$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3f7481d0-a340-3b4f-a5e8-16c1b370e2c3.roa File: 3f7481d0-a340-3b4f-a5e8-16c1b370e2c3.roa (raw, json) Hash identifier: JK/RMU7mLn0WfCwZmnrLTZYxkKhXPgSKBOZfHOF5TFQ= Subject key identifier: CA:CA:02:1F:25:4B:9D:CA:13:04:BB:A5:75:F8:92:C5:A7:BB:B8:60 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D44FA6DF332C2C317ED20DC80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3f7481d0-a340-3b4f-a5e8-16c1b370e2c3.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 54994 IP address blocks: 157.185.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6d:f3:32:c2:c3:17:ed:20:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=355f4cf1-ecb9-4dde-8250-ad6db6beebf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:99:7e:4c:3b:5e:7f:d6:b8:fc:19:08:0b: d0:02:23:ca:36:0f:24:b6:7a:4f:e3:01:71:a2:fe: 18:f2:0c:47:6b:42:af:e6:9c:fe:6d:04:de:cf:12: 00:f8:6c:13:ff:63:42:9d:4f:4b:ab:1c:1a:0d:e2: 39:48:56:2c:14:27:6b:dd:d9:9b:2d:9a:1c:1f:26: 11:5d:66:02:a4:4b:27:79:45:88:d6:f4:51:b7:8f: 31:78:4c:39:c1:59:cc:3b:bd:f1:4d:77:b0:83:38: 95:ea:fa:12:54:85:d7:29:8b:09:0d:e9:4b:c8:0f: 80:df:2b:5c:23:26:7f:4c:4b:50:21:cd:f6:9b:dc: bb:66:18:5e:8d:9b:38:24:2a:93:df:86:ea:8c:a5: 54:96:8a:01:31:ed:75:ab:3e:cc:d9:8d:39:52:0e: 06:da:d6:c7:21:ab:77:4e:dc:84:61:e5:da:77:f0: c3:18:ce:e0:a2:22:93:4b:ce:f5:34:77:07:56:03: 49:72:ba:07:2e:a6:8d:3f:ba:92:19:46:0e:29:06: 9f:1b:41:cb:6c:5b:02:c3:c0:49:8a:b6:4d:9b:d4: be:31:4d:5c:f8:00:da:cd:e6:52:e6:0f:e5:fa:9c: 7d:36:50:3d:16:a6:e0:d4:99:f2:21:86:82:ad:fc: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:02:1F:25:4B:9D:CA:13:04:BB:A5:75:F8:92:C5:A7:BB:B8:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3f7481d0-a340-3b4f-a5e8-16c1b370e2c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:78:0c:fc:42:b1:1e:12:39:90:bb:1d:df:a8:ae:53:06:85: fc:b4:c2:ac:23:cc:87:18:8f:04:89:f3:d0:15:8f:db:97:b9: 38:05:0e:bc:e7:64:94:36:a7:d5:f3:e2:47:c4:b8:d3:e4:06: d3:28:02:32:0e:0b:18:cf:6a:74:61:53:0d:bd:2c:e8:62:b9: 1d:df:46:d0:8e:11:d8:84:af:bd:09:81:8e:f5:34:ea:e7:b6: 8f:02:e8:6f:66:f9:0c:99:d9:c8:85:ab:be:69:41:ef:d4:50: 48:57:b1:77:18:a5:13:23:bf:14:1d:c3:1f:32:0c:00:0b:a0: 7a:7f:e9:6a:03:78:b5:00:39:1d:20:0d:f4:62:1e:c3:34:4b: 56:06:f9:1a:93:87:9b:6f:f6:53:a3:b3:4d:ec:16:69:cd:95: 94:45:d6:03:a7:c1:bc:6a:9e:83:2c:a3:a1:f2:37:df:02:9c: c1:e8:78:e0:7a:d9:d1:37:c9:2b:1a:7a:3a:d9:f6:c6:ce:cd: 59:2e:f1:48:a1:99:52:6d:3e:9b:56:00:d8:fd:fa:49:1b:02: f8:7d:8b:3e:6c:e3:f1:c3:a2:83:fd:a3:f1:1d:29:ca:d4:32: 06:10:5e:ff:4b:2a:93:49:8b:69:29:c3:01:ce:31:46:3a:d5: 98:a9:b4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+m3zMsLDF+0g3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MzU1ZjRjZjEtZWNiOS00ZGRlLTgyNTAtYWQ2ZGI2YmVlYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDmZfkw7Xn/WuPwZCAvQAiPKNg8ktnpP4wFx ov4Y8gxHa0Kv5pz+bQTezxIA+GwT/2NCnU9LqxwaDeI5SFYsFCdr3dmbLZocHyYR XWYCpEsneUWI1vRRt48xeEw5wVnMO73xTXewgziV6voSVIXXKYsJDelLyA+A3ytc IyZ/TEtQIc32m9y7ZhhejZs4JCqT34bqjKVUlooBMe11qz7M2Y05Ug4G2tbHIat3 TtyEYeXad/DDGM7goiKTS871NHcHVgNJcroHLqaNP7qSGUYOKQafG0HLbFsCw8BJ irZNm9S+MU1c+ADazeZS5g/l+px9NlA9Fqbg1JnyIYaCrfz7XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrKAh8lS53KEwS7pXX4ksWnu7hgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvM2Y3NDgxZDAtYTM0MC0z YjRmLWE1ZTgtMTZjMWIzNzBlMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx4DPxCsR4SOZC7Hd+orlMGhfy0wqwjzIcYjwSJ89AVj9uXuTgFDrzn ZJQ2p9Xz4kfEuNPkBtMoAjIOCxjPanRhUw29LOhiuR3fRtCOEdiEr70JgY71NOrn to8C6G9m+QyZ2ciFq75pQe/UUEhXsXcYpRMjvxQdwx8yDAALoHp/6WoDeLUAOR0g DfRiHsM0S1YG+RqTh5tv9lOjs03sFmnNlZRF1gOnwbxqnoMso6HyN98CnMHoeOB6 2dE3ySsaejrZ9sbOzVku8UihmVJtPptWANj9+kkbAvh9iz5s4/HDooP9o/EdKcrU MgYQXv9LKpNJi2kpwwHOMUY61ZiptJ4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:26:30 2026 by rpki-client