$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa File: 758605da-a950-3c7b-808b-b23cef708f68.roa (raw, json) Hash identifier: rnl0879/irHEDNEG0Nn1Zw06YosrwNyEnRlTubn6I/g= Subject key identifier: 29:95:78:69:FC:93:92:A2:0E:BF:5F:7D:6D:0F:78:C0:C5:02:9D:29 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EEEB759F13340C3F3901AEF40 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 54994 IP address blocks: 157.185.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:59:f1:33:40:c3:f3:90:1a:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=90b46800-aeac-49dd-9675-b9b60851a023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cc:07:a2:d9:df:4a:c9:36:ac:25:63:c5:75: 80:d4:70:fe:59:c0:15:11:3b:3d:76:be:61:25:4c: 4d:77:b9:9a:47:8e:ae:d7:2d:f9:f3:8d:5c:b0:5a: 5a:31:4f:51:b6:0b:c9:8a:b2:12:b8:a5:c5:46:32: 44:7b:0d:f3:70:b5:e8:f1:e9:dd:a8:92:f8:f2:47: 4c:36:70:92:d8:ba:61:27:73:81:38:95:b9:63:c6: 9e:c3:fd:63:25:2c:62:a7:5c:47:ae:70:eb:b9:05: de:70:e5:94:3c:80:9f:66:d9:14:d2:fd:58:bc:7c: 47:5c:d6:d8:0e:e4:f4:36:af:7a:47:c4:41:62:00: cb:68:10:e3:b6:a9:df:a6:2c:29:0d:bb:0c:b0:4f: 54:1f:e2:a0:3b:8d:bb:8a:b4:6c:23:01:ea:4d:dc: 3f:79:87:73:c0:4f:c9:56:7d:c5:3d:86:b9:5c:03: bd:28:ef:01:8a:7f:31:5c:bf:8a:4f:bc:a1:3f:10: 9c:8c:be:75:36:81:79:10:44:d5:3a:53:13:59:2f: 59:0e:4b:37:6b:08:2f:43:da:3b:5a:d3:fd:2e:be: c7:32:ee:65:0e:65:41:50:df:c5:03:8e:bf:9e:d3: 69:ab:58:4e:bf:4b:72:2e:c7:3d:0f:51:77:f1:0e: d2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:95:78:69:FC:93:92:A2:0E:BF:5F:7D:6D:0F:78:C0:C5:02:9D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:21:e0:95:92:34:ab:18:63:43:45:8a:21:e1:05:2f:5f:2f: ce:a7:cb:b1:1d:d6:3e:1e:02:f7:46:b6:54:8b:6d:4c:32:54: ff:4c:59:3b:d0:f3:a4:9d:e1:45:21:37:45:43:50:9a:be:a6: f4:ac:b6:84:9e:07:44:26:9a:57:ec:0f:58:63:8a:21:4b:bd: eb:1d:55:66:3e:d6:ce:c9:8d:bb:f5:d1:10:98:0e:1b:85:13: 0f:19:8b:90:24:69:81:0c:41:2b:36:63:77:3d:ae:5d:8c:2d: 23:be:1b:e5:64:0f:84:53:8a:d6:7d:b5:a9:7e:0a:05:4a:1b: d5:dd:a1:de:d7:6c:e5:55:b2:e7:66:5b:bb:6e:51:0e:09:c0: 04:80:5b:25:1d:75:f3:f8:01:8c:97:ff:97:75:9e:bd:33:e1: 73:c9:6f:e8:97:a2:b3:5f:61:9d:ea:ee:4c:19:e0:77:4b:8e: 10:1a:b4:93:eb:4a:07:bc:b8:1b:3d:92:b7:e3:8d:1d:bd:83: 5a:8c:a0:9b:7a:cf:46:a1:f4:23:04:41:f0:ba:58:7f:e6:f2: a6:f2:f3:5a:06:28:34:a4:35:bc:a8:1c:3d:63:e9:11:22:38: 0d:5f:53:44:7f:31:cc:12:55:95:f4:6e:44:6a:02:9a:7f:35: f3:d7:45:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1nxM0DD85Aa70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk OTBiNDY4MDAtYWVhYy00OWRkLTk2NzUtYjliNjA4NTFhMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cwHotnfSsk2rCVjxXWA1HD+WcAVETs9dr5h JUxNd7maR46u1y35841csFpaMU9RtgvJirISuKXFRjJEew3zcLXo8endqJL48kdM NnCS2LphJ3OBOJW5Y8aew/1jJSxip1xHrnDruQXecOWUPICfZtkU0v1YvHxHXNbY DuT0Nq96R8RBYgDLaBDjtqnfpiwpDbsMsE9UH+KgO427irRsIwHqTdw/eYdzwE/J Vn3FPYa5XAO9KO8Bin8xXL+KT7yhPxCcjL51NoF5EETVOlMTWS9ZDks3awgvQ9o7 WtP9Lr7HMu5lDmVBUN/FA46/ntNpq1hOv0tyLsc9D1F38Q7SIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmVeGn8k5KiDr9ffW0PeMDFAp0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzU4NjA1ZGEtYTk1MC0z YzdiLTgwOGItYjIzY2VmNzA4ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgh4JWSNKsYY0NFiiHhBS9fL86ny7Ed1j4eAvdGtlSLbUwyVP9MWTvQ 86Sd4UUhN0VDUJq+pvSstoSeB0QmmlfsD1hjiiFLvesdVWY+1s7Jjbv10RCYDhuF Ew8Zi5AkaYEMQSs2Y3c9rl2MLSO+G+VkD4RTitZ9tal+CgVKG9Xdod7XbOVVsudm W7tuUQ4JwASAWyUddfP4AYyX/5d1nr0z4XPJb+iXorNfYZ3q7kwZ4HdLjhAatJPr Sge8uBs9krfjjR29g1qMoJt6z0ah9CMEQfC6WH/m8qby81oGKDSkNbyoHD1j6REi OA1fU0R/McwSVZX0bkRqApp/NfPXRZ0= -----END CERTIFICATE-----Generated at Thu Sep 24 13:48:03 2026 by rpki-client