$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa File: cf45b857-9660-372f-b9ae-c17fb8c88862.roa (raw, json) Hash identifier: kHdzmztbt9pEMdsRgQeo6iMKkKGAURSqRKiNZTqRiPE= Subject key identifier: 53:0D:E7:D9:19:7E:3B:83:75:F2:6B:7D:04:2B:74:8C:BA:AE:43:2E Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584E5A4A22090FBAD17C96EE7120 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 198949 IP address blocks: 208.91.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:22:09:0f:ba:d1:7c:96:ee:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=d59414e5-4785-4882-b120-df62f49b1715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:e8:b5:22:97:bd:3f:45:48:9d:61:d8:7f: 85:2f:43:40:1f:95:bc:95:f4:82:f1:98:3c:8e:ea: c3:4f:85:3d:af:d5:15:82:91:94:57:74:85:9f:b5: 6d:67:21:85:b5:d8:1c:6f:3a:88:73:67:b8:03:dd: 57:33:f8:ca:e2:a0:3d:78:40:e8:9a:ee:6f:0a:b7: 23:0e:cf:0b:7f:f3:28:00:c4:0c:5e:69:d4:8b:05: 7e:5c:f5:e6:3c:6f:cc:ca:84:8c:bc:4f:7b:56:24: 6c:56:ed:6d:1b:5f:15:86:bf:25:25:90:38:ce:eb: 68:46:c6:21:67:8d:4b:20:7a:0a:1c:64:40:5f:2c: e3:54:d6:6d:1e:4b:f0:2f:51:c2:b0:60:9b:2e:48: 6c:b7:a8:4c:b5:0a:80:d0:65:f6:43:e3:2f:83:0a: 04:f3:9d:de:35:5d:b1:96:cd:95:77:72:95:41:e2: 38:98:50:dc:3e:3d:34:09:07:2d:41:bb:62:42:1d: 65:93:6a:a9:19:d5:8c:1b:b5:4b:64:9a:9f:e2:5f: 6d:bf:28:bc:ff:a5:80:0a:42:8f:78:70:8b:db:d5: ea:38:95:28:68:78:65:47:81:f8:14:90:5d:82:16: 39:89:d3:0e:18:8e:a4:7b:08:2e:7f:f1:b5:4b:b6: 32:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0D:E7:D9:19:7E:3B:83:75:F2:6B:7D:04:2B:74:8C:BA:AE:43:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 208.91.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:dd:e8:16:7c:de:bb:29:43:84:ea:46:1d:2d:96:fa:c7:88: 1c:b1:66:80:b8:97:6b:95:c6:d1:da:a7:33:7e:b7:df:04:0a: 49:64:3e:e8:a0:16:46:ff:2d:96:b8:53:fa:f2:4b:10:f0:f8: 7d:a6:d3:5b:88:74:60:a6:0e:44:c3:53:0d:14:3a:b4:e9:1e: 31:d1:0b:7d:8a:51:d4:c5:62:81:2b:74:b2:46:2f:e4:08:49: 8b:a2:5d:60:40:db:e2:3a:59:96:bd:32:57:1a:13:52:8a:bc: 88:14:a8:de:d2:66:2d:5e:19:64:9f:a8:f7:7d:73:48:bb:50: 58:5a:0d:a4:48:33:28:f9:f5:a3:44:5f:44:47:a5:59:26:1c: e3:d1:66:44:c1:3b:a2:e0:62:54:51:18:77:75:82:bf:f2:ba: 72:0d:77:71:ab:c6:4c:36:3e:6a:6b:0e:ee:64:e8:2f:ca:cd: 4f:e5:6d:fb:11:37:38:6a:b4:47:92:2e:92:d3:cc:b0:a1:8a: ed:bf:ba:91:ca:11:09:3c:f8:ed:e6:c9:6c:1f:60:e0:31:6c: 15:7b:9d:1f:33:94:11:e7:f3:26:0d:ae:21:0e:a1:5e:d2:8e: 5b:09:9c:65:95:dd:e7:a5:39:17:a4:ba:bd:3e:a3:65:66:c8: 34:d7:c2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSiIJD7rRfJbucSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDU5NDE0ZTUtNDc4NS00ODgyLWIxMjAtZGY2MmY0OWIxNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJPotSKXvT9FSJ1h2H+FL0NAH5W8lfSC8Zg8 jurDT4U9r9UVgpGUV3SFn7VtZyGFtdgcbzqIc2e4A91XM/jK4qA9eEDomu5vCrcj Ds8Lf/MoAMQMXmnUiwV+XPXmPG/MyoSMvE97ViRsVu1tG18Vhr8lJZA4zutoRsYh Z41LIHoKHGRAXyzjVNZtHkvwL1HCsGCbLkhst6hMtQqA0GX2Q+MvgwoE853eNV2x ls2Vd3KVQeI4mFDcPj00CQctQbtiQh1lk2qpGdWMG7VLZJqf4l9tvyi8/6WACkKP eHCL29XqOJUoaHhlR4H4FJBdghY5idMOGI6kewguf/G1S7YyOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMN59kZfjuDdfJrfQQrdIy6rkMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvY2Y0NWI4NTctOTY2MC0z NzJmLWI5YWUtYzE3ZmI4Yzg4ODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnd6BZ83rspQ4TqRh0tlvrHiByxZoC4l2uVxtHapzN+t98ECklkPuig Fkb/LZa4U/rySxDw+H2m01uIdGCmDkTDUw0UOrTpHjHRC32KUdTFYoErdLJGL+QI SYuiXWBA2+I6WZa9MlcaE1KKvIgUqN7SZi1eGWSfqPd9c0i7UFhaDaRIMyj59aNE X0RHpVkmHOPRZkTBO6LgYlRRGHd1gr/yunINd3Grxkw2PmprDu5k6C/KzU/lbfsR NzhqtEeSLpLTzLChiu2/upHKEQk8+O3myWwfYOAxbBV7nR8zlBHn8yYNriEOoV7S jlsJnGWV3eelORekur0+o2VmyDTXwjE= -----END CERTIFICATE-----Generated at Sat Jul 18 04:11:21 2026 by rpki-client