$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa File: d57b8855-f9bb-367b-821d-c56c2260256c.roa (raw, json) Hash identifier: vewkK8DZ/RvmZVvYgFOYXrtn19dLb51WqTi86mApQko= Subject key identifier: 29:FE:E0:96:8D:DF:E6:F4:B6:47:8C:6B:ED:CB:4C:3F:09:09:A5:3A Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F3FAD3C2EAC6E9B402147AA00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 168.235.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3c:2e:ac:6e:9b:40:21:47:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=d6f654f0-606d-4434-85f8-167447120264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:71:c3:fa:6c:16:78:a1:19:e3:11:92:0c: af:a2:84:e6:f9:21:4b:7d:1a:de:bd:4d:45:d4:c8: f6:69:38:2c:9d:f7:8a:cd:e1:03:eb:a8:eb:69:31: 0a:78:4c:ca:f5:fb:6a:17:20:e8:fe:0d:b6:87:29: 10:ba:b2:d4:3e:40:ae:16:7e:80:1d:91:57:c0:dc: 71:5a:d8:67:cf:99:9a:9f:c1:70:11:22:5b:7b:af: 9a:be:82:06:49:ff:3a:1c:41:dc:a1:d2:fc:ad:c4: 14:d9:c8:a9:83:73:8c:41:18:9a:cd:ae:3b:d1:a2: d8:44:77:bf:21:f1:22:00:4a:13:86:14:5d:1d:c8: 59:3a:32:a2:20:e9:ba:93:0e:cd:6d:d7:d7:e4:10: aa:04:f4:6b:ed:0d:87:07:65:29:4c:29:f5:19:00: 50:fb:3f:9f:6b:ed:60:78:16:7e:f9:ef:70:b8:0a: 51:db:57:eb:23:3f:15:d0:ba:25:6e:bd:76:2b:d0: d7:98:00:ce:a1:94:e6:46:05:e5:ed:21:89:5c:44: 7c:a3:61:8a:04:09:7a:12:84:02:dc:22:54:0e:6b: bc:37:f8:58:51:d1:7b:6a:a6:5a:7a:2b:8c:c4:e5: 94:c0:33:9f:97:ca:e4:47:96:6e:22:b2:5a:64:1c: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FE:E0:96:8D:DF:E6:F4:B6:47:8C:6B:ED:CB:4C:3F:09:09:A5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d57b8855-f9bb-367b-821d-c56c2260256c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c3:40:d0:11:c4:f2:a1:8e:41:43:a0:8b:0a:cc:09:8c:cf: 36:a3:90:c3:f1:94:93:fa:0c:d7:5b:e1:e5:65:1a:8d:51:17: 53:6d:7f:10:1d:de:da:77:dd:1f:eb:45:d5:61:96:0b:aa:d1: d4:8b:ee:3a:d2:8e:c2:ca:55:e9:b7:e6:4a:05:5c:ac:41:28: 1f:30:ae:86:c6:84:2f:55:47:8a:fa:ed:b7:70:2f:a4:0f:da: 94:e2:62:bd:a9:2b:72:bf:e0:59:07:e4:1f:8d:2a:6a:e2:0b: 31:94:c5:3f:e8:ac:2a:4f:78:2c:62:c2:2e:8b:19:1e:9a:e3: e8:d3:78:63:85:56:84:05:a1:dd:91:05:c1:32:24:89:0c:ed: 7c:85:8a:e9:cb:5b:67:30:1c:3d:98:34:eb:23:93:09:9c:08: db:d6:72:09:c9:bc:db:ec:9d:61:2a:91:40:3d:8a:74:6d:c6: f3:26:4e:9b:27:c0:8d:f0:aa:3f:c2:3e:ab:6e:e2:c8:f1:31: c7:af:0b:9f:80:41:12:d9:57:55:2f:d7:9a:0d:4c:44:e5:c2: f2:48:e3:e5:50:3d:6d:2d:95:65:92:87:8c:02:9e:f0:7d:c8: 9d:91:d1:a7:99:bf:14:de:47:ae:ee:f3:a5:f4:70:fd:b7:03: 37:01:4f:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTwurG6bQCFHqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDZmNjU0ZjAtNjA2ZC00NDM0LTg1ZjgtMTY3NDQ3MTIwMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Jxw/psFnihGeMRkgyvooTm+SFLfRrevU1F 1Mj2aTgsnfeKzeED66jraTEKeEzK9ftqFyDo/g22hykQurLUPkCuFn6AHZFXwNxx Wthnz5man8FwESJbe6+avoIGSf86HEHcodL8rcQU2cipg3OMQRiaza470aLYRHe/ IfEiAEoThhRdHchZOjKiIOm6kw7NbdfX5BCqBPRr7Q2HB2UpTCn1GQBQ+z+fa+1g eBZ++e9wuApR21frIz8V0Lolbr12K9DXmADOoZTmRgXl7SGJXER8o2GKBAl6EoQC 3CJUDmu8N/hYUdF7aqZaeiuMxOWUwDOfl8rkR5ZuIrJaZBzFiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn+4JaN3+b0tkeMa+3LTD8JCaU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZDU3Yjg4NTUtZjliYi0z NjdiLTgyMWQtYzU2YzIyNjAyNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvDQNARxPKhjkFDoIsKzAmMzzajkMPxlJP6DNdb4eVlGo1RF1NtfxAd 3tp33R/rRdVhlguq0dSL7jrSjsLKVem35koFXKxBKB8wrobGhC9VR4r67bdwL6QP 2pTiYr2pK3K/4FkH5B+NKmriCzGUxT/orCpPeCxiwi6LGR6a4+jTeGOFVoQFod2R BcEyJIkM7XyFiunLW2cwHD2YNOsjkwmcCNvWcgnJvNvsnWEqkUA9inRtxvMmTpsn wI3wqj/CPqtu4sjxMcevC5+AQRLZV1Uv15oNTETlwvJI4+VQPW0tlWWSh4wCnvB9 yJ2R0aeZvxTeR67u86X0cP23AzcBT74= -----END CERTIFICATE-----Generated at Sun Oct 4 02:22:45 2026 by rpki-client