$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa File: ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa (raw, json) Hash identifier: mYHS6Qv6TRAUUFlyIu+KRoWFh3JUflXrYKbLwKe9Fd4= Subject key identifier: 21:B2:DE:DB:36:7B:E0:E7:01:80:98:91:CA:11:7A:31:D1:7D:0F:47 Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Certificate serial: 010D0C9F4328584D7A051B65AA11F0E9CB82C280 Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 3356 IP address blocks: 192.136.176.0/20 maxlen: 24 204.10.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1b:65:aa:11:f0:e9:cb:82:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=41ed1ca2-ea12-4374-920b-4a77d8103a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ce:6d:1a:41:0c:6d:53:1f:4c:0e:14:c0:68: d1:6d:63:be:e1:27:f3:87:49:02:57:ad:9a:a2:d2: 76:05:35:95:19:21:0f:a4:8b:a7:86:d1:26:21:3e: 5f:5c:bf:6b:31:05:d2:b0:33:12:50:43:81:8a:62: be:3f:a8:c9:2d:56:14:79:de:1e:da:be:5f:18:4e: 26:93:c2:c3:56:cf:1d:49:f7:c3:fa:8e:33:0f:ad: 17:26:68:19:e6:2d:31:9c:7d:f6:40:e4:84:60:fa: 76:02:a8:d9:77:11:e4:79:3f:7f:ea:87:25:dc:71: ea:30:2a:8e:56:82:8b:48:8c:f9:12:21:de:70:d3: 9b:34:4f:56:c3:33:2e:23:ba:c4:97:e5:89:a3:37: 8c:25:fb:3f:a5:ea:9f:f4:37:89:c5:c3:60:2e:1b: 4f:b7:dc:68:cc:ed:7f:eb:67:29:db:4c:b1:ed:ff: 8b:ba:72:a2:7a:b6:12:7a:e4:82:66:68:dd:c8:73: f7:ee:fe:68:a6:de:8a:49:eb:d4:ea:e6:a3:9a:61: 51:f0:c8:5d:1d:e9:fe:2e:1a:d4:79:77:43:ac:ca: b6:41:7b:6b:59:d8:76:a7:3f:52:58:80:57:7e:70: a1:fe:15:04:8c:ce:60:cf:b2:95:65:6c:e3:31:1d: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B2:DE:DB:36:7B:E0:E7:01:80:98:91:CA:11:7A:31:D1:7D:0F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl X509v3 Authority Key Identifier: keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer sbgp-ipAddrBlock: critical IPv4: 192.136.176.0/20 204.10.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c3:55:10:56:23:49:6e:8f:26:dd:fd:1d:f7:30:4e:95:6d: 9e:21:5c:fd:34:06:29:4f:1a:bd:4b:c2:ed:3a:14:ec:f0:51: 38:5d:5f:59:45:c2:f5:82:b9:19:ac:ab:49:99:36:26:35:61: a1:40:50:e5:58:28:14:c8:c8:56:55:01:c4:62:21:11:85:04: 0d:82:55:55:72:ed:37:05:15:78:53:a6:9b:f1:13:cb:99:e6: 7f:44:76:0f:01:cc:1f:c7:f0:dc:75:1b:da:60:b0:31:13:e2: 9b:2c:45:fe:57:4c:aa:66:8f:87:3d:2c:51:16:c4:6d:bf:fb: e7:7c:3a:4b:73:6a:71:55:73:35:e9:9c:4e:ad:a9:fd:d4:04: 35:77:90:96:f8:9b:e6:7b:dd:0c:ee:5d:92:47:8b:c3:20:fb: 7e:8d:11:77:ca:0a:b8:f0:a3:a9:d3:64:4e:c4:c6:df:9f:98: 29:1e:08:39:0b:5f:13:2f:51:34:b1:3b:37:5b:87:3c:a0:c4: 59:06:f9:af:a2:c9:e3:3e:37:f2:bc:d3:be:4d:61:33:52:fa: 26:1c:e1:07:6d:54:a0:b3:c3:7e:77:c6:bb:95:8a:e4:5a:37: b6:d1:ef:89:56:53:75:21:88:3e:59:ca:67:f7:c8:2e:a9:9e: d5:7f:8e:ab -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE16BRtlqhHw6cuCwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3 MGRiMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NDFlZDFjYTItZWExMi00Mzc0LTkyMGItNGE3N2Q4MTAzYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh85tGkEMbVMfTA4UwGjRbWO+4Sfzh0kCV62a otJ2BTWVGSEPpIunhtEmIT5fXL9rMQXSsDMSUEOBimK+P6jJLVYUed4e2r5fGE4m k8LDVs8dSffD+o4zD60XJmgZ5i0xnH32QOSEYPp2AqjZdxHkeT9/6ocl3HHqMCqO VoKLSIz5EiHecNObNE9WwzMuI7rEl+WJozeMJfs/peqf9DeJxcNgLhtPt9xozO1/ 62cp20yx7f+LunKierYSeuSCZmjdyHP37v5opt6KSevU6uajmmFR8MhdHen+LhrU eXdDrMq2QXtrWdh2pz9SWIBXfnCh/hUEjM5gz7KVZWzjMR0RCQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCGy3ts2e+DnAYCYkcoRejHRfQ9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvZWEyZTMyZTAtOGIzMy0z YzVkLWI0NzktNjhiMGEyY2VlYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3 NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh MzBmNzcwZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEwIiwAwQC zAosMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAzDVRBWI0lujybd/R33ME6VbZ4hXP00BilPGr1Lwu06FOzw UThdX1lFwvWCuRmsq0mZNiY1YaFAUOVYKBTIyFZVAcRiIRGFBA2CVVVy7TcFFXhT ppvxE8uZ5n9Edg8BzB/H8Nx1G9pgsDET4pssRf5XTKpmj4c9LFEWxG2/++d8Oktz anFVczXpnE6tqf3UBDV3kJb4m+Z73QzuXZJHi8Mg+36NEXfKCrjwo6nTZE7Ext+f mCkeCDkLXxMvUTSxOzdbhzygxFkG+a+iyeM+N/K8075NYTNS+iYc4QdtVKCzw353 xruViuRaN7bR74lWU3UhiD5Zymf3yC6pntV/jqs= -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:45 2026 by rpki-client