$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/9af4b2ec-778d-3ec3-8117-a5af5f26a127.roa File: 9af4b2ec-778d-3ec3-8117-a5af5f26a127.roa (raw, json) Hash identifier: Gj2KoBbXBfvmNGcGwbZ7cAxM6jDjJreKiyft35jNSME= Subject key identifier: 40:49:03:34:F1:8B:76:CD:1E:46:47:ED:8C:A4:A4:59:9E:3A:C8:1B Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Certificate serial: 010D0C9F4328584D3E001DD72AB98C2C2C07A800 Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/9af4b2ec-778d-3ec3-8117-a5af5f26a127.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 29888 IP address blocks: 198.51.179.0/24 maxlen: 24 204.10.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:1d:d7:2a:b9:8c:2c:2c:07:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=14e4ab51-dcb6-4dcc-ab3c-c96ca090dc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:70:c5:7d:b3:40:26:80:70:2c:62:8e:0d: fd:33:cb:55:c3:2d:7a:fe:17:13:f4:bf:4b:b1:03: b6:2d:19:d7:e0:c3:ec:d4:5a:ce:cd:86:d8:a4:6f: 1a:f7:f3:26:ca:08:11:f0:d3:bb:8f:fb:2c:f9:be: 10:84:50:ca:ec:31:5e:89:9e:8d:62:c6:0a:51:40: 58:b6:47:7b:d2:2f:41:b5:42:f7:d6:24:1f:da:e0: 3a:d8:a0:71:b3:8b:91:95:27:12:fb:51:ea:84:3e: 54:27:20:6d:be:1c:70:6d:f2:c5:a2:e4:4c:f3:38: a4:0b:b5:7f:47:5e:6a:42:6d:a2:46:a0:77:9f:f1: db:92:e3:52:f1:ab:d6:02:91:dd:29:ef:6b:56:fa: cc:5d:76:3f:da:e7:73:64:33:8e:f3:50:fb:4e:97: 2d:bb:0d:cd:d6:8f:3a:c4:00:56:37:d5:39:b8:3b: 2a:b3:a9:75:80:5e:4a:ac:6b:78:37:cf:ce:45:fb: d9:dd:48:eb:f8:e6:f3:3b:2c:62:64:f1:02:63:f7: 55:7d:36:5e:c5:a9:59:00:f8:35:30:03:7b:58:9d: 0b:9d:eb:45:49:a9:27:ab:b8:e8:7c:1a:09:b0:8b: 0e:8a:4d:48:47:9b:bf:ee:0d:ad:73:ad:35:c7:bc: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:49:03:34:F1:8B:76:CD:1E:46:47:ED:8C:A4:A4:59:9E:3A:C8:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/9af4b2ec-778d-3ec3-8117-a5af5f26a127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl X509v3 Authority Key Identifier: keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer sbgp-ipAddrBlock: critical IPv4: 198.51.179.0/24 204.10.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8b:98:c3:85:b7:01:41:51:e5:8a:9b:df:98:1e:71:ec:e4: 0e:95:9c:86:68:c6:70:9d:5a:c0:7d:a8:ec:15:32:37:72:e0: 7c:ac:d4:b9:50:48:12:3e:e7:d1:b8:9e:2d:b6:3b:c3:2b:60: c4:47:41:70:f0:da:3f:5e:8b:a1:1b:14:13:39:85:b5:cb:d5: 94:d5:fd:6c:81:4f:2f:5f:20:cf:6c:6e:02:eb:e3:e2:7e:df: b7:4f:d2:7f:d1:7f:78:a9:90:9b:f4:4d:20:5e:0e:3e:52:71: 22:e2:f9:89:f7:bd:1c:74:7d:49:07:42:bd:d2:b3:b2:59:35: 23:18:48:49:ac:47:64:84:f4:bc:44:05:b3:05:b3:17:d5:f7: c5:e5:b4:6f:f4:0c:3c:e5:64:39:86:61:43:19:e7:6e:23:bc: 34:4a:5f:e8:11:22:9d:e6:c7:f2:69:84:bf:ec:50:a3:e7:00: 7d:93:7b:74:78:68:ea:79:cf:4e:b7:92:82:8f:5b:1c:4d:81: 5d:45:7e:e8:54:e8:33:72:05:66:07:30:c0:5f:3f:4b:d0:08: 9e:2a:90:f9:ed:7c:f8:b4:2b:7e:06:1e:af:19:97:0e:aa:1a: 1d:22:44:6f:b5:a1:9d:5e:f5:b6:1e:f1:8c:27:ed:4c:d3:bc: c1:c3:1d:ba -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0+AB3XKrmMLCwHqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3 MGRiMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTRlNGFiNTEtZGNiNi00ZGNjLWFiM2MtYzk2Y2EwOTBkYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LlwxX2zQCaAcCxijg39M8tVwy16/hcT9L9L sQO2LRnX4MPs1FrOzYbYpG8a9/MmyggR8NO7j/ss+b4QhFDK7DFeiZ6NYsYKUUBY tkd70i9BtUL31iQf2uA62KBxs4uRlScS+1HqhD5UJyBtvhxwbfLFouRM8zikC7V/ R15qQm2iRqB3n/HbkuNS8avWApHdKe9rVvrMXXY/2udzZDOO81D7Tpctuw3N1o86 xABWN9U5uDsqs6l1gF5KrGt4N8/ORfvZ3Ujr+ObzOyxiZPECY/dVfTZexalZAPg1 MAN7WJ0LnetFSaknq7jofBoJsIsOik1IR5u/7g2tc601x7wvYwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEBJAzTxi3bNHkZH7YykpFmeOsgbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvOWFmNGIyZWMtNzc4ZC0z ZWMzLTgxMTctYTVhZjVmMjZhMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3 NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh MzBmNzcwZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxjOzAwQC zAosMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKqLmMOFtwFBUeWKm9+YHnHs5A6VnIZoxnCdWsB9qOwVMjdy 4Hys1LlQSBI+59G4ni22O8MrYMRHQXDw2j9ei6EbFBM5hbXL1ZTV/WyBTy9fIM9s bgLr4+J+37dP0n/Rf3ipkJv0TSBeDj5ScSLi+Yn3vRx0fUkHQr3Ss7JZNSMYSEms R2SE9LxEBbMFsxfV98XltG/0DDzlZDmGYUMZ524jvDRKX+gRIp3mx/JphL/sUKPn AH2Te3R4aOp5z063koKPWxxNgV1FfuhU6DNyBWYHMMBfP0vQCJ4qkPntfPi0K34G Hq8Zlw6qGh0iRG+1oZ1e9bYe8Ywn7UzTvMHDHbo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:23:14 2026 by rpki-client