$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa File: 24587719-f7eb-3cb8-a957-e23dd29ef600.roa (raw, json) Hash identifier: +gvr3+dlGtu7j6jPXdXmwZBSFSuwAi34q33Eat4IJtM= Subject key identifier: 18:C2:43:F8:DA:71:14:4E:CC:1D:76:A6:DD:97:BE:57:82:27:18:25 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584CED278FA90B99D62680753E00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 400104 IP address blocks: 157.185.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:8f:a9:0b:99:d6:26:80:75:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=3d778799-e85b-4613-8bfa-0faed77655ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:74:79:f8:69:55:bc:e4:41:17:fe:88:7d: 9f:ee:6f:8e:96:01:b7:8a:43:7e:3c:55:b4:43:7b: 5d:ba:1e:72:9e:67:68:d5:63:26:00:0d:7f:37:a2: c5:09:5d:aa:f3:2f:98:f8:aa:57:8e:99:dd:06:c8: 25:56:db:93:fe:f0:5e:71:72:76:c8:c3:a8:ce:72: e1:92:da:21:9b:ef:be:71:8d:02:bc:49:fa:f6:80: 5d:84:b9:1d:e7:86:06:27:ae:b8:d0:e8:a3:f3:e2: f9:77:f7:31:45:a8:bf:37:a4:7a:ff:ea:3d:88:ea: 6b:84:9e:1e:3a:e3:95:75:71:31:3a:4d:ee:77:ec: b8:4a:a4:c3:4a:f2:b1:50:16:4c:1e:63:f1:dd:24: 0d:b3:5e:55:57:d5:ec:12:aa:08:e4:d8:70:21:5d: 44:2a:72:50:e5:3e:e4:59:4d:7c:a5:d9:ec:45:78: cb:70:e9:51:65:77:0d:74:df:f9:d6:ac:fa:0e:ee: 69:60:f5:16:72:db:9b:09:f1:a1:ac:7f:56:73:2e: 47:01:07:27:0c:02:52:b2:e3:97:9b:c5:24:21:76: 61:c0:8a:35:0e:68:61:60:c1:0d:c8:be:00:db:ff: 3b:62:f6:03:11:34:14:c7:d2:d4:53:db:48:2e:97: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C2:43:F8:DA:71:14:4E:CC:1D:76:A6:DD:97:BE:57:82:27:18:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:79:cc:fc:0e:58:02:2b:1d:e4:25:3b:86:83:2d:57:c4:4e: 13:34:01:02:41:d6:f5:75:41:25:00:8b:c4:68:0d:31:7b:96: 4c:ba:3d:a4:3c:90:f0:f9:67:08:f3:a4:51:b4:1b:bc:aa:a1: 40:20:56:70:7a:83:36:a7:96:4b:ec:9b:86:66:9f:6b:bb:7e: 08:20:c9:9a:47:08:b8:08:54:3a:e7:54:3e:75:2b:8a:a4:c4: 6f:18:2d:84:10:24:2b:33:3a:19:8d:84:3f:68:12:f2:e4:7a: cc:14:c1:35:ab:7e:23:ed:4f:15:9d:a2:83:e3:70:6f:89:31: 78:06:91:23:43:27:7f:dd:eb:93:80:2f:85:52:5c:4f:43:ba: c6:34:4e:ee:ad:e7:9a:b4:4c:cc:a9:a2:fa:fc:9d:2f:d6:3c: 37:3f:13:d5:97:e9:69:6f:29:8d:f8:0c:10:00:10:94:ab:a0: 3d:09:44:c3:87:a3:c3:83:69:47:ef:25:12:83:da:78:82:55: ec:02:93:9c:d6:0d:6c:2f:c4:56:69:42:9e:ca:95:fe:7a:29: 18:cd:f5:3a:18:a1:92:c5:a6:8c:0a:33:67:83:c2:fa:ae:aa: ba:70:91:4b:7d:3a:c1:c9:30:71:e8:66:ac:b5:df:62:a6:78: 28:b6:44:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4+pC5nWJoB1PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk M2Q3Nzg3OTktZTg1Yi00NjEzLThiZmEtMGZhZWQ3NzY1NWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9V0efhpVbzkQRf+iH2f7m+OlgG3ikN+PFW0 Q3tduh5ynmdo1WMmAA1/N6LFCV2q8y+Y+KpXjpndBsglVtuT/vBecXJ2yMOoznLh ktohm+++cY0CvEn69oBdhLkd54YGJ6640Oij8+L5d/cxRai/N6R6/+o9iOprhJ4e OuOVdXExOk3ud+y4SqTDSvKxUBZMHmPx3SQNs15VV9XsEqoI5NhwIV1EKnJQ5T7k WU18pdnsRXjLcOlRZXcNdN/51qz6Du5pYPUWctubCfGhrH9Wcy5HAQcnDAJSsuOX m8UkIXZhwIo1DmhhYMENyL4A2/87YvYDETQUx9LUU9tILpdqlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjCQ/jacRROzB12pt2XvleCJxglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjQ1ODc3MTktZjdlYi0z Y2I4LWE5NTctZTIzZGQyOWVmNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD55zPwOWAIrHeQlO4aDLVfEThM0AQJB1vV1QSUAi8RoDTF7lky6PaQ8 kPD5ZwjzpFG0G7yqoUAgVnB6gzanlkvsm4Zmn2u7fgggyZpHCLgIVDrnVD51K4qk xG8YLYQQJCszOhmNhD9oEvLkeswUwTWrfiPtTxWdooPjcG+JMXgGkSNDJ3/d65OA L4VSXE9DusY0Tu6t55q0TMypovr8nS/WPDc/E9WX6WlvKY34DBAAEJSroD0JRMOH o8ODaUfvJRKD2niCVewCk5zWDWwvxFZpQp7Klf56KRjN9ToYoZLFpowKM2eDwvqu qrpwkUt9OsHJMHHoZqy132KmeCi2RLk= -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:25 2026 by rpki-client