$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/aeaff025-2bc2-3cdd-9b5f-794b6a1e42a7.roa File: aeaff025-2bc2-3cdd-9b5f-794b6a1e42a7.roa (raw, json) Hash identifier: dgKpoYGUcz9qKbhl+ua+Obibl3wPFG9ZcjC+o33hX9I= Subject key identifier: CA:3F:1C:E8:E5:05:C0:D8:47:96:94:3E:12:FC:BD:1C:D3:4B:AE:8D Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584D7A05539539D601F0A5F46400 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/aeaff025-2bc2-3cdd-9b5f-794b6a1e42a7.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 198949 IP address blocks: 204.11.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:53:95:39:d6:01:f0:a5:f4:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=990f4eab-87f6-4f7e-b22b-77fd00c5ebc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:31:29:00:53:0a:0e:b6:c8:68:5b:b8:e6: 1c:6e:c5:cf:53:0b:be:83:32:ca:37:06:e4:f4:74: a0:d9:5d:4c:be:c1:80:cb:62:01:84:c5:ee:7e:20: 8e:7e:31:a5:d9:f4:08:c5:08:58:1c:18:e2:e4:98: f4:b1:5e:c8:6c:e4:3c:3e:52:e2:6d:19:ad:8d:23: dd:65:fd:70:c6:16:7c:f3:17:b8:ff:18:d5:1c:4c: 52:ee:05:02:f2:6b:09:f0:13:8c:28:a7:94:5f:69: 2a:1e:11:61:6c:b9:df:89:db:b5:97:e5:14:3e:b7: 0c:7a:8f:d9:2c:d4:71:51:ed:00:50:f1:3f:72:25: 6c:85:ce:94:46:fd:18:f0:c8:28:7c:c7:29:c6:11: a3:b4:e1:2c:9c:43:4e:9a:58:fd:21:84:d8:3d:c7: de:8e:ad:6d:d8:85:99:cb:bf:a4:d9:f4:0f:d2:2f: 4c:d1:b3:50:a2:1f:40:43:54:0b:ef:c2:34:8c:55: 61:c1:da:90:9a:3f:e5:1e:18:25:ac:b1:6b:75:88: 11:62:ec:c6:66:df:77:78:5a:af:f4:11:1a:88:43: ed:60:64:b3:8f:0d:4b:63:1f:74:f7:03:3c:95:47: 0f:ec:7d:ae:20:d6:a2:0c:6b:86:7f:40:33:b6:4c: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3F:1C:E8:E5:05:C0:D8:47:96:94:3E:12:FC:BD:1C:D3:4B:AE:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/aeaff025-2bc2-3cdd-9b5f-794b6a1e42a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 204.11.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:96:7d:94:bd:e5:f9:ff:ad:ba:99:45:ab:be:83:2c:05:de: 7f:9e:80:fd:a9:c9:85:2c:b0:30:59:c8:17:b9:51:4d:15:61: c2:29:ea:56:73:23:76:e8:b9:d7:87:39:30:53:35:1b:00:89: 21:e9:6a:2d:09:0d:dc:30:5b:4c:00:fc:92:67:88:27:44:54: b1:ea:1b:23:83:f5:e5:19:47:fb:1a:83:01:a0:d1:c4:a1:fb: ba:e4:f6:1b:b4:b4:48:46:fe:81:18:fd:29:fa:45:42:73:aa: 55:79:59:b5:44:83:90:da:13:39:a6:83:18:a4:70:4d:8d:ec: 3b:03:b0:14:9a:07:9d:5d:60:42:63:e9:d4:46:bf:99:fa:7b: ec:ed:23:12:56:96:5f:78:b7:97:f7:4a:d2:60:8a:9d:97:cb: ef:f9:81:f9:e1:a2:66:96:e6:b8:16:bd:78:2f:87:61:bd:90: 95:ed:2d:55:c1:8a:f1:7d:40:c7:41:a4:be:cc:c6:14:84:e7: 11:da:f4:bf:16:c9:6d:35:f4:39:13:78:88:b9:25:69:3a:dc: b5:f8:48:2d:0d:eb:b8:cb:ae:05:b6:62:a6:97:3f:1b:79:af: 4c:e8:d4:d5:6c:98:7b:93:a7:ff:99:37:3b:a5:eb:81:ce:56: 3e:1d:0f:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BVOVOdYB8KX0ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk OTkwZjRlYWItODdmNi00ZjdlLWIyMmItNzdmZDAwYzVlYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvYxKQBTCg62yGhbuOYcbsXPUwu+gzLKNwbk 9HSg2V1MvsGAy2IBhMXufiCOfjGl2fQIxQhYHBji5Jj0sV7IbOQ8PlLibRmtjSPd Zf1wxhZ88xe4/xjVHExS7gUC8msJ8BOMKKeUX2kqHhFhbLnfidu1l+UUPrcMeo/Z LNRxUe0AUPE/ciVshc6URv0Y8MgofMcpxhGjtOEsnENOmlj9IYTYPcfejq1t2IWZ y7+k2fQP0i9M0bNQoh9AQ1QL78I0jFVhwdqQmj/lHhglrLFrdYgRYuzGZt93eFqv 9BEaiEPtYGSzjw1LYx909wM8lUcP7H2uINaiDGuGf0AztkwL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo/HOjlBcDYR5aUPhL8vRzTS66NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvYWVhZmYwMjUtMmJjMi0z Y2RkLTliNWYtNzk0YjZhMWU0MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAs6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyWfZS95fn/rbqZRau+gywF3n+egP2pyYUssDBZyBe5UU0VYcIp6lZz I3boudeHOTBTNRsAiSHpai0JDdwwW0wA/JJniCdEVLHqGyOD9eUZR/sagwGg0cSh +7rk9hu0tEhG/oEY/Sn6RUJzqlV5WbVEg5DaEzmmgxikcE2N7DsDsBSaB51dYEJj 6dRGv5n6e+ztIxJWll94t5f3StJgip2Xy+/5gfnhomaW5rgWvXgvh2G9kJXtLVXB ivF9QMdBpL7MxhSE5xHa9L8WyW019DkTeIi5JWk63LX4SC0N67jLrgW2YqaXPxt5 r0zo1NVsmHuTp/+ZNzul64HOVj4dD8A= -----END CERTIFICATE-----Generated at Mon Apr 13 17:18:29 2026 by rpki-client