$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa File: ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa (raw, json) Hash identifier: oFbStHNqrsHhk76cjsajPaCTVeqR+vzz3kiaFNqQesc= Subject key identifier: 5F:1B:09:B8:2D:FA:7E:43:1A:7B:9C:23:01:BB:F8:54:0F:96:DF:CA Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Certificate serial: 010D0C9F4328584F9E986DE4FF7945FB275F9100 Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 3356 IP address blocks: 192.136.176.0/20 maxlen: 24 204.10.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:6d:e4:ff:79:45:fb:27:5f:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=26001c0b-539f-45b0-9bfe-ac237a5adb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:2a:92:30:d4:92:4c:72:1c:45:76:8c:92: da:95:62:11:a3:ca:a6:8d:5a:fe:52:db:ea:e9:ca: ea:49:89:ba:39:77:b2:74:b9:11:d6:9b:5a:55:e0: 62:9a:09:fa:08:9d:b2:ce:7c:8d:77:7c:2d:5d:de: 0f:d2:f7:34:6d:ad:77:48:fe:5d:33:e6:2d:c9:e9: 65:cf:ba:4c:d0:df:21:b2:3b:59:21:82:13:4f:34: f5:d9:69:4a:53:86:52:eb:46:ed:54:47:d0:34:06: ba:6e:1a:51:fd:08:e2:98:37:e2:5e:00:c6:f7:37: e8:59:cf:40:c7:b3:2b:47:64:49:10:30:b4:b7:5f: e0:ce:c4:4a:35:56:4d:80:67:96:bd:2a:35:53:57: 60:ba:90:c9:45:2f:d9:5f:3d:d3:ae:6e:78:68:fc: 79:22:1d:5a:db:af:97:6c:36:81:62:84:12:11:d7: fa:93:0a:ad:3d:ce:1c:47:25:11:03:a3:8c:c9:01: 0f:50:8e:4c:aa:2e:bc:a8:43:ca:d3:b7:2f:f0:da: f1:52:01:cb:df:7e:84:6d:3e:e2:0e:d3:30:32:72: ac:aa:28:d9:2e:a0:17:8b:ca:ed:95:1e:fb:c7:40: 9b:af:74:47:7e:4e:75:b8:af:b3:fd:a4:02:25:fb: a8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:09:B8:2D:FA:7E:43:1A:7B:9C:23:01:BB:F8:54:0F:96:DF:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl X509v3 Authority Key Identifier: keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer sbgp-ipAddrBlock: critical IPv4: 192.136.176.0/20 204.10.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fc:ff:d1:82:14:a0:42:2a:88:38:b5:cc:c4:f3:98:b2:83: f1:41:a7:14:80:19:72:fe:d0:13:c3:d4:52:af:4f:aa:3e:8e: ff:12:36:62:28:bd:e6:c8:f8:43:be:95:f4:e9:bd:e0:7c:5a: 0a:1b:dc:aa:a2:1b:6c:65:a2:97:7a:ad:1a:a5:c2:b7:ec:63: bd:06:a4:28:9e:60:d6:8c:50:a1:bb:fb:59:94:44:d9:5b:95: 85:e1:d5:b6:73:2a:6f:9b:ab:d8:36:b1:6b:32:d2:cc:03:e9: 55:51:7b:1f:24:de:65:f1:3a:3f:7e:5d:46:72:58:b1:bc:c7: 36:2c:fc:ab:cc:3e:58:bf:d7:b5:c0:e6:56:ea:f2:49:83:e8: b1:f3:84:26:fb:40:91:f9:1f:c3:98:b2:53:d2:55:e8:82:db: 64:9f:27:5e:ed:6a:30:70:c8:79:fa:d6:36:df:fe:c5:40:af: 7c:74:a5:d6:4d:1f:bc:b3:93:38:76:c0:81:0e:0d:f1:ef:a0: dd:53:43:f7:76:91:cb:58:fc:47:b4:83:53:33:10:37:c4:4b: c4:08:e4:8a:b4:18:d9:7d:d3:d7:68:7a:4f:6d:08:02:a2:c4: fd:f7:ed:2d:41:a5:ce:76:48:b3:c7:ab:57:ab:ce:74:5d:e2: 34:4a:f9:67 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+emG3k/3lF+ydfkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3 MGRiMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk MjYwMDFjMGItNTM5Zi00NWIwLTliZmUtYWMyMzdhNWFkYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy90qkjDUkkxyHEV2jJLalWIRo8qmjVr+Utvq 6crqSYm6OXeydLkR1ptaVeBimgn6CJ2yznyNd3wtXd4P0vc0ba13SP5dM+Ytyell z7pM0N8hsjtZIYITTzT12WlKU4ZS60btVEfQNAa6bhpR/QjimDfiXgDG9zfoWc9A x7MrR2RJEDC0t1/gzsRKNVZNgGeWvSo1U1dgupDJRS/ZXz3Trm54aPx5Ih1a26+X bDaBYoQSEdf6kwqtPc4cRyURA6OMyQEPUI5Mqi68qEPK07cv8NrxUgHL336EbT7i DtMwMnKsqijZLqAXi8rtlR77x0Cbr3RHfk51uK+z/aQCJfuozwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFF8bCbgt+n5DGnucIwG7+FQPlt/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvZWEyZTMyZTAtOGIzMy0z YzVkLWI0NzktNjhiMGEyY2VlYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3 NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh MzBmNzcwZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEwIiwAwQC zAosMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABP8/9GCFKBCKog4tczE85iyg/FBpxSAGXL+0BPD1FKvT6o+ jv8SNmIovebI+EO+lfTpveB8Wgob3KqiG2xlopd6rRqlwrfsY70GpCieYNaMUKG7 +1mURNlblYXh1bZzKm+bq9g2sWsy0swD6VVRex8k3mXxOj9+XUZyWLG8xzYs/KvM Pli/17XA5lbq8kmD6LHzhCb7QJH5H8OYslPSVeiC22SfJ17tajBwyHn61jbf/sVA r3x0pdZNH7yzkzh2wIEODfHvoN1TQ/d2kctY/Ee0g1MzEDfES8QI5Iq0GNl909do ek9tCAKixP337S1Bpc52SLPHq1erznRd4jRK+Wc= -----END CERTIFICATE-----Generated at Sun Nov 1 07:42:55 2026 by rpki-client