:46:04:4c:d1:f1:45:97:03:20:26:2d:89:47:e6:35: de:90:c6:6f:cb:1b:24:ea:fb:59:9c:fd:34:ed:d7:0e:c4:0b: fa:6a:61:c9:02:4e:0b:7f:4a:d3:92:c4:9f:bf:9b:b8:e7:c8: 1b:81:9b:96:9e:c8:5b:cc:af:65:8f:a0:9a:e0:0c:f8:f6:1e: b5:99:c9:35:5b:90:8d:02:8b:b4:00:50:8e:02:23:8f:44:1f: 4d:9a:6f:ab:13:96:74:3f:f0:39:7b:77:57:a2:59:e8:ed:5a: 55:99:05:e7:a8:85:96:f9:da:c0:ea:b0:58:bd:ac:01:bf:40: 6c:3e:ab:86:6a:26:db:3b:7a:6d:69:6e:9d:0b:56:db:ce:3e: 80:a7:40:b0:5a:9a:ea:19:04:b6:ed:45:f5:f9:84:8c:8c:e6: e8:90:a5:23:c0:0a:76:8e:c1:9b:33:f1:54:ad:85:f7:9a:6b: 13:cb:05:ca:c0:11:74:8e:bf:b9:83:1e:f9:63:50:e1:96:26: 7c:7e:12:a3:22:f8:5a:08:ab:f9:de:f6:9d:5e:79:aa:93:da: 45:a7:ad:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emHkRHFJ9C5A534AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk MWVlODRiOWItM2M4MC00YmFhLTlhOTMtMjZhNzJjZDhmNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrB1YcovEH7j3CaGFEnThvLc1nCsmQEptLmH VIPY0Nnhy/86Oik9Pg13iHwBr2b3zZ1eWrYw8oCdksv89iGcSp8WTY781K+hXHzQ km//7eh42MzrnKF5IVkhw6SQpsgLd0kxPH5fhG4Q95iYZVtCmC2ALOaK9OVmfr6m vBuONwX+M6pubqiu5UvHpQU/T0XW8PCk+PU/Mbd4PDQ2r/HVo5jKmjEH1vqhO2at JVYluVUhd3WsbjslsPpf7bZOIXZR7OVIi8SkjPgNoswsnBCqd4VCnqulbkmtJLIL szRNxWqhSaiokgTpCk0Wv11AFwgKfh6w5FDtwDKVZhPKGeHo1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8MA+emnIQ1iWjNZpLkan/5ACYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMjkzMGU5MmYtMmMyYi0z ZDM2LWJkZmItMTI5OWRmMGE4Mjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz67UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM+09y4NoCuAhCe4aixvrOyNwYmbGr9bD90UG79zZOlxYwvBdhpTUYE TNHxRZcDICYtiUfmNd6Qxm/LGyTq+1mc/TTt1w7EC/pqYckCTgt/StOSxJ+/m7jn yBuBm5aeyFvMr2WPoJrgDPj2HrWZyTVbkI0Ci7QAUI4CI49EH02ab6sTlnQ/8Dl7 d1eiWejtWlWZBeeohZb52sDqsFi9rAG/QGw+q4ZqJts7em1pbp0LVtvOPoCnQLBa muoZBLbtRfX5hIyM5uiQpSPACnaOwZsz8VSthfeaaxPLBcrAEXSOv7mDHvljUOGW Jnx+EqMi+FoIq/ne9p1eeaqT2kWnrXo= -----END CERTIFICATE-----Generated at Tue Oct 27 04:54:34 2026 by rpki-client