$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa File: bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa (raw, json) Hash identifier: VfSv/bYBRW8xTlBEZbl74j/8G44OtVNkY8xbf3ulOfE= Subject key identifier: 84:92:4B:4D:D6:58:BC:BB:B1:78:8F:5F:F7:EB:C3:4A:E0:C4:2D:97 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DF2108CDDFF304075E217EDD0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 54994 IP address blocks: 157.185.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:8c:dd:ff:30:40:75:e2:17:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=2e061a74-d523-47f9-8acb-8e34f2ded263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:91:30:60:32:af:6d:19:fd:15:15:2c:df: dc:43:50:0c:61:2e:9b:d2:8f:ed:d6:7f:ec:97:cd: 95:e1:68:bd:ae:cd:96:43:c6:a0:ae:b1:3d:a9:17: 88:9c:0a:f3:f6:1b:cf:b4:7c:d0:51:bb:bf:58:d9: a4:af:23:d3:80:15:25:45:74:b2:c5:fd:cb:33:7b: a9:55:5a:e1:2a:6a:f0:07:da:72:b7:9e:3d:a9:6f: cb:3e:27:0e:57:fd:f6:47:f0:a7:a5:90:77:cf:b8: 9e:59:9a:55:03:27:23:1e:5e:2b:32:c4:c8:2d:33: 67:6a:b2:59:8b:b5:f3:99:58:6b:5e:7d:8e:b1:f9: 0b:99:7d:ba:e1:33:c2:bd:f3:23:9a:af:0f:20:f2: b2:d0:a2:d1:2e:7f:83:89:1d:92:73:a8:9b:91:77: 12:aa:5b:7e:b5:9e:58:5b:5f:ba:87:91:e4:ea:88: f5:77:ce:f1:f8:a4:d9:cd:5b:f3:fe:f2:5d:fd:9b: ed:15:a2:4b:88:aa:be:36:7c:c8:b8:39:64:3c:0d: 41:34:4e:c0:d5:7a:8d:a4:bd:86:45:3c:bd:99:fd: 89:51:02:40:ca:cf:d6:ec:76:32:66:53:f7:de:e5: 18:fd:11:09:e5:dc:92:f6:54:37:a7:8c:4f:a9:81: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:92:4B:4D:D6:58:BC:BB:B1:78:8F:5F:F7:EB:C3:4A:E0:C4:2D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9c:67:0d:33:06:08:e2:49:8e:ec:38:2a:30:3e:66:71:77: d0:77:c4:98:c4:f7:2d:c4:3d:8b:bb:59:6b:a5:03:72:c3:f3: c9:c4:05:14:93:ea:81:06:ca:df:53:e5:bb:6c:2d:95:7a:1b: 93:3a:91:8c:b8:68:92:2a:a4:ef:37:04:e3:07:18:28:ce:9e: 4d:cc:9f:e2:76:84:56:27:5f:5a:f5:5c:61:8e:b8:5b:46:f5: 29:37:b4:4c:fc:f4:72:c5:f4:5a:4a:0c:01:28:97:54:78:0b: 63:54:bd:8f:53:86:88:4f:53:21:9f:af:72:43:3f:af:78:3c: 88:fe:bc:5d:26:db:79:df:9c:92:41:4c:1a:03:0a:d0:cb:0d: b9:a2:5b:3b:12:c8:b7:83:be:e6:13:d9:4e:f3:f9:ce:1d:52: 7a:d9:a9:61:5d:5f:b8:f7:16:32:2d:ac:3e:8e:96:76:86:b8: 9d:9e:d7:26:56:e8:0f:c0:d6:23:d0:ad:f9:af:f2:91:e6:32: fb:ba:93:d8:8f:4c:d6:84:e9:fa:58:37:c8:c2:6c:01:68:9f: 12:e4:cd:72:27:f3:fc:9b:ab:f9:af:6e:f7:08:b0:91:18:b8: 0a:c7:eb:a2:1c:8c:37:85:02:3a:0e:7f:ba:49:43:58:0d:f3: f9:8a:88:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIzd/zBAdeIX7dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk MmUwNjFhNzQtZDUyMy00N2Y5LThhY2ItOGUzNGYyZGVkMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysiRMGAyr20Z/RUVLN/cQ1AMYS6b0o/t1n/s l82V4Wi9rs2WQ8agrrE9qReInArz9hvPtHzQUbu/WNmkryPTgBUlRXSyxf3LM3up VVrhKmrwB9pyt549qW/LPicOV/32R/CnpZB3z7ieWZpVAycjHl4rMsTILTNnarJZ i7XzmVhrXn2OsfkLmX264TPCvfMjmq8PIPKy0KLRLn+DiR2Sc6ibkXcSqlt+tZ5Y W1+6h5Hk6oj1d87x+KTZzVvz/vJd/ZvtFaJLiKq+NnzIuDlkPA1BNE7A1XqNpL2G RTy9mf2JUQJAys/W7HYyZlP33uUY/REJ5dyS9lQ3p4xPqYHxwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISSS03WWLy7sXiPX/frw0rgxC2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYmZhMGJhYjMtYTU2NC0z ZTdjLWFiZDgtOGEwMDlmMTA0N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmcZw0zBgjiSY7sOCowPmZxd9B3xJjE9y3EPYu7WWulA3LD88nEBRST 6oEGyt9T5btsLZV6G5M6kYy4aJIqpO83BOMHGCjOnk3Mn+J2hFYnX1r1XGGOuFtG 9Sk3tEz89HLF9FpKDAEol1R4C2NUvY9ThohPUyGfr3JDP694PIj+vF0m23nfnJJB TBoDCtDLDbmiWzsSyLeDvuYT2U7z+c4dUnrZqWFdX7j3FjItrD6OlnaGuJ2e1yZW 6A/A1iPQrfmv8pHmMvu6k9iPTNaE6fpYN8jCbAFonxLkzXIn8/ybq/mvbvcIsJEY uArH66IcjDeFAjoOf7pJQ1gN8/mKiHA= -----END CERTIFICATE-----Generated at Sat Jun 13 13:57:45 2026 by rpki-client