$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa File: b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa (raw, json) Hash identifier: xCeGOJPi78BBAjVAophXug2/E2VzGbkkMWRFaEaSH6I= Subject key identifier: 3E:D7:03:D3:3D:D9:D5:6D:E7:34:62:8A:F4:37:A5:1D:43:56:30:7B Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584CF85238885FF8E4A482F7C680 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 46606 IP address blocks: 104.254.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:38:88:5f:f8:e4:a4:82:f7:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=7c738c5e-9ce3-4329-bce7-32f428c09943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5e:53:fd:97:90:ef:be:c6:a4:81:2c:c9:af: 8a:2a:3e:f3:38:18:ab:78:8d:5c:21:2c:8b:a7:68: c7:f1:15:6f:98:d9:f1:16:cd:9b:2f:5d:f3:df:7b: 1d:55:73:b7:ab:10:52:b7:60:97:d4:43:ed:2d:2e: 3c:99:59:a0:ea:43:51:4d:11:2b:bc:fe:34:50:28: 0c:c1:99:51:6d:14:00:02:7f:c3:32:a1:bf:03:42: 95:51:aa:20:c4:e7:66:5a:1a:44:e9:1b:51:46:46: 41:fc:37:7f:9a:96:f1:ab:1d:ed:0a:50:67:62:f8: 32:6e:8a:62:2f:f9:e7:3a:5e:a0:c5:80:2d:17:ea: 6a:d8:c2:9b:e5:7f:88:8c:33:24:db:1d:1f:33:c9: 49:06:9b:fb:f9:d5:e5:19:aa:8e:3d:2f:f1:f1:45: 31:d0:22:49:58:63:97:59:66:b0:74:67:77:5e:08: 71:4b:c7:a8:66:d8:54:73:e8:f8:6a:af:46:43:9f: 3f:4f:c1:b4:a3:8b:06:76:9f:d0:7b:bf:68:1b:67: 9a:c7:84:e7:50:8e:2d:e1:1a:81:83:21:db:bd:f8: a2:57:2b:8d:ce:68:3a:84:b4:39:cb:95:cb:fb:e5: 1b:2c:07:10:f1:20:fd:ab:60:02:5b:ae:ef:c7:9b: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D7:03:D3:3D:D9:D5:6D:E7:34:62:8A:F4:37:A5:1D:43:56:30:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/b5c4d7d9-c234-3da5-94db-c6b54672c5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 104.254.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4c:16:0f:69:a2:2e:99:fc:76:1e:e2:7e:2a:19:bb:20:c8: 82:24:38:0b:e3:ef:ae:ac:a4:77:ad:49:ab:ad:86:14:a0:95: b3:d8:c2:86:0f:12:5d:f7:58:b0:cd:6e:fe:8c:b2:d0:dd:cd: c8:a0:a9:2f:a0:09:87:f2:bc:d2:5d:6c:75:77:5b:4c:07:3e: 63:4c:76:fe:04:56:0c:f3:91:31:d7:72:ee:bb:e2:a5:90:b4: eb:bb:12:b9:06:e9:9a:5e:42:81:2e:3e:60:62:da:1c:c2:1c: 10:81:c2:01:30:ff:6f:b5:40:7b:ed:e4:62:ed:be:01:ce:91: 5c:d9:e2:09:9c:7b:10:ef:f7:e4:7f:d9:2e:01:92:6f:de:98: 69:9a:e9:a5:61:28:47:75:78:0c:ac:74:b7:e9:5f:7f:3b:32: c0:5f:ae:80:3b:c8:c8:17:ef:ce:d4:5b:e0:00:16:13:ce:8f: 43:46:94:cb:58:45:ac:0f:8b:cd:05:ba:48:83:2a:b0:33:08: f2:52:c2:48:d6:9f:4b:5a:0f:ab:f4:2e:f0:f4:0d:a3:27:21: 1b:72:e0:03:98:b0:9f:40:bc:fa:90:f0:31:5b:26:3a:fc:17: 7d:65:2c:50:53:16:98:b7:5c:30:d2:59:a7:ec:91:da:2d:dd: 42:6a:4c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UjiIX/jkpIL3xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk N2M3MzhjNWUtOWNlMy00MzI5LWJjZTctMzJmNDI4YzA5OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl5T/ZeQ777GpIEsya+KKj7zOBireI1cISyL p2jH8RVvmNnxFs2bL13z33sdVXO3qxBSt2CX1EPtLS48mVmg6kNRTRErvP40UCgM wZlRbRQAAn/DMqG/A0KVUaogxOdmWhpE6RtRRkZB/Dd/mpbxqx3tClBnYvgybopi L/nnOl6gxYAtF+pq2MKb5X+IjDMk2x0fM8lJBpv7+dXlGaqOPS/x8UUx0CJJWGOX WWawdGd3XghxS8eoZthUc+j4aq9GQ58/T8G0o4sGdp/Qe79oG2eax4TnUI4t4RqB gyHbvfiiVyuNzmg6hLQ5y5XL++UbLAcQ8SD9q2ACW67vx5sbiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7XA9M92dVt5zRiivQ3pR1DVjB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvYjVjNGQ3ZDktYzIzNC0z ZGE1LTk0ZGItYzZiNTQ2NzJjNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJMFg9poi6Z/HYe4n4qGbsgyIIkOAvj766spHetSauthhSglbPYwoYP El33WLDNbv6MstDdzcigqS+gCYfyvNJdbHV3W0wHPmNMdv4EVgzzkTHXcu674qWQ tOu7ErkG6ZpeQoEuPmBi2hzCHBCBwgEw/2+1QHvt5GLtvgHOkVzZ4gmcexDv9+R/ 2S4Bkm/emGma6aVhKEd1eAysdLfpX387MsBfroA7yMgX787UW+AAFhPOj0NGlMtY RawPi80FukiDKrAzCPJSwkjWn0taD6v0LvD0DaMnIRty4AOYsJ9AvPqQ8DFbJjr8 F31lLFBTFpi3XDDSWafskdot3UJqTK0= -----END CERTIFICATE-----Generated at Thu Feb 26 07:29:28 2026 by rpki-client