$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa File: bbec8323-0391-336b-8a6c-269e4d8a1f32.roa (raw, json) Hash identifier: cuvROqWHHNj/QC7A/ByVWUq4vsHadCzxwZfZx+/gTZo= Subject key identifier: 34:17:42:08:4C:65:17:CA:64:48:AC:B2:32:4E:3F:74:E2:42:77:7F Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584DA11AC16BBE6C7BC524CFEF00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 2152 IP address blocks: 198.189.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:c1:6b:be:6c:7b:c5:24:cf:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=13bbb35a-ec99-47cd-813f-9a93654ef450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:11:79:98:35:10:8f:a2:a9:14:a8:3f:e1: e8:43:75:0e:18:91:a0:fb:9a:2d:e4:c5:6d:8b:f2: 44:e8:df:a6:e8:bf:5c:de:f2:a3:d2:ee:7f:9c:94: 09:9b:39:17:df:77:d1:a1:92:9a:76:84:f7:c4:df: a8:1c:cc:be:08:3c:e1:67:63:36:06:31:b2:cf:61: d3:bf:fa:73:18:b9:e3:56:8f:fd:ce:e0:d9:a0:4a: cc:2c:0b:00:29:c3:ee:f5:ff:2f:78:7e:be:17:b9: a5:91:88:60:3e:c3:59:de:e1:de:fd:b8:dc:38:16: 35:41:15:84:e3:8f:43:4e:55:d0:df:14:26:30:c9: 72:76:66:5b:90:4a:3e:d6:61:f5:0a:43:5e:d7:37: 9b:4f:b4:fb:9d:2f:48:fb:db:06:0b:d4:aa:0b:fa: 7a:18:53:0c:0c:92:55:9b:02:f1:19:0b:11:ca:38: c5:65:c5:fd:13:37:fa:a6:6a:27:4d:87:8e:24:86: a9:e5:81:16:a0:f6:bf:94:4a:75:3d:20:6a:42:eb: ed:33:9d:2e:a1:5d:a8:38:c0:5a:05:b8:a4:fc:10: 77:8e:68:be:da:58:ea:15:fd:36:b3:54:4c:78:7f: 14:31:fe:12:b6:82:15:ba:c8:6f:1c:4c:e4:5b:e2: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:17:42:08:4C:65:17:CA:64:48:AC:B2:32:4E:3F:74:E2:42:77:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/bbec8323-0391-336b-8a6c-269e4d8a1f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.189.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b2:aa:0b:57:36:62:da:12:28:7d:63:87:dc:f4:ff:bf:61: f5:25:f4:55:4b:70:23:f8:fc:10:6e:fe:a1:de:b9:c1:b5:b4: 10:67:2d:f7:42:90:17:38:35:f9:ec:b9:88:6a:b5:9d:5a:54: e5:01:89:84:16:f0:1c:cb:df:32:ce:05:a8:8d:5c:4d:31:34: a7:76:4e:bc:ce:8e:e4:e1:fc:00:a0:a1:0f:c1:de:8d:be:c2: 40:3d:fd:41:3b:28:e1:82:e5:b8:d1:81:33:ca:19:3e:85:75: b8:33:5c:b8:ef:bb:e3:be:d9:e3:28:fc:62:57:48:b3:10:a2: 98:a6:88:52:12:10:45:a5:7b:5c:26:8e:c4:26:71:20:8b:ed: 7d:c2:fa:16:8d:a9:87:ee:8b:17:fd:7c:14:6a:03:c1:83:d5: fa:09:14:22:09:77:47:d7:46:4a:c8:8b:74:df:d9:da:1c:ef: 9d:88:2b:f6:a1:5c:95:c8:a3:3d:c8:be:b6:38:4e:11:cc:b4: 98:6d:d1:33:e3:b3:fc:8f:b3:96:a7:51:dc:8a:a9:0e:1b:c9: 95:ab:02:83:4e:8a:09:be:09:a0:71:92:84:a9:47:5c:0c:fb: 46:02:5d:5d:ef:ca:f7:8c:04:df:6c:b5:77:d7:23:8b:79:a7: c3:32:8e:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsFrvmx7xSTP7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MTNiYmIzNWEtZWM5OS00N2NkLTgxM2YtOWE5MzY1NGVmNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKUReZg1EI+iqRSoP+HoQ3UOGJGg+5ot5MVt i/JE6N+m6L9c3vKj0u5/nJQJmzkX33fRoZKadoT3xN+oHMy+CDzhZ2M2BjGyz2HT v/pzGLnjVo/9zuDZoErMLAsAKcPu9f8veH6+F7mlkYhgPsNZ3uHe/bjcOBY1QRWE 449DTlXQ3xQmMMlydmZbkEo+1mH1CkNe1zebT7T7nS9I+9sGC9SqC/p6GFMMDJJV mwLxGQsRyjjFZcX9Ezf6pmonTYeOJIap5YEWoPa/lEp1PSBqQuvtM50uoV2oOMBa Bbik/BB3jmi+2ljqFf02s1RMeH8UMf4StoIVushvHEzkW+LoqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQXQghMZRfKZEissjJOP3TiQnd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYmJlYzgzMjMtMDM5MS0z MzZiLThhNmMtMjY5ZTRkOGExZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACyqgtXNmLaEih9Y4fc9P+/YfUl9FVLcCP4/BBu/qHeucG1tBBnLfdC kBc4NfnsuYhqtZ1aVOUBiYQW8BzL3zLOBaiNXE0xNKd2TrzOjuTh/ACgoQ/B3o2+ wkA9/UE7KOGC5bjRgTPKGT6FdbgzXLjvu+O+2eMo/GJXSLMQopimiFISEEWle1wm jsQmcSCL7X3C+haNqYfuixf9fBRqA8GD1foJFCIJd0fXRkrIi3Tf2doc752IK/ah XJXIoz3IvrY4ThHMtJht0TPjs/yPs5anUdyKqQ4byZWrAoNOigm+CaBxkoSpR1wM +0YCXV3vyveMBN9stXfXI4t5p8Myjp4= -----END CERTIFICATE-----Generated at Wed May 13 11:38:01 2026 by rpki-client