$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/9b1334cf-683b-3a89-bf80-6fba151d1a9a.roa File: 9b1334cf-683b-3a89-bf80-6fba151d1a9a.roa (raw, json) Hash identifier: 2NYOtk6x7oUMxw305+N4KCi7WzWlnu00dOMbZuX22Lo= Subject key identifier: 81:2A:8C:DC:62:AB:35:81:C2:85:E7:B2:02:D4:B4:20:6D:E7:C8:BF Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584DF6EA2C6EDFB71F4F5DDC6E80 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/9b1334cf-683b-3a89-bf80-6fba151d1a9a.roa Signing time: Tue 26 May 2026 18:42:16 +0000 ROA not before: Tue 26 May 2026 18:42:16 +0000 ROA not after: Mon 24 Aug 2026 18:42:16 +0000 asID: 31898 IP address blocks: 104.254.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:ea:2c:6e:df:b7:1f:4f:5d:dc:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: May 26 18:42:16 2026 GMT Not After : Aug 24 18:42:16 2026 GMT Subject: CN=f7be3021-bd23-409c-98e8-d2049734df09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:05:6c:d0:14:d6:46:c5:82:25:18:81:17:f0: 81:2c:71:48:ea:04:50:c7:f6:aa:f5:13:7e:e9:fa: 13:d1:f5:21:26:ed:33:8e:a3:14:81:6f:b8:cb:07: 81:ca:6f:f6:43:2a:59:55:be:64:51:5a:ed:ac:36: a5:c9:36:4a:08:61:c2:54:a5:6a:b2:42:a6:1d:2d: f3:d1:d1:87:3e:f5:87:25:88:21:bb:c6:ff:1c:19: 21:7f:74:20:c8:7c:44:5f:17:12:23:ab:e6:95:2a: 2f:c0:d6:c3:54:78:65:01:41:c8:c9:d8:d3:34:c5: 9c:be:2a:f9:8f:d5:4d:1b:49:17:01:49:28:03:25: 1f:ff:1f:d0:46:e7:ce:0e:f5:c3:ae:f9:90:29:e3: d3:87:33:5f:66:ce:15:96:76:15:ed:73:be:f1:d2: ed:d4:d3:22:f7:f4:b2:8b:4e:a1:af:ad:15:0d:3d: 11:d0:93:2f:44:45:14:52:d0:38:b9:c0:e1:6b:4e: bd:0d:c1:18:91:ea:4f:9a:aa:ea:52:0f:f8:6b:fc: f9:c4:ec:e7:32:1b:e6:c6:01:d5:a5:0f:f1:b9:c0: 96:03:63:32:5c:be:73:5b:33:f0:1e:3e:ca:f9:9b: be:b8:f1:7a:f0:b0:3a:c4:e6:41:78:e1:fb:5e:d4: 16:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2A:8C:DC:62:AB:35:81:C2:85:E7:B2:02:D4:B4:20:6D:E7:C8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/9b1334cf-683b-3a89-bf80-6fba151d1a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 104.254.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:48:04:35:6d:66:be:9f:fb:8e:c8:f6:42:cb:af:02:b8:93: fb:73:86:27:50:21:7e:e0:08:af:02:b8:36:b0:e1:34:ed:20: 44:68:53:b7:47:04:9d:da:51:00:30:54:b1:74:9f:5d:2f:fb: 3d:af:2f:fc:f0:ff:59:d2:70:ef:1b:c1:40:10:da:7c:99:01: c9:4f:11:c0:83:e8:44:d6:d4:71:31:96:65:73:4f:8a:f8:4f: 22:0d:13:15:9c:f8:44:81:8e:88:66:32:ba:75:e6:08:bb:f8: ef:0d:6f:e9:61:d3:52:cf:2c:9e:88:b4:97:c8:81:b5:9d:5f: d6:c8:c6:0d:40:7e:1c:c5:5c:45:49:13:6e:db:63:96:a9:b9: 51:92:17:e7:20:60:95:df:12:b2:d1:17:65:0b:34:1d:4b:dd: 54:21:41:db:9e:a6:54:27:f0:78:04:d8:59:c2:64:d7:ce:e0: 1a:70:c4:80:a2:75:a7:6d:1e:9c:7e:c8:d0:eb:60:d5:42:fa: 66:71:86:d1:f0:09:ca:d6:20:81:b6:23:ba:d5:7b:10:0e:dc: 3a:ef:01:08:e9:0f:ba:1b:c1:44:64:65:f6:5f:25:b6:31:39: 00:56:9c:bf:be:8e:22:5f:04:49:08:6b:34:78:53:58:10:7c: c1:f6:95:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE326ixu37cfT13cboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDUyNjE4NDIxNloXDTI2MDgyNDE4NDIxNlowLzEtMCsGA1UEAxMk ZjdiZTMwMjEtYmQyMy00MDljLTk4ZTgtZDIwNDk3MzRkZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQVs0BTWRsWCJRiBF/CBLHFI6gRQx/aq9RN+ 6foT0fUhJu0zjqMUgW+4yweBym/2QypZVb5kUVrtrDalyTZKCGHCVKVqskKmHS3z 0dGHPvWHJYghu8b/HBkhf3QgyHxEXxcSI6vmlSovwNbDVHhlAUHIydjTNMWcvir5 j9VNG0kXAUkoAyUf/x/QRufODvXDrvmQKePThzNfZs4VlnYV7XO+8dLt1NMi9/Sy i06hr60VDT0R0JMvREUUUtA4ucDha069DcEYkepPmqrqUg/4a/z5xOznMhvmxgHV pQ/xucCWA2MyXL5zWzPwHj7K+Zu+uPF68LA6xOZBeOH7XtQWNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEqjNxiqzWBwoXnsgLUtCBt58i/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvOWIxMzM0Y2YtNjgzYi0z YTg5LWJmODAtNmZiYTE1MWQxYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClIBDVtZr6f+47I9kLLrwK4k/tzhidQIX7gCK8CuDaw4TTtIERoU7dH BJ3aUQAwVLF0n10v+z2vL/zw/1nScO8bwUAQ2nyZAclPEcCD6ETW1HExlmVzT4r4 TyINExWc+ESBjohmMrp15gi7+O8Nb+lh01LPLJ6ItJfIgbWdX9bIxg1AfhzFXEVJ E27bY5apuVGSF+cgYJXfErLRF2ULNB1L3VQhQdueplQn8HgE2FnCZNfO4BpwxICi dadtHpx+yNDrYNVC+mZxhtHwCcrWIIG2I7rVexAO3DrvAQjpD7obwURkZfZfJbYx OQBWnL++jiJfBEkIazR4U1gQfMH2la8= -----END CERTIFICATE-----Generated at Thu May 28 15:24:05 2026 by rpki-client