$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa File: cf45b857-9660-372f-b9ae-c17fb8c88862.roa (raw, json) Hash identifier: DNBKCs4yqDQWf7FPssHoOYTKCNDtBPuUABcLloH2JN4= Subject key identifier: 4F:C3:37:CD:0C:5E:64:E0:EF:7B:EF:FF:CF:9C:93:DA:29:F1:2E:7B Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584D7A05536614852B82DF2C3000 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 198949 IP address blocks: 208.91.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:53:66:14:85:2b:82:df:2c:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=f3631e36-4e66-41a4-93f4-38f1306b0fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:6d:ad:13:8d:73:8a:25:05:90:2d:3d:e6: 1f:ab:c2:83:5c:49:7e:6b:45:fe:78:ef:8f:47:ed: e3:2e:b2:5b:78:c4:5b:5f:3c:eb:35:b7:a3:b9:77: a2:22:f3:08:09:9a:72:52:d6:be:09:4e:81:e2:bb: 2e:bb:5a:d6:c7:2e:d2:96:0a:c1:bf:70:f2:58:e6: b3:a7:25:e0:ab:94:40:95:a6:7b:f6:2a:aa:03:59: 23:e8:ee:03:f9:4a:45:6f:be:8f:6e:e8:d0:09:05: eb:e4:92:1f:14:31:4b:14:44:63:97:ed:4e:09:04: a4:a3:0b:7c:11:a3:e8:57:16:69:49:19:28:bd:cc: db:b1:a5:e0:5c:7e:5e:70:01:bd:5f:c2:89:c6:ca: 7b:8a:b1:82:58:13:f4:43:fa:4a:33:0b:73:0b:1d: 76:4d:a2:02:b9:ec:da:be:da:b4:7a:13:ce:4f:8b: 83:37:6a:0c:36:85:56:c5:79:66:18:6b:0d:6a:82: af:bd:da:26:f7:57:fd:6f:b5:60:41:96:09:51:e5: 4c:c7:12:02:90:6b:45:20:3c:bf:93:3d:1e:75:15: f1:4b:5b:02:0b:f1:e7:0b:08:2c:85:c9:1f:d8:60: ee:68:cb:e1:f8:5f:3d:0d:a1:dc:bb:fc:5d:43:77: fd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:37:CD:0C:5E:64:E0:EF:7B:EF:FF:CF:9C:93:DA:29:F1:2E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/cf45b857-9660-372f-b9ae-c17fb8c88862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 208.91.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:27:af:d2:d8:a8:be:91:9e:0e:ef:3e:47:2f:04:52:43:82: 65:e9:6a:19:23:d5:00:75:87:65:3e:9d:2e:c9:ce:49:e1:c7: 73:7d:c6:9f:2b:81:df:67:83:0a:24:d9:0e:38:70:d4:60:97: 30:ca:fd:dd:39:c7:71:0a:62:43:19:37:61:47:59:13:01:41: 91:ff:83:c2:52:67:3c:35:c9:ce:e3:90:85:d4:25:bc:e1:0f: 83:b0:14:30:5d:31:0e:54:cf:9c:72:48:4d:e4:62:68:0d:67: 1b:94:e4:1c:76:db:8c:4e:39:a2:b6:f4:4d:65:ba:37:be:00: e3:73:c5:09:45:f6:54:7c:5a:7f:28:e3:8a:aa:d9:76:06:38: a0:9e:a7:68:5d:d6:d7:93:a3:43:11:f5:a0:31:84:1b:1d:f7: 12:de:58:c2:f9:43:f6:39:27:10:e0:d3:c7:3b:53:21:85:71: 40:5e:7d:0c:02:18:c4:ac:fb:aa:27:1c:b3:71:21:ba:08:ed: 5a:51:35:70:0b:8a:8a:4e:33:04:8e:0f:b0:4c:d9:b3:ba:45: a5:03:d6:9e:f1:ec:95:0c:27:8f:15:f0:6b:73:4f:24:7d:1a: de:d9:e0:80:a9:05:85:be:af:05:3a:e2:45:5e:1c:cd:fc:b8: a0:a5:d7:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BVNmFIUrgt8sMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZjM2MzFlMzYtNGU2Ni00MWE0LTkzZjQtMzhmMTMwNmIwZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps5trRONc4olBZAtPeYfq8KDXEl+a0X+eO+P R+3jLrJbeMRbXzzrNbejuXeiIvMICZpyUta+CU6B4rsuu1rWxy7SlgrBv3DyWOaz pyXgq5RAlaZ79iqqA1kj6O4D+UpFb76PbujQCQXr5JIfFDFLFERjl+1OCQSkowt8 EaPoVxZpSRkovczbsaXgXH5ecAG9X8KJxsp7irGCWBP0Q/pKMwtzCx12TaICueza vtq0ehPOT4uDN2oMNoVWxXlmGGsNaoKvvdom91f9b7VgQZYJUeVMxxICkGtFIDy/ kz0edRXxS1sCC/HnCwgshckf2GDuaMvh+F89DaHcu/xdQ3f9QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/DN80MXmTg73vv/8+ck9op8S57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvY2Y0NWI4NTctOTY2MC0z NzJmLWI5YWUtYzE3ZmI4Yzg4ODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADInr9LYqL6Rng7vPkcvBFJDgmXpahkj1QB1h2U+nS7Jzknhx3N9xp8r gd9ngwok2Q44cNRglzDK/d05x3EKYkMZN2FHWRMBQZH/g8JSZzw1yc7jkIXUJbzh D4OwFDBdMQ5Uz5xySE3kYmgNZxuU5Bx224xOOaK29E1luje+AONzxQlF9lR8Wn8o 44qq2XYGOKCep2hd1teTo0MR9aAxhBsd9xLeWML5Q/Y5JxDg08c7UyGFcUBefQwC GMSs+6onHLNxIboI7VpRNXALiopOMwSOD7BM2bO6RaUD1p7x7JUMJ48V8GtzTyR9 Gt7Z4ICpBYW+rwU64kVeHM38uKCl11w= -----END CERTIFICATE-----Generated at Mon Apr 13 17:20:31 2026 by rpki-client