$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa File: 41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa (raw, json) Hash identifier: mh93aSovde/eCDEcz9fBD5mj1D/6JypexIA7wgjejPI= Subject key identifier: 4B:CB:3B:37:EF:B2:F2:74:24:4C:01:DA:BF:59:A5:5F:0E:C6:B6:F1 Certificate issuer: /CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59 Certificate serial: 010D0C9F4328584D86957A9813B7BE617DB15680 Authority key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 393462 IP address blocks: 192.35.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7a:98:13:b7:be:61:7d:b1:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=882965a0-36ab-414b-a520-8c7a90659f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:17:72:86:70:cb:01:06:72:71:c4:f3:06:b9: 0a:8d:55:1a:ad:89:93:93:53:34:95:72:1a:cf:ed: 67:9e:27:f2:b4:0f:6e:54:fd:02:8c:94:30:05:e8: e8:9f:f8:93:04:d1:36:1e:14:73:cb:2e:3b:65:d1: 28:78:2a:f5:31:e3:07:8e:87:d3:99:41:62:70:c7: 83:e2:a9:17:15:36:95:d6:42:98:ac:ed:a0:51:20: 20:ef:b5:03:69:92:e2:ca:48:a1:85:6e:48:39:de: bf:52:1d:15:85:76:85:8e:9f:45:23:a7:34:b3:02: ca:35:32:2c:2f:d3:ac:e5:36:87:3a:57:08:5a:7e: 0f:a5:04:f8:52:b5:6a:bf:d4:c9:f5:70:a5:76:ef: c3:0c:b7:6b:18:eb:f3:26:a1:a3:3b:61:d4:84:95: 1e:6a:92:ff:92:f2:99:b4:7f:e1:a5:cd:2c:22:14: 55:46:35:9c:3a:bb:32:69:60:e9:91:f8:0c:8a:72: cf:fb:04:e1:17:37:1b:5e:6f:64:e2:74:c9:66:f4: 31:2d:07:22:36:f5:13:bd:76:6c:fa:c5:f6:b1:0b: ff:e6:36:cc:77:db:1b:f3:47:07:25:5b:36:fc:14: 1e:09:a0:ef:80:95:6f:14:ce:b3:e2:a3:cd:9f:1f: 9e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CB:3B:37:EF:B2:F2:74:24:4C:01:DA:BF:59:A5:5F:0E:C6:B6:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/41b8dafa-6c42-34c0-af1f-0d3173ac6ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl X509v3 Authority Key Identifier: keyid:3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer sbgp-ipAddrBlock: critical IPv4: 192.35.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:00:a3:3e:85:93:69:4e:1e:4c:cc:0d:75:80:f4:cc:74:9d: 35:ec:f3:53:a1:24:0d:db:98:90:c0:d1:ed:cb:13:ca:d1:fd: 70:07:00:11:c1:c6:ed:5c:b9:02:88:83:74:0d:0d:be:7e:17: 8a:36:48:e5:74:06:22:4a:22:78:df:16:b5:bb:2c:97:5e:21: fb:51:25:0b:1a:3f:ec:14:9f:94:f8:0f:a6:74:45:9a:41:d6: 7b:cb:a1:84:c4:ea:ec:85:ed:27:2f:9c:6f:68:79:fa:02:1a: f6:d1:4b:ee:50:0e:d7:c6:36:19:b7:ae:7c:fc:44:be:8c:9d: 12:61:20:80:1d:e4:b7:13:ce:95:57:4b:85:13:b4:ea:a4:4a: dd:27:14:b8:d1:3c:4c:f7:b8:ba:80:f9:fd:e6:4c:e5:7d:9c: b0:1d:4d:9f:d6:89:6a:ba:56:be:fe:63:51:d3:7d:75:01:df: 22:13:9c:cc:f3:7c:4f:8b:87:5b:0c:30:65:9f:ba:67:13:3c: 9d:7f:24:4a:02:c4:9b:95:16:5c:23:d1:8a:18:e1:37:59:37: 0f:b1:98:94:8b:bd:e3:c7:e9:7c:29:30:ed:e5:62:61:3d:42: 38:8d:73:e6:70:d9:ce:6d:df:38:b0:13:e3:63:0f:80:80:7a: 1f:07:e2:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXqYE7e+YX2xVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjczMjJiNWYtMDU0MS00Nzg0LTllNWUtYzRlOGRkNzI4 ZTU5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ODgyOTY1YTAtMzZhYi00MTRiLWE1MjAtOGM3YTkwNjU5ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihdyhnDLAQZyccTzBrkKjVUarYmTk1M0lXIa z+1nnifytA9uVP0CjJQwBejon/iTBNE2HhRzyy47ZdEoeCr1MeMHjofTmUFicMeD 4qkXFTaV1kKYrO2gUSAg77UDaZLiykihhW5IOd6/Uh0VhXaFjp9FI6c0swLKNTIs L9Os5TaHOlcIWn4PpQT4UrVqv9TJ9XCldu/DDLdrGOvzJqGjO2HUhJUeapL/kvKZ tH/hpc0sIhRVRjWcOrsyaWDpkfgMinLP+wThFzcbXm9k4nTJZvQxLQciNvUTvXZs +sX2sQv/5jbMd9sb80cHJVs2/BQeCaDvgJVvFM6z4qPNnx+eDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvLOzfvsvJ0JEwB2r9ZpV8OxrbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzMy MmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4ZGQ3MjhlNTkvNDFiOGRhZmEtNmM0Mi0z NGMwLWFmMWYtMGQzMTczYWM2YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjczMjJiNWYtMDU0MS00Nzg0LTll NWUtYzRlOGRkNzI4ZTU5L2Y3MzIyYjVmLTA1NDEtNDc4NC05ZTVlLWM0ZThkZDcy OGU1OS5jcmwwHwYDVR0jBBgwFoAUO3IaxVSa9nDAgf1YOO1ZTkhGo9UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzMyMmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4 ZGQ3MjhlNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0Aoz6Fk2lOHkzMDXWA9Mx0nTXs81OhJA3bmJDA0e3LE8rR/XAHABHB xu1cuQKIg3QNDb5+F4o2SOV0BiJKInjfFrW7LJdeIftRJQsaP+wUn5T4D6Z0RZpB 1nvLoYTE6uyF7ScvnG9oefoCGvbRS+5QDtfGNhm3rnz8RL6MnRJhIIAd5LcTzpVX S4UTtOqkSt0nFLjRPEz3uLqA+f3mTOV9nLAdTZ/WiWq6Vr7+Y1HTfXUB3yITnMzz fE+Lh1sMMGWfumcTPJ1/JEoCxJuVFlwj0YoY4TdZNw+xmJSLvePH6XwpMO3lYmE9 QjiNc+Zw2c5t3ziwE+NjD4CAeh8H4ks= -----END CERTIFICATE-----Generated at Fri Apr 17 09:39:36 2026 by rpki-client