$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa File: aff2f39e-faa0-3953-afbf-237b8e2372fa.roa (raw, json) Hash identifier: fOdLRszzknBHjpx1GESphRZwxYM5+pHQMyO8wix9kvs= Subject key identifier: 3A:19:C7:45:85:17:DB:42:68:01:6B:31:E0:E9:17:2A:8F:D7:D1:F5 Certificate issuer: /CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9 Certificate serial: 010D0C9F4328584D5243C1E01F64C4FCB9E029C0 Authority key identifier: 2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 22616 IP address blocks: 162.82.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c1:e0:1f:64:c4:fc:b9:e0:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=e1b7a3cd-a703-4c4a-8ffb-c1d79e874bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:3e:97:ef:be:77:a4:1b:42:ac:ed:cb:fe:2e: c1:18:ef:50:12:d3:d3:9c:e5:f6:42:5f:81:77:32: 60:10:34:17:0e:72:0e:72:20:ea:b3:3c:9e:d0:8d: 71:5d:e0:34:00:6c:4c:f2:0e:e4:4f:5a:81:0a:fd: a8:75:37:2d:81:6c:64:46:73:ec:31:80:70:5f:bf: b1:60:79:fb:49:47:d1:31:9a:4d:24:8a:f9:7a:7c: ac:ab:95:ed:46:4f:97:aa:ee:70:b3:9e:88:2a:ce: bc:5c:04:b2:b6:30:1f:d9:91:4b:c4:9d:b2:dc:ec: c9:8f:5b:66:09:d1:2a:cf:4e:1e:23:ff:a4:5c:05: ae:cf:a5:de:7f:50:f2:dc:d5:ef:82:f3:05:bf:f4: f3:10:90:e2:c7:99:98:0e:4e:68:42:af:d9:a4:83: e4:7a:52:28:d6:09:52:93:e3:56:1f:f1:78:2c:4f: 09:9c:50:94:e5:78:f0:ac:5f:2e:bc:2c:c2:f4:43: 6b:6a:a2:a1:d6:04:92:b6:88:a5:f1:85:93:0b:b8: 61:7e:0d:48:c2:e7:a0:a8:7c:8e:d9:ba:09:fd:9c: 9a:55:ac:b5:ae:bd:b8:e3:a3:d8:50:85:b9:15:13: 50:5b:30:b2:48:74:71:e2:82:22:73:71:52:50:7a: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:C7:45:85:17:DB:42:68:01:6B:31:E0:E9:17:2A:8F:D7:D1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl X509v3 Authority Key Identifier: keyid:2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer sbgp-ipAddrBlock: critical IPv4: 162.82.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:13:a5:2f:6f:9b:c5:c8:44:46:2a:0b:8a:cd:c3:bd:72:a6: eb:f7:cd:19:92:78:9c:2e:4d:d2:6d:4c:06:85:8f:c4:3d:ff: 14:76:61:c4:38:9e:1a:b4:08:c2:07:05:4c:87:7e:2e:09:3e: fd:0a:b8:77:cb:7c:a4:cc:0b:4c:86:c3:17:7c:fd:a2:17:00: ab:7e:c0:ca:dd:3f:97:d4:fd:1d:16:3d:f1:e7:e0:e5:96:0b: 52:f4:6f:87:40:99:37:ea:3f:5b:bf:9f:56:68:67:8c:80:fd: 69:57:a9:c0:f8:74:a0:72:ae:4b:30:ff:db:98:e2:5a:72:29: 2d:a6:c5:01:fb:8c:24:5d:af:01:d1:ce:96:8a:43:e2:92:20: 7c:6f:d9:a6:8a:54:2d:52:4f:62:99:e7:84:a1:37:db:32:38: 22:ab:57:9e:eb:56:3f:7d:26:a7:43:32:6f:d0:46:84:dd:7e: aa:e7:4d:7e:fc:26:f9:52:81:60:46:5f:92:e8:ab:43:ac:fb: fd:db:43:fb:20:2f:37:45:84:f6:13:2f:72:d0:db:f0:ce:ce: 48:33:7e:a1:8c:d1:c8:4d:5f:df:18:e8:6d:b1:cc:5e:1b:56: 09:d0:66:e2:eb:eb:4e:87:cd:65:f0:60:eb:31:ad:a3:8b:c3: bf:7d:a1:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8HgH2TE/LngKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJlY2UxMjQtMzM4MC00Y2I0LTg2NTEtYWQ1ZTFlMjdm M2Y5MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZTFiN2EzY2QtYTcwMy00YzRhLThmZmItYzFkNzllODc0YmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+j6X7753pBtCrO3L/i7BGO9QEtPTnOX2Ql+B dzJgEDQXDnIOciDqszye0I1xXeA0AGxM8g7kT1qBCv2odTctgWxkRnPsMYBwX7+x YHn7SUfRMZpNJIr5enysq5XtRk+Xqu5ws56IKs68XASytjAf2ZFLxJ2y3OzJj1tm CdEqz04eI/+kXAWuz6Xef1Dy3NXvgvMFv/TzEJDix5mYDk5oQq/ZpIPkelIo1glS k+NWH/F4LE8JnFCU5XjwrF8uvCzC9ENraqKh1gSStoil8YWTC7hhfg1IwuegqHyO 2boJ/ZyaVay1rr2446PYUIW5FRNQWzCySHRx4oIic3FSUHrVbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoZx0WFF9tCaAFrMeDpFyqP19H1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYmVj ZTEyNC0zMzgwLTRjYjQtODY1MS1hZDVlMWUyN2YzZjkvYWZmMmYzOWUtZmFhMC0z OTUzLWFmYmYtMjM3YjhlMjM3MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmJlY2UxMjQtMzM4MC00Y2I0LTg2 NTEtYWQ1ZTFlMjdmM2Y5L2JiZWNlMTI0LTMzODAtNGNiNC04NjUxLWFkNWUxZTI3 ZjNmOS5jcmwwHwYDVR0jBBgwFoAUL2Epco6jsKmajtRB8Duci45lErIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYmVjZTEyNC0zMzgwLTRjYjQtODY1MS1hZDVl MWUyN2YzZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAolL+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQTpS9vm8XIREYqC4rNw71ypuv3zRmSeJwuTdJtTAaFj8Q9/xR2YcQ4 nhq0CMIHBUyHfi4JPv0KuHfLfKTMC0yGwxd8/aIXAKt+wMrdP5fU/R0WPfHn4OWW C1L0b4dAmTfqP1u/n1ZoZ4yA/WlXqcD4dKByrksw/9uY4lpyKS2mxQH7jCRdrwHR zpaKQ+KSIHxv2aaKVC1ST2KZ54ShN9syOCKrV57rVj99JqdDMm/QRoTdfqrnTX78 JvlSgWBGX5Loq0Os+/3bQ/sgLzdFhPYTL3LQ2/DOzkgzfqGM0chNX98Y6G2xzF4b VgnQZuLr606HzWXwYOsxraOLw799odo= -----END CERTIFICATE-----Generated at Mon Mar 30 04:48:03 2026 by rpki-client