$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/db2bd2dc-9c09-33d1-a839-33a6f912371c.roa File: db2bd2dc-9c09-33d1-a839-33a6f912371c.roa (raw, json) Hash identifier: RqKVfPd53jfk494+aUGlaUcJbs7dfvJ1Sb+zPug8z0A= Subject key identifier: 6D:78:2E:6A:31:87:85:10:68:30:51:E8:62:AD:FE:5C:B0:68:A0:BC Certificate issuer: /CN=bb49c202-f644-4fa6-8a36-084312761f72 Certificate serial: 010D0C9F4328584F3A4DB5DB19755DF5B13BB0CC Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/db2bd2dc-9c09-33d1-a839-33a6f912371c.roa Signing time: Sat 19 Sep 2026 14:48:55 +0000 ROA not before: Sat 19 Sep 2026 14:48:55 +0000 ROA not after: Fri 18 Dec 2026 15:48:55 +0000 asID: 401362 IP address blocks: 104.245.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:4d:b5:db:19:75:5d:f5:b1:3b:b0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72 Validity Not Before: Sep 19 14:48:55 2026 GMT Not After : Dec 18 15:48:55 2026 GMT Subject: CN=a27cb528-37c0-4bb8-831f-912b6ac57cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:0d:1b:51:77:84:1e:eb:05:7e:da:80:09: a6:cc:d5:c7:33:84:b2:c9:04:06:e2:a8:69:1d:7d: 79:78:2e:24:c5:3d:41:cc:40:91:4b:2c:56:7b:02: 9b:75:ff:62:6e:ef:6d:b6:60:20:7d:d8:04:b1:39: 81:5b:1d:cd:33:f8:46:a3:7a:72:af:08:ec:11:35: 5d:71:2b:33:da:c6:c0:9d:e0:ae:be:8e:15:21:ac: 69:43:52:e9:3b:02:ae:db:15:f2:69:36:5a:47:44: 62:90:fb:af:2f:2f:9d:94:b4:b5:ca:b2:d3:d1:0b: 18:54:f1:62:c8:84:d8:de:93:cd:82:67:6f:e7:13: 06:8b:99:b7:4b:2c:c4:7c:f0:39:e1:2a:51:c5:19: 4c:d3:76:63:28:6c:ee:2a:14:72:87:33:63:9d:9e: 13:58:da:32:a7:cd:71:06:22:8b:b0:bc:f3:e3:bc: 34:f6:f8:0e:c6:09:e6:6e:43:b2:23:39:e2:9a:64: 7a:f9:47:56:3a:8f:ae:b6:2c:b3:81:c1:66:67:88: fd:7b:a0:d5:bc:68:84:f7:da:62:fc:ca:b1:a8:bc: 5b:e9:3f:70:07:da:b0:45:50:1d:45:ae:00:5e:82: 8f:e5:cc:b6:fd:6b:d4:f0:da:48:87:c7:36:e7:ea: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:78:2E:6A:31:87:85:10:68:30:51:E8:62:AD:FE:5C:B0:68:A0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/db2bd2dc-9c09-33d1-a839-33a6f912371c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl X509v3 Authority Key Identifier: keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer sbgp-ipAddrBlock: critical IPv4: 104.245.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:89:47:b2:af:3e:6b:f2:8c:ae:9c:70:e9:15:ed:a5:bf:bb: 76:af:7d:82:c4:32:c5:4d:6f:4e:f8:d1:b9:73:01:37:99:a5: ea:97:73:8e:fb:28:33:35:81:a7:ec:45:cf:25:35:3f:d8:65: 61:d6:0c:96:d7:b2:5c:75:6e:a7:b0:c4:81:4f:28:7b:e4:ad: a6:52:aa:b7:aa:30:80:6a:33:fb:65:e0:43:fc:14:75:fb:95: 9d:a2:d1:5f:dc:73:a6:28:c1:da:6b:18:a6:7d:fb:ed:65:84: 56:51:03:36:3f:24:cc:18:36:ce:c8:3d:d5:83:e7:1f:4e:5d: f8:c5:10:85:ae:0c:2e:d0:72:1d:d4:8d:a5:4d:85:e1:24:b5: bf:c7:13:9d:38:38:9d:10:5a:d1:29:ae:d6:d5:ca:d5:6a:33: a0:ad:19:8f:34:99:12:1b:51:d4:ce:87:fe:7c:ce:7f:8c:66: 04:af:04:e4:ab:b6:40:95:ac:b6:b7:1c:8b:fd:0e:04:de:cf: 96:e2:5b:b0:fa:ed:fa:e9:e3:f8:60:e4:d4:65:d5:23:d9:d2: 2b:19:1b:c6:d0:14:91:10:58:ab:8c:ce:73:0d:38:a1:8d:a3: ae:e1:4e:08:8d:09:bc:33:97:a3:15:e4:96:ab:2a:5a:2c:8b: b8:44:ab:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86TbXbGXVd9bE7sMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI0OWMyMDItZjY0NC00ZmE2LThhMzYtMDg0MzEyNzYx ZjcyMB4XDTI2MDkxOTE0NDg1NVoXDTI2MTIxODE1NDg1NVowLzEtMCsGA1UEAxMk YTI3Y2I1MjgtMzdjMC00YmI4LTgzMWYtOTEyYjZhYzU3Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk8NG1F3hB7rBX7agAmmzNXHM4SyyQQG4qhp HX15eC4kxT1BzECRSyxWewKbdf9ibu9ttmAgfdgEsTmBWx3NM/hGo3pyrwjsETVd cSsz2sbAneCuvo4VIaxpQ1LpOwKu2xXyaTZaR0RikPuvLy+dlLS1yrLT0QsYVPFi yITY3pPNgmdv5xMGi5m3SyzEfPA54SpRxRlM03ZjKGzuKhRyhzNjnZ4TWNoyp81x BiKLsLzz47w09vgOxgnmbkOyIznimmR6+UdWOo+utiyzgcFmZ4j9e6DVvGiE99pi /MqxqLxb6T9wB9qwRVAdRa4AXoKP5cy2/WvU8NpIh8c25+rfKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG14Lmoxh4UQaDBR6GKt/lywaKC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5 YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3NjFmNzIvZGIyYmQyZGMtOWMwOS0z M2QxLWE4MzktMzNhNmY5MTIzNzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmI0OWMyMDItZjY0NC00ZmE2LThh MzYtMDg0MzEyNzYxZjcyL2JiNDljMjAyLWY2NDQtNGZhNi04YTM2LTA4NDMxMjc2 MWY3Mi5jcmwwHwYDVR0jBBgwFoAUz7MnfFEJl5A2s/vPsoyGwKvwa6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQz MTI3NjFmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPXvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+JR7KvPmvyjK6ccOkV7aW/u3avfYLEMsVNb0740blzATeZpeqXc477 KDM1gafsRc8lNT/YZWHWDJbXslx1bqewxIFPKHvkraZSqreqMIBqM/tl4EP8FHX7 lZ2i0V/cc6YowdprGKZ9++1lhFZRAzY/JMwYNs7IPdWD5x9OXfjFEIWuDC7Qch3U jaVNheEktb/HE504OJ0QWtEprtbVytVqM6CtGY80mRIbUdTOh/58zn+MZgSvBOSr tkCVrLa3HIv9DgTez5biW7D67frp4/hg5NRl1SPZ0isZG8bQFJEQWKuMznMNOKGN o67hTgiNCbwzl6MV5JarKlosi7hEq5o= -----END CERTIFICATE-----Generated at Tue Sep 22 21:07:27 2026 by rpki-client