$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/82b657dc-f470-3085-be37-5998c014f044.roa File: 82b657dc-f470-3085-be37-5998c014f044.roa (raw, json) Hash identifier: wzFZfw2oKet3y3U9IbPSkcZAS3d0EDXB1q8IqSrkisY= Subject key identifier: F0:6F:F0:72:FD:80:86:59:88:7B:93:48:58:CE:2E:C8:33:4E:66:EE Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584F27F25FF5B4B0D147BAC08C80 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/82b657dc-f470-3085-be37-5998c014f044.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 198949 IP address blocks: 74.119.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:5f:f5:b4:b0:d1:47:ba:c0:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=f1655b1f-cef4-4e90-854a-dfaf7bf2b551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4f:c8:c3:a5:ef:bf:60:a2:3e:1e:b7:78:2e: 9d:c3:bd:70:f2:ad:e9:c1:f0:00:77:55:13:ea:f6: 72:6a:7f:fb:42:52:1f:9e:b5:5b:ca:e4:fd:e8:e9: 65:47:28:79:3a:30:4d:28:89:c5:0d:e0:07:f8:b4: 3f:40:ad:a0:9c:4a:1f:da:c9:f9:7e:f1:b4:8e:09: 42:15:3c:f5:9c:57:23:75:c8:5f:56:61:fa:7a:df: 59:f0:21:71:26:14:06:f0:4d:c1:f4:b9:95:e9:70: 94:48:f2:cb:32:47:cc:96:e0:b1:ea:5c:7f:81:d5: e1:6f:57:ef:da:b4:88:fa:26:c6:32:46:7c:b4:ca: dc:ed:9d:7a:3b:7a:c3:52:81:1b:7e:04:17:57:0f: 52:63:0a:43:fb:4c:a6:ac:b3:84:5b:83:ef:28:b5: bd:fa:21:be:01:29:20:6f:22:a1:e7:d2:0e:6a:2c: 70:f5:c7:ec:0c:b8:47:25:d9:89:44:50:a3:36:8b: 03:43:dc:e9:30:dd:f2:b0:46:be:ed:b1:84:93:58: fd:a2:f1:47:43:b1:5d:7d:c4:78:4f:10:f0:c8:1c: 86:e4:1c:78:44:29:69:5d:85:2b:4b:7d:14:20:a0: f3:75:98:12:9f:71:75:bd:85:dd:3f:9f:07:85:be: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6F:F0:72:FD:80:86:59:88:7B:93:48:58:CE:2E:C8:33:4E:66:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/82b657dc-f470-3085-be37-5998c014f044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 74.119.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:66:7f:56:d7:3c:0e:da:34:1f:cd:ed:a0:0f:e4:ee:3f:16: 81:fb:7e:3d:59:93:47:14:4b:38:4d:dc:b6:30:0c:d4:68:8a: 6b:4f:13:2a:18:c7:48:a0:21:8e:4e:b0:52:d5:fd:8c:e1:6c: b1:58:02:fd:af:40:a0:58:09:1d:f9:df:ea:19:c0:e9:39:79: c2:e8:b0:9e:18:4f:3b:52:ef:61:cc:91:14:87:1b:dd:b3:a0: b2:0c:96:7d:7f:b2:fe:6e:3e:60:b2:3b:ec:cb:c3:36:e1:81: e4:3c:54:d2:a3:69:e6:fc:2b:26:75:6c:12:01:ed:a7:89:3f: 08:87:80:71:68:c7:4d:72:da:ef:57:ee:ee:72:0a:65:53:6e: 02:26:76:ad:69:0c:21:27:d1:c0:3b:9f:72:4c:99:2d:3a:e8: 3b:70:dd:1e:6d:8d:4d:bf:a9:ab:c1:12:65:5d:ea:33:02:f4: a9:75:8f:85:45:24:a2:3b:26:bc:83:1e:25:a0:d7:ce:02:15: 69:0c:95:15:b4:2f:ed:f0:46:6c:18:f0:9b:70:96:99:82:f0: e2:16:73:66:2b:d7:25:e4:cf:13:26:91:07:fd:d3:b6:b2:00: 9d:3d:5e:93:8c:ac:ca:43:c3:26:d8:2f:b6:9d:2d:09:08:1b: ff:fe:11:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8l/1tLDRR7rAjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjE2NTViMWYtY2VmNC00ZTkwLTg1NGEtZGZhZjdiZjJiNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk/Iw6Xvv2CiPh63eC6dw71w8q3pwfAAd1UT 6vZyan/7QlIfnrVbyuT96OllRyh5OjBNKInFDeAH+LQ/QK2gnEof2sn5fvG0jglC FTz1nFcjdchfVmH6et9Z8CFxJhQG8E3B9LmV6XCUSPLLMkfMluCx6lx/gdXhb1fv 2rSI+ibGMkZ8tMrc7Z16O3rDUoEbfgQXVw9SYwpD+0ymrLOEW4PvKLW9+iG+ASkg byKh59IOaixw9cfsDLhHJdmJRFCjNosDQ9zpMN3ysEa+7bGEk1j9ovFHQ7FdfcR4 TxDwyByG5Bx4RClpXYUrS30UIKDzdZgSn3F1vYXdP58Hhb6rdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBv8HL9gIZZiHuTSFjOLsgzTmbuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvODJiNjU3ZGMtZjQ3MC0z MDg1LWJlMzctNTk5OGMwMTRmMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlmf1bXPA7aNB/N7aAP5O4/FoH7fj1Zk0cUSzhN3LYwDNRoimtPEyoY x0igIY5OsFLV/YzhbLFYAv2vQKBYCR353+oZwOk5ecLosJ4YTztS72HMkRSHG92z oLIMln1/sv5uPmCyO+zLwzbhgeQ8VNKjaeb8KyZ1bBIB7aeJPwiHgHFox01y2u9X 7u5yCmVTbgImdq1pDCEn0cA7n3JMmS066Dtw3R5tjU2/qavBEmVd6jMC9Kl1j4VF JKI7JryDHiWg184CFWkMlRW0L+3wRmwY8JtwlpmC8OIWc2Yr1yXkzxMmkQf907ay AJ09XpOMrMpDwybYL7adLQkIG//+ESk= -----END CERTIFICATE-----Generated at Sun Oct 11 07:56:17 2026 by rpki-client