$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa File: 8d980488-329f-3b3d-8944-c85faea82b0a.roa (raw, json) Hash identifier: UtbObxv1TD/bVBOw6BOQOZFG4Oy3r8sMAiaNO3Mjf44= Subject key identifier: A8:70:10:38:8E:78:A6:4A:D6:03:D8:E4:DF:CC:97:F6:64:C3:3D:79 Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Certificate serial: 010D0C9F4328584EFCACBC4BFC709C12B65C4400 Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 203 IP address blocks: 192.136.176.0/20 maxlen: 24 204.10.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bc:4b:fc:70:9c:12:b6:5c:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=2a117b16-d6a3-4c0d-9dfd-05a4bf6cc1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:0a:6c:22:25:63:60:b9:26:20:78:d4:2d: 72:98:0b:4a:45:2b:9b:8d:85:4d:55:59:9a:bc:1f: 39:ba:f9:6d:7f:4a:de:ce:11:d3:ae:40:04:ad:c1: ab:f1:2b:65:08:ac:06:22:55:57:fe:25:a0:3b:e8: 7e:4c:6b:91:fc:a8:86:27:45:58:d8:87:ce:98:23: 1f:0f:1d:72:35:ee:7b:e1:62:c4:92:8d:93:e1:09: b7:e9:a5:5e:22:40:5a:1a:31:14:1f:50:93:81:03: a1:ed:95:35:61:9d:6e:f7:36:af:fc:d2:7e:2a:9a: 39:4f:47:b9:be:4d:0b:40:64:a7:25:b1:8e:52:40: 5f:c0:87:90:06:7b:05:40:08:78:de:39:0e:84:a9: 30:f9:09:82:73:af:f3:ca:b7:17:76:7d:ec:e6:86: e1:40:07:14:8c:fe:7b:3c:df:80:dd:87:50:61:4b: 07:19:e1:e6:1b:5b:ec:e6:f8:e0:fb:ad:11:a5:1e: 5b:02:c3:23:40:04:1d:80:f9:d1:42:f1:60:61:59: cf:79:a0:5d:91:b9:03:5a:9f:70:aa:f5:74:f7:71: 0c:0f:aa:3c:54:3f:83:90:a2:06:ef:d8:dc:54:7a: fb:1b:d1:6b:c9:c2:ef:91:41:b3:bf:15:25:6e:b1: 69:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:70:10:38:8E:78:A6:4A:D6:03:D8:E4:DF:CC:97:F6:64:C3:3D:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/8d980488-329f-3b3d-8944-c85faea82b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl X509v3 Authority Key Identifier: keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer sbgp-ipAddrBlock: critical IPv4: 192.136.176.0/20 204.10.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:10:7e:db:4c:0f:e7:c8:16:05:d4:da:ca:91:a7:1f:c3:35: b7:92:da:fb:b7:44:89:d7:74:51:ad:d8:cc:a7:66:65:66:67: 55:71:25:0a:62:29:54:34:c7:e7:d0:07:83:8c:3a:10:7d:58: 1a:6e:0e:ba:25:c1:64:48:eb:96:3a:cf:d1:31:65:3c:75:a0: 11:bf:47:f8:14:74:6b:ba:05:2c:4c:ed:04:89:71:fc:54:4a: ec:7f:40:f6:12:8b:36:27:11:73:12:06:86:f0:0b:a3:ae:d5: 5f:f9:fc:79:bf:4b:9a:25:ab:a8:0d:19:6b:17:91:de:88:a3: 28:b4:ec:5a:cd:4d:8f:fb:63:78:b0:e8:8b:a5:b0:0b:93:b0: 5b:26:06:bc:0f:32:f8:5d:1e:e3:25:8f:ff:5f:91:81:01:9a: dc:0d:eb:78:4f:c3:f6:04:2b:10:45:d7:44:5b:75:84:b4:05: de:2d:b0:51:90:fb:b6:5f:19:1d:ec:cd:4f:4c:a5:25:87:9a: 23:a9:2d:63:dc:1f:a3:5c:0a:d1:44:fc:0c:65:cb:e6:5e:84: 61:30:28:cf:dc:5d:89:f1:14:b8:7d:f7:ea:ae:a3:a7:9e:67: 38:a9:86:f5:cb:3f:17:6b:df:4d:1e:f3:7b:d1:cc:da:f3:bf: 15:da:6f:0f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE78rLxL/HCcErZcRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3 MGRiMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MmExMTdiMTYtZDZhMy00YzBkLTlkZmQtMDVhNGJmNmNjMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhIKbCIlY2C5JiB41C1ymAtKRSubjYVNVVma vB85uvltf0rezhHTrkAErcGr8StlCKwGIlVX/iWgO+h+TGuR/KiGJ0VY2IfOmCMf Dx1yNe574WLEko2T4Qm36aVeIkBaGjEUH1CTgQOh7ZU1YZ1u9zav/NJ+Kpo5T0e5 vk0LQGSnJbGOUkBfwIeQBnsFQAh43jkOhKkw+QmCc6/zyrcXdn3s5obhQAcUjP57 PN+A3YdQYUsHGeHmG1vs5vjg+60RpR5bAsMjQAQdgPnRQvFgYVnPeaBdkbkDWp9w qvV093EMD6o8VD+DkKIG79jcVHr7G9FrycLvkUGzvxUlbrFpRQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKhwEDiOeKZK1gPY5N/Ml/Zkwz15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvOGQ5ODA0ODgtMzI5Zi0z YjNkLTg5NDQtYzg1ZmFlYTgyYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3 NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh MzBmNzcwZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEwIiwAwQC zAosMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE4QfttMD+fIFgXU2sqRpx/DNbeS2vu3RInXdFGt2MynZmVm Z1VxJQpiKVQ0x+fQB4OMOhB9WBpuDrolwWRI65Y6z9ExZTx1oBG/R/gUdGu6BSxM 7QSJcfxUSux/QPYSizYnEXMSBobwC6Ou1V/5/Hm/S5olq6gNGWsXkd6Ioyi07FrN TY/7Y3iw6IulsAuTsFsmBrwPMvhdHuMlj/9fkYEBmtwN63hPw/YEKxBF10RbdYS0 Bd4tsFGQ+7ZfGR3szU9MpSWHmiOpLWPcH6NcCtFE/Axly+ZehGEwKM/cXYnxFLh9 9+quo6eeZziphvXLPxdr300e83vRzNrzvxXabw8= -----END CERTIFICATE-----Generated at Sat Sep 5 07:49:15 2026 by rpki-client