$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa File: 41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa (raw, json) Hash identifier: qxlda6cnBubIx8nBYp6qx+X1lOU0hpAbmO26/Kae2hU= Subject key identifier: 80:7F:8F:6B:8B:42:61:A8:D7:00:70:B4:0E:B8:94:0F:3D:2D:47:9B Certificate issuer: /CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59 Certificate serial: 010D0C9F4328584CA5F74219D4BBFEB97D0ACDC0 Authority key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 393462 IP address blocks: 192.35.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:42:19:d4:bb:fe:b9:7d:0a:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=4dc308e3-994d-4a2d-9222-b37d494cbba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:0d:37:02:bf:11:60:74:1d:1a:77:0c:74: 9a:28:8d:f7:9f:27:58:e9:84:49:d0:77:fa:51:63: da:8e:3f:95:58:f6:ac:95:1a:64:3e:a5:52:39:17: c4:5b:1a:1b:3e:97:7f:5e:3f:e9:0a:99:d3:57:f0: 24:32:4b:e0:fb:c6:19:17:27:2d:b7:f2:5c:a3:ee: 82:be:8d:a4:08:64:ec:85:cf:bc:8f:41:f2:3d:fb: db:ba:a7:13:de:41:4a:5c:38:0e:fa:c8:bd:32:33: dd:17:b3:76:00:b4:9c:06:3f:c4:1d:61:62:0f:51: a5:e5:46:d5:21:52:f9:76:01:4a:20:6f:d9:f6:ca: 68:2a:49:4d:0d:26:5f:21:5e:79:43:dc:05:cd:c8: 2c:b8:56:c2:04:d3:0a:b5:4b:71:03:aa:b2:87:7c: d3:8c:32:68:76:52:0b:c3:31:46:69:fa:14:2e:2b: 1e:03:1f:9f:b7:2d:64:4b:7a:06:70:af:37:96:6f: 87:72:43:84:97:d8:14:62:c8:48:5d:a6:19:8d:0a: 64:22:60:df:cc:6d:8c:ed:aa:70:f4:e6:3a:60:4f: 33:a5:96:15:28:fa:9b:c3:e7:ff:c2:f4:03:90:66: 7a:35:c8:bf:9a:c4:22:d8:1b:eb:35:5d:e0:f9:91: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7F:8F:6B:8B:42:61:A8:D7:00:70:B4:0E:B8:94:0F:3D:2D:47:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl X509v3 Authority Key Identifier: keyid:3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer sbgp-ipAddrBlock: critical IPv4: 192.35.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:46:ca:b2:9c:6c:7f:6c:c4:9f:28:2a:95:91:a6:ff:17:30: 00:15:ed:2b:49:d4:77:69:de:29:ea:24:78:a9:6e:54:54:0f: 5f:8c:e9:fd:5f:f0:6c:18:c6:02:2b:f5:f9:c0:89:5a:51:76: bb:fc:c4:f6:ad:c1:b6:66:ed:2e:2e:f8:2e:ad:35:09:af:b5: 33:cc:83:40:8c:d4:1b:f3:7d:ce:ac:a6:fc:93:0b:72:62:2f: 99:39:29:fd:cd:13:48:18:d1:dc:df:c9:45:f8:02:f2:84:84: a3:94:26:dc:e5:f1:37:d3:91:84:69:53:50:42:f2:af:db:af: b2:4a:d3:01:5c:35:5a:d3:7c:72:6b:ab:1c:fb:6a:0b:5d:c1: e0:47:f6:d5:80:91:1f:56:e7:9f:df:14:98:ba:04:50:3c:95: 4e:7a:2e:b8:06:35:b2:d8:66:7e:89:06:dd:da:ae:24:d5:f3: 3e:22:8e:d6:53:f0:a5:0a:dd:82:e0:c5:02:8a:17:e4:01:d8: a7:78:21:69:e6:f7:1e:6c:e6:a8:6a:ab:c0:c1:a0:46:e7:a8: 1d:ef:ec:94:70:26:f8:ac:4b:0f:eb:54:88:7e:52:de:f4:d6: 70:c4:ad:74:71:dc:e7:2a:fe:2e:c5:e1:02:b8:0c:da:8a:7f: 92:aa:c2:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl90IZ1Lv+uX0KzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjczMjJiNWYtMDU0MS00Nzg0LTllNWUtYzRlOGRkNzI4 ZTU5MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NGRjMzA4ZTMtOTk0ZC00YTJkLTkyMjItYjM3ZDQ5NGNiYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNMNNwK/EWB0HRp3DHSaKI33nydY6YRJ0Hf6 UWPajj+VWPaslRpkPqVSORfEWxobPpd/Xj/pCpnTV/AkMkvg+8YZFyctt/Jco+6C vo2kCGTshc+8j0HyPfvbuqcT3kFKXDgO+si9MjPdF7N2ALScBj/EHWFiD1Gl5UbV IVL5dgFKIG/Z9spoKklNDSZfIV55Q9wFzcgsuFbCBNMKtUtxA6qyh3zTjDJodlIL wzFGafoULiseAx+fty1kS3oGcK83lm+HckOEl9gUYshIXaYZjQpkImDfzG2M7apw 9OY6YE8zpZYVKPqbw+f/wvQDkGZ6Nci/msQi2BvrNV3g+ZGBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB/j2uLQmGo1wBwtA64lA89LUebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzMy MmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4ZGQ3MjhlNTkvNDFiOGRhZmEtNmM0Mi0z NGMwLWFmMWYtMGQzMTczYWM2YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjczMjJiNWYtMDU0MS00Nzg0LTll NWUtYzRlOGRkNzI4ZTU5L2Y3MzIyYjVmLTA1NDEtNDc4NC05ZTVlLWM0ZThkZDcy OGU1OS5jcmwwHwYDVR0jBBgwFoAUO3IaxVSa9nDAgf1YOO1ZTkhGo9UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzMyMmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4 ZGQ3MjhlNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBGyrKcbH9sxJ8oKpWRpv8XMAAV7StJ1Hdp3inqJHipblRUD1+M6f1f 8GwYxgIr9fnAiVpRdrv8xPatwbZm7S4u+C6tNQmvtTPMg0CM1Bvzfc6spvyTC3Ji L5k5Kf3NE0gY0dzfyUX4AvKEhKOUJtzl8TfTkYRpU1BC8q/br7JK0wFcNVrTfHJr qxz7agtdweBH9tWAkR9W55/fFJi6BFA8lU56LrgGNbLYZn6JBt3ariTV8z4ijtZT 8KUK3YLgxQKKF+QB2Kd4IWnm9x5s5qhqq8DBoEbnqB3v7JRwJvisSw/rVIh+Ut70 1nDErXRx3Ocq/i7F4QK4DNqKf5Kqwtk= -----END CERTIFICATE-----Generated at Thu Feb 26 23:00:03 2026 by rpki-client