$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa File: 24587719-f7eb-3cb8-a957-e23dd29ef600.roa (raw, json) Hash identifier: BlWHhdYhPe6JA6SeXSyQ6LSfv8U0QBL0CN4rexsNKc0= Subject key identifier: C3:FC:ED:E0:68:E9:0A:9D:33:3F:5B:03:01:52:27:CF:E3:4E:2F:F9 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EA787758E059F8F2FD1EF4F80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400104 IP address blocks: 157.185.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:75:8e:05:9f:8f:2f:d1:ef:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=81bb35c7-9e72-4632-aad6-208048346737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:1b:aa:be:85:a1:6c:40:25:e8:fb:f1:31: 18:a4:9d:9c:b6:17:f9:4d:81:c1:6d:c8:51:d3:86: e7:d1:3d:3b:33:d9:b3:62:9c:a1:e8:90:ba:33:07: 89:95:f3:cb:34:13:66:b2:dd:a4:d5:83:9b:b9:52: 95:72:73:83:0a:5c:02:b7:b7:10:d0:57:78:08:02: fd:5d:26:39:da:d3:6f:b2:c3:25:8c:53:4c:a3:9c: 4a:96:71:c2:bf:f5:cf:b3:ed:ee:8f:e1:f2:3a:68: d2:cd:b6:a0:a3:6d:98:b6:1f:9c:d0:7c:bc:ec:23: 7d:ad:06:f7:6e:b1:3f:40:56:15:86:17:60:7a:ed: 4c:c9:13:b6:2c:85:15:f2:ef:1c:d5:bd:25:8e:84: 93:60:45:a9:83:39:6f:7b:b0:25:33:e2:1c:c6:55: 0b:8a:19:ae:89:95:e8:e4:ba:dd:79:4b:00:f8:3a: a8:af:9b:19:85:ed:a6:b6:4e:c3:43:b9:52:f2:6b: 56:11:17:d6:0d:66:55:d5:ba:c4:49:77:35:b5:28: 7f:1f:8c:65:a4:0d:23:92:75:bd:a4:b0:a8:a4:be: 0a:36:92:ca:81:da:15:cc:01:63:2c:2a:15:df:ce: 96:0e:b1:4b:50:0e:06:f3:96:75:4a:d7:0e:42:02: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FC:ED:E0:68:E9:0A:9D:33:3F:5B:03:01:52:27:CF:E3:4E:2F:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:89:27:35:a4:5a:2a:9e:22:7f:4a:b3:fb:01:03:14:39:42: 33:fb:8e:84:32:ba:a8:5f:6b:4f:36:91:f3:19:92:ec:ef:28: 09:3f:a3:eb:19:f9:c8:91:1e:de:56:79:f3:c9:53:ae:d1:aa: ad:b2:1a:88:3f:3b:fd:59:76:3d:a5:5e:58:e1:68:76:1d:78: 20:c6:40:46:74:7e:bc:98:82:e4:93:96:c8:c4:e9:21:94:cd: d1:3f:55:e2:e8:df:6f:f6:2c:0c:f2:6a:6d:e3:01:ae:05:06: ea:9a:5e:46:c3:e0:83:f8:65:d2:dc:df:f9:a3:f5:2e:06:b8: f8:ce:41:00:a6:0d:3e:a5:a9:d5:49:97:36:3b:cb:b9:9c:ef: 18:81:c1:fb:89:20:4d:1a:c8:f7:11:26:d6:a1:8b:6a:b6:a2: f6:53:5c:f4:07:c9:d6:64:15:70:eb:aa:cb:97:07:e2:c5:37: 25:f0:33:66:a4:1d:c1:03:19:0e:51:b3:14:5f:dc:dd:be:52: 1b:44:c2:1f:bf:3d:fc:16:eb:3e:f6:af:42:ae:00:aa:1b:c9: ed:c9:93:1e:b9:11:f4:b7:cf:7c:2f:92:cd:e6:cd:b5:bf:58: 64:9a:f0:5f:f1:cb:90:12:29:92:78:8a:a0:6d:db:49:76:38: e6:3e:26:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3WOBZ+PL9HvT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODFiYjM1YzctOWU3Mi00NjMyLWFhZDYtMjA4MDQ4MzQ2NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmkbqr6FoWxAJej78TEYpJ2cthf5TYHBbchR 04bn0T07M9mzYpyh6JC6MweJlfPLNBNmst2k1YObuVKVcnODClwCt7cQ0Fd4CAL9 XSY52tNvssMljFNMo5xKlnHCv/XPs+3uj+HyOmjSzbago22Yth+c0Hy87CN9rQb3 brE/QFYVhhdgeu1MyRO2LIUV8u8c1b0ljoSTYEWpgzlve7AlM+IcxlULihmuiZXo 5LrdeUsA+Dqor5sZhe2mtk7DQ7lS8mtWERfWDWZV1brESXc1tSh/H4xlpA0jknW9 pLCopL4KNpLKgdoVzAFjLCoV386WDrFLUA4G85Z1StcOQgJK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP87eBo6QqdMz9bAwFSJ8/jTi/5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjQ1ODc3MTktZjdlYi0z Y2I4LWE5NTctZTIzZGQyOWVmNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuJJzWkWiqeIn9Ks/sBAxQ5QjP7joQyuqhfa082kfMZkuzvKAk/o+sZ +ciRHt5WefPJU67Rqq2yGog/O/1Zdj2lXljhaHYdeCDGQEZ0fryYguSTlsjE6SGU zdE/VeLo32/2LAzyam3jAa4FBuqaXkbD4IP4ZdLc3/mj9S4GuPjOQQCmDT6lqdVJ lzY7y7mc7xiBwfuJIE0ayPcRJtahi2q2ovZTXPQHydZkFXDrqsuXB+LFNyXwM2ak HcEDGQ5RsxRf3N2+UhtEwh+/PfwW6z72r0KuAKobye3Jkx65EfS3z3wvks3mzbW/ WGSa8F/xy5ASKZJ4iqBt20l2OOY+JlY= -----END CERTIFICATE-----Generated at Sun Aug 23 09:29:16 2026 by rpki-client