$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/04b19a07-dc67-35cc-8d25-6a8fccef5a9e.roa File: 04b19a07-dc67-35cc-8d25-6a8fccef5a9e.roa (raw, json) Hash identifier: NrbHa/KkX6pFmOZo+tRmiR8fwVtVkqn4Bw24KTeRgdk= Subject key identifier: 4B:FD:A3:D4:C9:59:0D:92:4B:17:97:16:F8:8D:AB:09:97:E6:06:BD Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F7FE2F32FB8F9DCDCDE1F4820 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/04b19a07-dc67-35cc-8d25-6a8fccef5a9e.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 54994 IP address blocks: 157.185.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:f3:2f:b8:f9:dc:dc:de:1f:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=d3a937e5-ad50-48e2-9b53-4383421674ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:7b:44:21:4f:30:7f:8e:0b:f4:d7:b4:19: 9d:0f:08:62:1d:8c:3a:c2:a1:e2:58:c8:86:97:54: 21:c8:a7:9e:1e:7f:4e:38:80:33:6c:f8:02:b0:2d: 84:62:82:b8:69:75:f5:cd:9b:39:d6:75:c5:a5:b2: e6:a7:4d:38:f7:08:10:1c:05:8c:96:89:32:0b:7f: af:a0:2f:8f:93:fe:e4:e5:9f:c9:ca:0e:84:d9:7b: 25:af:f6:59:d6:17:74:01:29:66:7c:da:d3:3e:ab: 77:fe:a5:d9:ea:26:4b:68:54:d3:bc:e3:db:c9:2d: 46:b0:b6:3b:1d:b7:5e:e9:46:c3:44:2c:0e:b7:9b: 4c:08:f7:89:23:34:7b:3c:f1:c1:cd:ab:3c:73:e5: d2:49:84:94:90:f8:17:e9:13:56:18:89:0e:36:32: fc:c5:97:0f:23:dd:e0:69:13:6c:44:2a:8d:be:50: 14:5c:ad:91:6b:d0:bc:c3:61:88:93:f3:b7:1d:68: 8e:75:d8:5d:c0:e9:3f:d0:74:6b:9a:ce:1e:d6:85: 1c:86:23:ca:cf:6c:03:ae:6e:3d:fd:a0:be:ef:97: fd:4c:8a:07:73:82:5a:10:92:e3:37:29:88:83:dd: c3:2a:fa:2f:57:d0:8b:bd:6f:95:d9:0c:e9:0c:c2: 26:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FD:A3:D4:C9:59:0D:92:4B:17:97:16:F8:8D:AB:09:97:E6:06:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/04b19a07-dc67-35cc-8d25-6a8fccef5a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fe:13:77:d6:b6:b9:b2:04:5c:b0:88:61:1d:ec:d6:f8:8e: 42:34:0f:f2:36:88:8b:41:48:00:0c:98:ff:d9:af:37:89:16: e9:6f:02:1d:93:b6:0b:49:f3:fd:0c:d3:ca:d3:dd:fb:ef:d9: 48:9f:8d:e6:3e:9b:45:a3:73:79:3c:1d:c6:56:30:5a:f2:6a: 38:9f:7e:82:ea:f6:f4:31:3e:8e:16:82:6b:5d:31:e7:2c:cb: 9b:b7:e3:f1:9c:04:c1:4c:8c:35:c6:93:59:63:d6:5b:5e:cf: b6:95:5d:d6:0f:a5:08:bc:1a:0f:a4:76:3b:af:6f:c3:ff:71: df:dd:85:9d:df:60:87:d7:61:9a:9f:eb:21:a3:0f:58:dc:00: 41:9c:94:dc:ec:c3:7b:34:9f:f2:92:6e:3a:a3:a7:6b:f8:a5: 6a:b0:eb:e3:bd:39:4d:41:b1:8d:84:e2:44:a4:6d:7c:e8:a4: ee:8b:d2:f0:fa:41:92:1a:0c:3b:18:d5:6c:02:8d:11:2a:16: 0e:3e:5f:ed:a3:c5:4f:e4:ae:10:d1:7a:5b:9f:ec:bf:6b:c3: ac:77:bc:0b:07:46:bd:73:15:37:55:9b:0a:7d:de:61:c5:c7: a1:55:1a:c4:43:af:c3:6b:45:3d:73:b5:a0:a4:8d:3c:14:8b: d1:3d:eb:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4vMvuPnc3N4fSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDNhOTM3ZTUtYWQ1MC00OGUyLTliNTMtNDM4MzQyMTY3NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7R7RCFPMH+OC/TXtBmdDwhiHYw6wqHiWMiG l1QhyKeeHn9OOIAzbPgCsC2EYoK4aXX1zZs51nXFpbLmp0049wgQHAWMlokyC3+v oC+Pk/7k5Z/Jyg6E2Xslr/ZZ1hd0ASlmfNrTPqt3/qXZ6iZLaFTTvOPbyS1GsLY7 Hbde6UbDRCwOt5tMCPeJIzR7PPHBzas8c+XSSYSUkPgX6RNWGIkONjL8xZcPI93g aRNsRCqNvlAUXK2Ra9C8w2GIk/O3HWiOddhdwOk/0HRrms4e1oUchiPKz2wDrm49 /aC+75f9TIoHc4JaEJLjNymIg93DKvovV9CLvW+V2QzpDMIm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv9o9TJWQ2SSxeXFviNqwmX5ga9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMDRiMTlhMDctZGM2Ny0z NWNjLThkMjUtNmE4ZmNjZWY1YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbm7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT+E3fWtrmyBFywiGEd7Nb4jkI0D/I2iItBSAAMmP/ZrzeJFulvAh2T tgtJ8/0M08rT3fvv2UifjeY+m0Wjc3k8HcZWMFryajiffoLq9vQxPo4WgmtdMecs y5u34/GcBMFMjDXGk1lj1ltez7aVXdYPpQi8Gg+kdjuvb8P/cd/dhZ3fYIfXYZqf 6yGjD1jcAEGclNzsw3s0n/KSbjqjp2v4pWqw6+O9OU1BsY2E4kSkbXzopO6L0vD6 QZIaDDsY1WwCjREqFg4+X+2jxU/krhDReluf7L9rw6x3vAsHRr1zFTdVmwp93mHF x6FVGsRDr8NrRT1ztaCkjTwUi9E960w= -----END CERTIFICATE-----Generated at Wed Oct 28 11:45:36 2026 by rpki-client