$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/04b19a07-dc67-35cc-8d25-6a8fccef5a9e.roa File: 04b19a07-dc67-35cc-8d25-6a8fccef5a9e.roa (raw, json) Hash identifier: fhIIKZJU23b0wap0vA/XBrwcwSCromHqlaQI+TtyH3s= Subject key identifier: F5:C7:89:34:57:58:69:58:3D:0C:45:66:94:06:74:7D:05:AA:E3:B6 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E3B947FA5677613CB7642A240 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/04b19a07-dc67-35cc-8d25-6a8fccef5a9e.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 54994 IP address blocks: 157.185.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:7f:a5:67:76:13:cb:76:42:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=cbd4bd31-221d-4227-bc5e-620ce5fd62f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:16:e0:03:98:99:23:a4:20:fa:1e:a1:a3: a9:f2:29:8e:a5:0e:01:03:20:c7:a8:f6:8e:81:7c: ae:c0:2c:36:d4:f7:05:b7:5c:cc:45:44:39:77:cd: 8a:f8:c3:0c:23:aa:e1:91:67:37:e8:ae:01:13:1f: 22:8b:0f:10:e3:01:8e:ea:46:3f:b5:61:35:67:3e: a5:4c:1b:58:84:bb:a1:88:34:de:5f:fc:1b:03:eb: 47:1a:5b:05:1a:ce:d5:ca:fa:5a:29:6d:d8:a4:6b: 57:d6:4e:9e:68:79:fb:a6:04:d8:fc:07:9f:22:4a: 1c:c1:a1:b4:83:3c:26:58:e3:06:8a:38:5f:54:58: e2:e2:24:12:73:cb:a0:e0:3d:06:23:3b:dd:88:e4: 16:0d:c1:3e:51:b0:b9:8f:8e:ed:cf:6b:76:78:2d: e7:85:4c:2b:62:a1:26:04:35:da:ce:63:21:25:2b: d8:51:a3:b3:25:31:a8:5c:71:b0:bc:c9:d0:1b:74: c3:93:65:d8:10:aa:28:78:76:a3:42:7e:57:bf:ef: c3:ea:31:5d:ba:1f:23:07:ae:ba:de:cc:ad:f9:8d: d6:14:5f:69:fd:be:05:03:11:82:e0:d2:27:1d:8c: bd:93:e7:b8:c8:36:6f:51:19:23:28:96:22:12:de: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C7:89:34:57:58:69:58:3D:0C:45:66:94:06:74:7D:05:AA:E3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/04b19a07-dc67-35cc-8d25-6a8fccef5a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:99:fb:49:98:7c:bd:48:12:f0:a2:78:76:7e:d8:1b:7c:46: cb:7b:f5:b5:10:a1:fd:63:39:a7:9c:cb:43:0e:f7:9e:f1:b1: aa:19:a3:a2:79:fa:93:5e:70:c6:40:a1:b3:17:52:55:09:4f: ef:a6:2a:2f:d0:2a:47:b1:76:b7:1d:1e:33:9f:5c:61:e8:8a: bf:e8:0f:87:e4:9f:85:ac:88:8b:22:56:b3:e9:50:2c:18:59: 23:43:2a:5d:a9:52:37:ea:c0:5f:61:b5:f3:b5:54:75:93:14: b4:06:3a:3f:88:b4:eb:a6:01:89:7d:c4:e3:93:67:54:ec:e8: 51:ae:8c:85:a4:90:ab:50:ab:61:d9:84:dd:bf:57:b2:6e:0e: 9e:d9:6f:c7:ef:93:2a:4c:67:fc:be:35:1f:29:f3:7f:51:88: 00:cc:c8:d5:bc:c9:3c:78:ac:99:0a:77:05:a6:c9:7b:ba:34: 5c:0e:28:fa:63:5c:7c:92:b5:73:4c:6f:23:53:cc:e9:af:17: 89:48:4e:db:98:97:ad:0e:6d:c4:73:77:d7:92:30:98:0c:55: 57:b9:e7:8a:e2:58:4d:da:f4:ce:95:94:40:c8:d1:0e:ca:77: 43:26:c0:25:b7:96:f7:ed:ae:5b:28:e0:ac:95:32:a3:a9:bd: c4:bf:e5:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lH+lZ3YTy3ZCokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk Y2JkNGJkMzEtMjIxZC00MjI3LWJjNWUtNjIwY2U1ZmQ2MmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyMW4AOYmSOkIPoeoaOp8imOpQ4BAyDHqPaO gXyuwCw21PcFt1zMRUQ5d82K+MMMI6rhkWc36K4BEx8iiw8Q4wGO6kY/tWE1Zz6l TBtYhLuhiDTeX/wbA+tHGlsFGs7VyvpaKW3YpGtX1k6eaHn7pgTY/AefIkocwaG0 gzwmWOMGijhfVFji4iQSc8ug4D0GIzvdiOQWDcE+UbC5j47tz2t2eC3nhUwrYqEm BDXazmMhJSvYUaOzJTGoXHGwvMnQG3TDk2XYEKooeHajQn5Xv+/D6jFduh8jB666 3syt+Y3WFF9p/b4FAxGC4NInHYy9k+e4yDZvURkjKJYiEt4Q8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXHiTRXWGlYPQxFZpQGdH0FquO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMDRiMTlhMDctZGM2Ny0z NWNjLThkMjUtNmE4ZmNjZWY1YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbm7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmZ+0mYfL1IEvCieHZ+2Bt8Rst79bUQof1jOaecy0MO957xsaoZo6J5 +pNecMZAobMXUlUJT++mKi/QKkexdrcdHjOfXGHoir/oD4fkn4WsiIsiVrPpUCwY WSNDKl2pUjfqwF9htfO1VHWTFLQGOj+ItOumAYl9xOOTZ1Ts6FGujIWkkKtQq2HZ hN2/V7JuDp7Zb8fvkypMZ/y+NR8p839RiADMyNW8yTx4rJkKdwWmyXu6NFwOKPpj XHyStXNMbyNTzOmvF4lITtuYl60ObcRzd9eSMJgMVVe554riWE3a9M6VlEDI0Q7K d0MmwCW3lvftrlso4KyVMqOpvcS/5R4= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:45 2026 by rpki-client