$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa File: 48a21514-9b84-3789-b983-3138fee23ce0.roa (raw, json) Hash identifier: ktKe7NAATHwdGuG3+K4EWUtdfRuiHv55xdnkWQXG0kM= Subject key identifier: 8E:E9:4D:86:09:AF:48:E9:80:3C:30:8C:8A:20:EF:D0:D0:73:70:D7 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D7A052B7EB8765AD8AE19F340 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 54994 IP address blocks: 168.235.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2b:7e:b8:76:5a:d8:ae:19:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=d844b34b-0d34-42c5-86bf-65acc8626e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:2a:b4:3d:25:17:1e:42:a0:a4:70:51:72: 2e:74:8f:f3:da:57:e1:7b:17:71:d6:50:e4:4a:80: 00:0b:c2:0b:c6:f6:1d:b3:85:ac:8b:13:08:bd:a5: 72:93:93:c2:d6:51:d3:a5:8e:9c:09:be:cd:6e:84: 5c:c2:c5:70:02:99:93:cb:2b:b6:42:1c:57:81:95: 31:9a:46:45:aa:e6:f1:41:bd:a5:a9:c1:dd:8a:2e: b5:48:f2:98:f9:28:1c:07:e7:96:43:62:be:c1:bd: b6:a6:ae:28:b5:61:3c:9c:d9:da:a3:38:87:1d:da: f2:91:7a:c9:35:67:65:90:17:57:2a:19:0b:e9:b0: 53:1b:e6:68:cc:7e:86:a7:98:14:8c:55:ed:b8:98: 71:b4:af:5d:80:df:d4:d4:8d:88:6e:fb:eb:6b:f0: e0:3e:ca:91:21:0e:e1:ff:81:d1:e1:37:c3:30:db: a3:70:65:12:a9:73:df:ad:5a:22:84:38:fc:4f:d9: 80:b8:c5:bb:6c:49:38:88:75:6e:d8:cf:14:f7:2e: f0:63:19:eb:df:15:d4:80:e4:26:36:ab:cc:84:ce: a2:46:09:65:83:3c:95:5c:20:6b:54:08:b6:cf:11: 21:bf:29:2d:c3:05:e1:13:92:cb:a6:75:db:59:73: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E9:4D:86:09:AF:48:E9:80:3C:30:8C:8A:20:EF:D0:D0:73:70:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 168.235.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:31:01:2e:57:65:48:05:ab:d9:b0:64:58:23:7f:d2:ac:08: d6:f9:6b:a9:65:e9:78:e6:1a:a5:22:ae:12:8e:4d:52:95:07: 75:9a:77:1c:4e:f6:88:cb:68:7a:e0:7c:c2:20:93:eb:0f:e1: ce:20:9a:ac:2a:be:e3:8c:2e:f5:45:54:5d:4d:16:b1:50:fa: c0:1b:bf:45:14:9d:1c:10:44:27:0c:15:e2:c3:fb:c0:f3:b8: 08:bb:e2:8e:72:54:b6:fe:b7:b6:22:12:0c:e6:30:83:86:a3: 50:36:8d:2d:68:bc:b9:f8:72:06:c7:83:d1:5a:f4:49:18:5a: f3:68:10:7a:d9:a4:fe:f8:d8:c2:13:5f:cc:b3:fd:4f:08:16: b5:ba:1e:b4:71:97:d6:ee:24:07:32:8e:db:7b:b3:54:57:54: d9:99:eb:4d:bf:74:8b:48:7e:e9:95:46:1b:ae:2c:ae:49:0c: ab:4a:2b:b8:b5:7a:1c:8f:0c:1a:f0:aa:a7:5d:71:d2:cf:d4: 89:b9:8c:4e:e1:00:9a:11:4f:a6:6a:93:f2:bc:2e:3e:bd:19: 5e:a6:46:64:9b:9b:55:c3:39:9d:5f:58:4c:5d:dc:de:2d:3e: de:3e:1d:48:38:a9:c6:5e:4e:29:27:da:04:54:52:3a:4a:2d: 1f:f0:a5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSt+uHZa2K4Z80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZDg0NGIzNGItMGQzNC00MmM1LTg2YmYtNjVhY2M4NjI2ZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroIqtD0lFx5CoKRwUXIudI/z2lfhexdx1lDk SoAAC8ILxvYds4WsixMIvaVyk5PC1lHTpY6cCb7NboRcwsVwApmTyyu2QhxXgZUx mkZFqubxQb2lqcHdii61SPKY+SgcB+eWQ2K+wb22pq4otWE8nNnaoziHHdrykXrJ NWdlkBdXKhkL6bBTG+ZozH6Gp5gUjFXtuJhxtK9dgN/U1I2Ibvvra/DgPsqRIQ7h /4HR4TfDMNujcGUSqXPfrVoihDj8T9mAuMW7bEk4iHVu2M8U9y7wYxnr3xXUgOQm NqvMhM6iRgllgzyVXCBrVAi2zxEhvyktwwXhE5LLpnXbWXMXKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7pTYYJr0jpgDwwjIog79DQc3DXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNDhhMjE1MTQtOWI4NC0z Nzg5LWI5ODMtMzEzOGZlZTIzY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAxAS5XZUgFq9mwZFgjf9KsCNb5a6ll6XjmGqUirhKOTVKVB3WadxxO 9ojLaHrgfMIgk+sP4c4gmqwqvuOMLvVFVF1NFrFQ+sAbv0UUnRwQRCcMFeLD+8Dz uAi74o5yVLb+t7YiEgzmMIOGo1A2jS1ovLn4cgbHg9Fa9EkYWvNoEHrZpP742MIT X8yz/U8IFrW6HrRxl9buJAcyjtt7s1RXVNmZ602/dItIfumVRhuuLK5JDKtKK7i1 ehyPDBrwqqddcdLP1Im5jE7hAJoRT6Zqk/K8Lj69GV6mRmSbm1XDOZ1fWExd3N4t Pt4+HUg4qcZeTikn2gRUUjpKLR/wpaY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:00:00 2026 by rpki-client