$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa File: 41e19a7e-8f36-383d-904b-62952b216c8e.roa (raw, json) Hash identifier: o9VBMclyIntpYuNv4XuWP6PvdRfbnWWLPEaE9OJJUDM= Subject key identifier: 08:2A:91:3C:2F:FF:17:03:63:CB:5C:87:94:68:C5:B0:07:B2:88:F1 Certificate issuer: /CN=ae9833c8-8b19-48ba-8b98-e74734094959 Certificate serial: 010D0C9F4328584D143D4E1F7A5C385121494480 Authority key identifier: A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 1252 IP address blocks: 137.197.0.0/16 maxlen: 24 192.94.102.0/24 maxlen: 24 192.94.103.0/24 maxlen: 24 192.94.104.0/24 maxlen: 24 192.94.105.0/24 maxlen: 24 192.94.106.0/24 maxlen: 24 192.94.107.0/24 maxlen: 24 192.94.108.0/24 maxlen: 24 192.198.32.0/20 maxlen: 24 192.198.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:4e:1f:7a:5c:38:51:21:49:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae9833c8-8b19-48ba-8b98-e74734094959 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e99838ae-bd00-4d1a-8f09-18eb6eb0eba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:5c:8b:56:42:61:e4:5f:d1:a9:2a:5f:e9: 7c:ab:48:58:50:7f:71:5d:8d:2e:25:a0:90:2f:58: e7:6b:52:82:79:36:06:61:a2:ce:57:50:83:6a:01: 98:2b:3b:4e:c1:04:76:cd:98:1e:e8:47:35:6b:ba: 9b:b3:3a:07:8a:93:b7:95:8e:fe:89:fa:a9:0c:9a: 37:9f:11:bb:9e:f8:43:aa:f0:a1:bd:2f:d9:66:0c: df:63:5c:38:96:f8:7f:c4:85:79:da:7c:cf:d6:8c: 11:89:ac:89:b7:e2:01:8d:ac:69:17:6a:ec:7b:4c: f3:53:e7:12:07:d0:5e:b7:8e:0e:be:39:41:31:00: ed:c1:72:4a:de:e4:a4:0f:84:79:88:f1:5b:54:42: 3a:a7:27:5c:2d:ea:97:92:10:7a:69:2f:e6:e0:97: a7:04:89:6d:f5:ef:46:7c:35:10:ac:ed:10:75:6d: f2:ee:84:ec:a9:3d:1c:60:d0:de:4f:20:7b:14:35: 41:21:36:92:07:e8:7c:06:7f:f1:2c:c9:8d:1b:f4: 06:65:22:ff:93:e3:d5:9e:03:ab:ea:ae:84:47:77: 36:3a:43:d1:e6:0c:92:cd:83:a2:14:22:4e:62:96: 23:85:38:e3:ac:3f:c0:5e:ca:07:70:b0:77:18:9b: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2A:91:3C:2F:FF:17:03:63:CB:5C:87:94:68:C5:B0:07:B2:88:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl X509v3 Authority Key Identifier: keyid:A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer sbgp-ipAddrBlock: critical IPv4: 137.197.0.0/16 192.94.102.0-192.94.108.255 192.198.32.0-192.198.55.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:5c:e6:db:16:7e:6e:dc:32:8f:e6:8d:34:5e:55:3f:bd:b8: d1:e4:1e:b3:e0:ff:ca:de:d5:5d:0c:1f:f9:03:b2:80:e2:fc: e8:d3:04:43:8e:4f:52:82:e5:54:e8:26:e0:4b:43:11:08:dc: d5:93:2f:fe:4a:7d:56:c8:4f:0b:8d:fb:5f:a1:98:36:13:11: 7b:eb:a9:be:2e:e3:45:2c:43:4b:35:8b:b4:de:94:c3:33:ea: 80:38:fa:c5:0f:26:2b:2a:0f:81:3e:1e:28:93:06:04:b0:ee: 0d:31:7e:79:9d:23:ad:c5:08:87:d0:da:c5:e8:5d:3b:f8:3a: 79:cd:ca:00:ff:c6:37:57:57:3b:bc:50:d9:58:4f:2b:b6:d1: 32:09:2b:73:83:59:2e:0b:9c:b1:30:fd:d3:e3:7e:2b:4d:ce: 79:02:b8:32:42:5c:26:bd:5f:08:e1:71:35:f5:7e:4c:d4:06: 96:e8:42:b5:f2:92:83:74:d1:a3:98:85:ca:2d:7f:1c:ed:52: b4:76:8c:99:ce:ce:6c:3b:6c:b5:9f:bc:00:0d:1c:7f:c3:57: 57:3e:73:8c:b3:a1:6e:7c:7a:bd:4a:9d:32:38:07:0c:ef:a1: 1e:4a:09:67:b1:36:7b:5d:ca:fd:42:65:59:02:a9:8d:21:f5: 16:60:5b:c1 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE0UPU4felw4USFJRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU5ODMzYzgtOGIxOS00OGJhLThiOTgtZTc0NzM0MDk0 OTU5MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTk5ODM4YWUtYmQwMC00ZDFhLThmMDktMThlYjZlYjBlYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTZci1ZCYeRf0akqX+l8q0hYUH9xXY0uJaCQ L1jna1KCeTYGYaLOV1CDagGYKztOwQR2zZge6Ec1a7qbszoHipO3lY7+ifqpDJo3 nxG7nvhDqvChvS/ZZgzfY1w4lvh/xIV52nzP1owRiayJt+IBjaxpF2rse0zzU+cS B9Bet44OvjlBMQDtwXJK3uSkD4R5iPFbVEI6pydcLeqXkhB6aS/m4JenBIlt9e9G fDUQrO0QdW3y7oTsqT0cYNDeTyB7FDVBITaSB+h8Bn/xLMmNG/QGZSL/k+PVngOr 6q6ER3c2OkPR5gySzYOiFCJOYpYjhTjjrD/AXsoHcLB3GJtkcwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFAgqkTwv/xcDY8tch5RoxbAHsojxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTk4 MzNjOC04YjE5LTQ4YmEtOGI5OC1lNzQ3MzQwOTQ5NTkvNDFlMTlhN2UtOGYzNi0z ODNkLTkwNGItNjI5NTJiMjE2YzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU5ODMzYzgtOGIxOS00OGJhLThi OTgtZTc0NzM0MDk0OTU5L2FlOTgzM2M4LThiMTktNDhiYS04Yjk4LWU3NDczNDA5 NDk1OS5jcmwwHwYDVR0jBBgwFoAUqeNiGHAp+7ec17x8Iv7DVcdDUBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTk4MzNjOC04YjE5LTQ4YmEtOGI5OC1lNzQ3 MzQwOTQ5NTkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAicUwDAME AcBeZgMEAMBebDAMAwQFwMYgAwQDwMYwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMBc5tsWfm7cMo/mjTRe VT+9uNHkHrPg/8re1V0MH/kDsoDi/OjTBEOOT1KC5VToJuBLQxEI3NWTL/5KfVbI TwuN+1+hmDYTEXvrqb4u40UsQ0s1i7TelMMz6oA4+sUPJisqD4E+HiiTBgSw7g0x fnmdI63FCIfQ2sXoXTv4OnnNygD/xjdXVzu8UNlYTyu20TIJK3ODWS4LnLEw/dPj fitNznkCuDJCXCa9XwjhcTX1fkzUBpboQrXykoN00aOYhcotfxztUrR2jJnOzmw7 bLWfvAANHH/DV1c+c4yzoW58er1KnTI4BwzvoR5KCWexNntdyv1CZVkCqY0h9RZg W8E= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:20 2026 by rpki-client