$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa File: 48a21514-9b84-3789-b983-3138fee23ce0.roa (raw, json) Hash identifier: NNcu1aqkn3sHb1bqHqq+/o88y8K52e6h51J0SzmhkNw= Subject key identifier: AE:BB:A5:39:B1:E4:B4:37:21:42:EE:43:CC:EB:13:11:F4:9E:EB:85 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EFCACC9D7D12185CB2942A000 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 54994 IP address blocks: 168.235.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c9:d7:d1:21:85:cb:29:42:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=6f02f0d9-4f3a-47e8-a545-da53df77c350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:4c:2b:a3:d8:b6:43:04:e1:eb:c9:84:fc: 51:e3:71:93:a8:f3:eb:bc:29:9c:c7:4a:0d:02:b9: 95:21:c3:e5:66:7d:ea:a2:0b:03:4a:52:7c:6a:37: 22:d9:67:c4:4c:e6:87:9e:44:fa:61:aa:f0:11:b3: 39:51:a1:60:3a:ad:cc:4b:7e:cb:04:ee:e4:23:b3: d4:72:cb:97:f6:84:36:da:68:b3:c0:26:a9:15:93: 83:b9:e0:be:c2:59:4c:49:f2:43:3a:84:ad:fc:8a: 07:77:f7:fc:80:e4:41:30:8a:22:69:7d:64:d8:15: 63:8b:c0:4a:52:68:ff:a0:3f:01:bb:97:b5:a3:99: c1:0e:b7:20:7d:00:ef:73:a8:b4:1b:ec:71:9d:36: 33:95:d0:17:b4:69:2f:38:54:7a:a3:95:b5:24:23: 5f:1a:6a:68:93:39:82:99:10:69:49:81:eb:e1:ed: 69:7c:cc:18:40:5e:01:a9:c9:7d:9e:b2:59:98:f1: d2:42:26:5d:c4:00:0d:ca:76:8d:53:8b:b1:c6:93: dd:e6:de:63:ca:1b:32:b8:1e:df:6a:f8:0e:52:ba: 0f:13:cd:45:ca:fb:1f:77:46:4a:92:87:80:5e:c5: 79:8d:e2:77:9b:01:56:5d:ad:28:0e:c1:4e:4d:df: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BB:A5:39:B1:E4:B4:37:21:42:EE:43:CC:EB:13:11:F4:9E:EB:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:39:2e:29:35:56:52:d4:53:55:ef:48:77:97:4d:1b:93:69: 51:49:d0:6c:5c:38:c8:3a:19:fb:09:8e:87:1f:22:ad:e9:17: ee:e4:0d:e0:39:ba:c8:65:b4:4d:57:40:cc:16:9d:b7:55:b6: 87:ea:46:62:04:c8:6b:d8:30:0b:96:01:56:62:5d:28:48:37: 77:0d:f5:2f:9e:94:8f:eb:25:07:96:67:8d:f9:a4:c1:92:77: 5d:ee:4a:4e:cc:a2:ac:52:03:d3:20:a5:31:7d:26:4e:94:d9: 59:af:94:5c:7c:ff:c3:24:43:9b:ad:31:67:e7:03:6f:51:3e: 8c:6a:b7:23:07:8a:80:8b:73:98:91:f3:34:cf:14:78:c0:e2: 91:4e:b1:b8:55:19:87:e8:7d:8b:ac:fb:98:e0:01:c7:22:83: 87:bd:3e:48:41:09:66:df:c2:d1:64:fb:72:b8:b5:ba:41:2c: 42:9f:ca:9e:59:ab:06:03:ca:0d:14:a9:93:3a:af:12:90:4a: 5f:c3:0e:aa:7f:87:78:21:18:0b:9c:bf:37:81:71:c0:6f:fa: 76:84:2a:04:38:8f:3f:16:73:de:d4:99:1d:5c:fd:78:57:ce: 0c:a0:0a:63:63:7b:04:78:b4:d9:cb:54:b3:f4:58:96:f6:54: 2b:13:3c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMnX0SGFyylCoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NmYwMmYwZDktNGYzYS00N2U4LWE1NDUtZGE1M2RmNzdjMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz9MK6PYtkME4evJhPxR43GTqPPrvCmcx0oN ArmVIcPlZn3qogsDSlJ8ajci2WfETOaHnkT6YarwEbM5UaFgOq3MS37LBO7kI7PU csuX9oQ22mizwCapFZODueC+wllMSfJDOoSt/IoHd/f8gORBMIoiaX1k2BVji8BK Umj/oD8Bu5e1o5nBDrcgfQDvc6i0G+xxnTYzldAXtGkvOFR6o5W1JCNfGmpokzmC mRBpSYHr4e1pfMwYQF4Bqcl9nrJZmPHSQiZdxAANynaNU4uxxpPd5t5jyhsyuB7f avgOUroPE81Fyvsfd0ZKkoeAXsV5jeJ3mwFWXa0oDsFOTd+D8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK67pTmx5LQ3IULuQ8zrExH0nuuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNDhhMjE1MTQtOWI4NC0z Nzg5LWI5ODMtMzEzOGZlZTIzY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs5Lik1VlLUU1XvSHeXTRuTaVFJ0GxcOMg6GfsJjocfIq3pF+7kDeA5 ushltE1XQMwWnbdVtofqRmIEyGvYMAuWAVZiXShIN3cN9S+elI/rJQeWZ435pMGS d13uSk7MoqxSA9MgpTF9Jk6U2VmvlFx8/8MkQ5utMWfnA29RPoxqtyMHioCLc5iR 8zTPFHjA4pFOsbhVGYfofYus+5jgAccig4e9PkhBCWbfwtFk+3K4tbpBLEKfyp5Z qwYDyg0UqZM6rxKQSl/DDqp/h3ghGAucvzeBccBv+naEKgQ4jz8Wc97UmR1c/XhX zgygCmNjewR4tNnLVLP0WJb2VCsTPCA= -----END CERTIFICATE-----Generated at Fri Sep 25 22:57:28 2026 by rpki-client