$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1683da02-49bc-312e-b2db-6cf8b98f0f2d.roa File: 1683da02-49bc-312e-b2db-6cf8b98f0f2d.roa (raw, json) Hash identifier: 14QcjlQGrPfuSaASiumDD+xSJ9GZtNU/yF5nI3mZpps= Subject key identifier: E5:11:B9:09:42:94:2C:90:E5:C9:74:51:30:03:05:DF:99:79:E4:51 Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584F49748BE8653E49CABAA01180 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1683da02-49bc-312e-b2db-6cf8b98f0f2d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 198949 IP address blocks: 104.254.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:8b:e8:65:3e:49:ca:ba:a0:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ce804a2-908b-42f4-a5a1-4ebb760e4d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:14:9c:3b:4f:0f:af:a6:11:33:ba:40:be: e9:5d:23:3f:3a:45:1f:a6:1d:29:72:6c:52:0d:7f: 2f:cc:70:db:64:9b:d4:05:11:51:56:af:21:1d:b2: 34:73:e6:40:c4:da:6c:91:44:0f:9f:d4:5a:0c:43: e0:7c:0e:bb:10:02:b6:bf:3c:fe:9d:53:b6:de:f1: 42:36:69:d9:b7:ae:81:d4:ff:ef:ee:37:92:4e:10: ab:15:b5:e4:1e:6b:b9:98:95:48:d3:19:d4:11:59: ab:c0:f8:0f:a8:0d:52:bb:6d:c7:8b:69:f1:a3:dc: dd:24:4d:ad:f2:97:dc:51:33:65:fa:56:c5:73:5f: 9d:f1:62:43:ee:1a:6f:ab:bb:5c:a9:55:59:45:81: bd:05:93:3d:04:34:86:f1:96:88:26:59:04:87:fc: a0:47:10:28:a7:9b:a3:bf:57:ce:77:8c:68:24:80: 06:7a:64:ba:d4:13:2b:db:b7:96:2c:b4:10:2f:cb: d6:48:39:04:4e:8e:75:cd:1d:1f:9f:1b:b8:f9:80: fa:f6:ff:b8:64:63:98:3c:c2:f5:77:03:f6:22:29: 8c:96:7d:1a:82:4f:e9:9d:69:c8:01:e8:26:82:5f: 84:4f:26:5c:04:10:38:7a:de:22:dc:ed:99:a1:11: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:11:B9:09:42:94:2C:90:E5:C9:74:51:30:03:05:DF:99:79:E4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/1683da02-49bc-312e-b2db-6cf8b98f0f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 104.254.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:98:97:e0:7b:57:5b:35:21:70:7c:71:0a:7f:a6:f9:bf:8e: b6:1a:9a:8a:2f:ab:7e:b4:42:88:11:4b:75:20:1f:38:ca:87: e0:ba:f7:21:67:15:18:08:3a:f7:66:24:07:e5:fc:b5:f6:39: 9b:40:72:8f:f2:07:af:c4:2d:ce:a3:b6:bd:b1:0a:8e:4d:5d: bd:04:22:18:c3:fa:bc:55:1d:4f:88:fa:be:92:a4:00:c8:ed: d3:b8:f3:48:34:44:7a:aa:c1:31:1c:1b:55:a4:21:fc:a9:ae: 5b:44:87:bd:fc:5b:87:09:0a:26:cd:d6:f4:26:38:e0:25:c2: ec:f9:38:5e:3a:26:91:55:ab:11:c2:1e:46:7a:9d:7f:8f:19: e2:e0:fc:ca:bc:d1:a3:f9:05:01:7b:be:01:31:83:92:3d:20: 5c:82:63:5f:4f:28:c1:3c:bf:ff:3f:d4:07:08:d8:b6:05:a7: 8f:bc:03:d3:ce:5a:b7:ec:f3:91:0f:31:01:88:d1:1b:64:69: 4d:76:30:76:66:05:0a:37:ae:2b:3c:94:55:67:a2:6b:ff:3a: f7:18:0c:20:b2:11:f1:58:b2:4a:4f:5e:36:ff:39:a3:59:f4: 3b:5d:86:ce:e3:b3:00:c2:eb:f9:54:2f:1e:05:47:66:84:3a: 18:e6:cc:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIvoZT5JyrqgEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNlODA0YTItOTA4Yi00MmY0LWE1YTEtNGViYjc2MGU0ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofsUnDtPD6+mETO6QL7pXSM/OkUfph0pcmxS DX8vzHDbZJvUBRFRVq8hHbI0c+ZAxNpskUQPn9RaDEPgfA67EAK2vzz+nVO23vFC NmnZt66B1P/v7jeSThCrFbXkHmu5mJVI0xnUEVmrwPgPqA1Su23Hi2nxo9zdJE2t 8pfcUTNl+lbFc1+d8WJD7hpvq7tcqVVZRYG9BZM9BDSG8ZaIJlkEh/ygRxAop5uj v1fOd4xoJIAGemS61BMr27eWLLQQL8vWSDkETo51zR0fnxu4+YD69v+4ZGOYPML1 dwP2IimMln0agk/pnWnIAegmgl+ETyZcBBA4et4i3O2ZoRElIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOURuQlClCyQ5cl0UTADBd+ZeeRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMTY4M2RhMDItNDliYy0z MTJlLWIyZGItNmNmOGI5OGYwZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuYl+B7V1s1IXB8cQp/pvm/jrYamoovq360QogRS3UgHzjKh+C69yFn FRgIOvdmJAfl/LX2OZtAco/yB6/ELc6jtr2xCo5NXb0EIhjD+rxVHU+I+r6SpADI 7dO480g0RHqqwTEcG1WkIfyprltEh738W4cJCibN1vQmOOAlwuz5OF46JpFVqxHC HkZ6nX+PGeLg/Mq80aP5BQF7vgExg5I9IFyCY19PKME8v/8/1AcI2LYFp4+8A9PO Wrfs85EPMQGI0RtkaU12MHZmBQo3ris8lFVnomv/OvcYDCCyEfFYskpPXjb/OaNZ 9Dtdhs7jswDC6/lULx4FR2aEOhjmzAI= -----END CERTIFICATE-----Generated at Sun Oct 11 18:22:48 2026 by rpki-client