$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa File: c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa (raw, json) Hash identifier: bzMkneJeNrg6VJR6ElxvPc0h2AXy2N/Wp74J8z1R2Jw= Subject key identifier: 98:77:92:89:1C:11:FD:CC:3A:A3:BC:57:00:1D:B7:9F:DE:85:C6:27 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DE15087F413511EE8D5AEAF80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 54994 IP address blocks: 157.185.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:87:f4:13:51:1e:e8:d5:ae:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=191ca9f2-03a8-4abe-a91b-faca26beba53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:83:a5:15:35:55:29:75:44:d5:d9:dc:b3: 2c:32:8c:58:e4:ab:73:5e:fb:4c:fe:53:84:49:c0: 09:c4:53:3a:4c:68:85:db:76:6d:b5:e0:8d:1b:30: a7:b1:73:28:af:fc:87:1e:79:36:fd:77:5f:39:25: 69:62:8f:f9:ff:85:b5:8f:87:41:46:67:21:f7:f4: e7:dc:10:64:75:6a:cf:7d:d9:41:1c:d6:05:82:1f: f3:a6:71:07:3e:0c:c8:9e:22:da:56:c3:25:c6:d3: d2:67:0d:7b:f8:50:9f:38:00:40:af:61:fd:24:3c: 1a:07:0a:72:b0:5d:17:0b:d0:d7:bc:44:5d:e7:5b: 96:77:7f:1f:50:a4:1c:53:dc:09:0c:de:34:91:fc: 89:a7:f6:86:72:e2:67:ab:96:e5:0d:94:2d:87:07: e9:7c:ef:d2:e1:3b:ce:c7:64:23:57:e4:2b:48:25: 74:b4:4a:5c:cc:f6:63:ff:12:5c:f1:11:3d:9c:79: f7:81:b4:7a:96:de:3d:b3:1a:8d:35:a7:4a:83:d0: 17:6a:88:bd:c5:a2:8b:0d:20:f1:b0:11:28:73:35: 4a:a2:8b:aa:93:cb:08:65:2d:c3:3a:fd:82:be:c5: 1a:bf:5c:29:69:b3:56:63:8f:5d:d1:7e:21:8c:47: 37:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:77:92:89:1C:11:FD:CC:3A:A3:BC:57:00:1D:B7:9F:DE:85:C6:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c8d8b3fd-e3f4-351b-a8e0-426e2285c88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e5:fa:16:92:27:6c:c2:09:3a:6f:dc:de:ae:f0:67:20:39: 2e:9f:b6:d7:f9:07:63:c4:f3:61:8f:8b:e3:f4:d4:02:16:5a: 7c:42:01:28:5c:d6:7d:a0:8b:fd:99:4d:e4:b8:75:2e:77:b6: a8:21:ec:4b:f5:57:8a:a9:c6:17:36:10:9f:96:12:93:8d:b6: 6d:11:f2:06:03:f9:c3:df:eb:e3:63:47:e9:f7:3a:7c:07:94: 06:42:c9:5e:f0:47:83:9f:83:66:58:86:8e:8c:94:7d:ea:f0: 88:64:03:c9:3e:b5:8b:23:a5:84:7a:95:3f:80:24:99:78:4f: ef:ce:64:65:37:d5:05:d2:25:7d:c7:97:3d:ef:bb:d7:96:42: e3:33:cb:97:79:46:a6:7b:20:95:81:3a:cb:73:cf:4f:7e:74: db:d7:2f:e9:b6:b9:2d:2d:6d:87:d0:ec:2a:65:d5:e9:01:9f: 7a:ce:d1:fb:49:05:8b:65:eb:d3:2f:e7:fa:88:cf:72:a7:f1: 04:29:07:50:97:41:1b:7f:94:8a:db:c0:3a:7b:3e:95:4f:a3: e5:49:46:d9:2e:b1:f8:ab:bd:5f:92:39:b4:29:a5:65:fe:a6: 2b:bb:a6:94:31:0e:e9:86:2b:9c:6b:26:10:54:ec:ae:06:20: 45:38:8a:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUIf0E1Ee6NWur4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk MTkxY2E5ZjItMDNhOC00YWJlLWE5MWItZmFjYTI2YmViYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVaDpRU1VSl1RNXZ3LMsMoxY5KtzXvtM/lOE ScAJxFM6TGiF23ZtteCNGzCnsXMor/yHHnk2/XdfOSVpYo/5/4W1j4dBRmch9/Tn 3BBkdWrPfdlBHNYFgh/zpnEHPgzIniLaVsMlxtPSZw17+FCfOABAr2H9JDwaBwpy sF0XC9DXvERd51uWd38fUKQcU9wJDN40kfyJp/aGcuJnq5blDZQthwfpfO/S4TvO x2QjV+QrSCV0tEpczPZj/xJc8RE9nHn3gbR6lt49sxqNNadKg9AXaoi9xaKLDSDx sBEoczVKoouqk8sIZS3DOv2CvsUav1wpabNWY49d0X4hjEc3NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh3kokcEf3MOqO8VwAdt5/ehcYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYzhkOGIzZmQtZTNmNC0z NTFiLWE4ZTAtNDI2ZTIyODVjODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfl+haSJ2zCCTpv3N6u8GcgOS6fttf5B2PE82GPi+P01AIWWnxCAShc 1n2gi/2ZTeS4dS53tqgh7Ev1V4qpxhc2EJ+WEpONtm0R8gYD+cPf6+NjR+n3OnwH lAZCyV7wR4Ofg2ZYho6MlH3q8IhkA8k+tYsjpYR6lT+AJJl4T+/OZGU31QXSJX3H lz3vu9eWQuMzy5d5RqZ7IJWBOstzz09+dNvXL+m2uS0tbYfQ7Cpl1ekBn3rO0ftJ BYtl69Mv5/qIz3Kn8QQpB1CXQRt/lIrbwDp7PpVPo+VJRtkusfirvV+SObQppWX+ piu7ppQxDumGK5xrJhBU7K4GIEU4igg= -----END CERTIFICATE-----Generated at Sun May 24 15:28:19 2026 by rpki-client