$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa File: bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa (raw, json) Hash identifier: dSiU8ws4q7KbcW1Pzfl1SpnT05OsE5Y9h2Aok/thAuU= Subject key identifier: FF:EB:89:B3:01:A5:2B:3D:09:B9:CF:C8:D6:23:20:20:AE:49:FC:B0 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EA7953E3D2BC2DD97FA57F8C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54994 IP address blocks: 157.185.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:3e:3d:2b:c2:dd:97:fa:57:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=200becbd-982e-4683-aa40-fc098cfe36b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:69:f6:e1:ee:98:65:20:15:39:f8:cf:f8: 21:c4:07:f4:47:71:2d:5e:7b:b8:cf:02:f7:2f:ff: d7:39:68:c6:c3:57:3a:99:08:ac:7a:bb:f3:77:08: 50:be:26:d8:0e:75:31:aa:69:e0:b4:ff:3c:b7:00: 62:ee:0a:fc:7c:8d:a2:9f:16:9c:54:be:db:33:62: 56:c5:1d:2e:31:66:6a:fa:97:f5:35:95:18:f1:36: 5d:33:78:08:cd:e7:66:3b:c0:ff:b9:b8:86:71:71: f7:3e:93:fb:e6:ed:fc:66:c1:a8:28:0c:e2:a7:f0: 4b:3d:7e:61:9f:d8:bf:08:8b:8c:23:0b:4e:d3:58: 6f:8a:1b:43:38:a7:85:f2:8b:7a:e4:24:5c:10:38: 36:4f:63:49:df:68:20:f8:d5:1c:af:31:df:4b:ec: 0a:fe:d7:24:d9:4a:69:42:d2:d8:4c:b0:5b:3d:57: 3e:5f:78:24:96:1b:70:65:fa:8b:b4:e7:44:05:43: 47:d6:bd:b1:c0:c1:fa:8a:2c:d4:f7:0b:ea:cd:6f: f0:3e:04:e4:cc:cd:29:3d:b2:fa:3f:d9:b0:f7:10: c7:76:5e:30:d8:68:0e:e7:b0:77:f7:53:39:29:6e: fa:0c:48:3c:54:9a:5d:20:db:0d:34:c6:51:6e:50: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EB:89:B3:01:A5:2B:3D:09:B9:CF:C8:D6:23:20:20:AE:49:FC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/bfa0bab3-a564-3e7c-abd8-8a009f1047f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5c:2e:bb:a3:0e:1a:0c:84:49:52:a8:71:d7:b8:15:86:5e: 40:b5:0d:2a:c8:90:f7:5e:13:a2:11:eb:0d:be:de:6b:79:f3: 71:ee:70:bc:7e:85:af:7e:f9:07:83:47:a2:25:3a:bb:a4:8f: b7:e1:63:fe:27:b1:04:7b:b0:df:24:c2:79:2a:0c:82:0b:74: 35:94:dd:0f:6c:01:b2:de:9c:7e:9e:58:f4:db:e6:0e:91:cb: af:e4:1e:50:c1:cb:1e:25:03:1a:12:4c:82:cd:24:b4:4a:23: cc:6e:7c:53:85:ee:38:75:de:e3:61:ca:d3:d5:06:04:09:bd: 3a:1a:76:24:0d:cf:27:52:9a:4c:39:49:40:e4:1e:cc:d3:cf: c0:8f:be:f7:aa:64:4d:c5:9e:03:4c:6b:23:09:33:ec:2f:6d: 06:e7:9c:ec:44:7c:50:cc:73:f5:7f:db:57:e6:44:8d:dd:38: ea:0b:72:38:bf:7c:06:24:fa:df:0e:d4:cc:fd:9e:cb:02:9f: 1f:12:31:16:1f:ec:5f:80:23:33:ed:9e:7c:f3:4e:59:ee:36: 53:dc:be:4d:cc:23:8d:5f:3a:37:1f:bd:d3:aa:b3:41:4c:b1: 4d:ee:46:ca:fc:d1:cb:6c:4e:7a:ff:7c:c8:64:ee:14:90:4e: a8:fe:13:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlT49K8Ldl/pX+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjAwYmVjYmQtOTgyZS00NjgzLWFhNDAtZmMwOThjZmUzNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI9p9uHumGUgFTn4z/ghxAf0R3EtXnu4zwL3 L//XOWjGw1c6mQiservzdwhQvibYDnUxqmngtP88twBi7gr8fI2inxacVL7bM2JW xR0uMWZq+pf1NZUY8TZdM3gIzedmO8D/ubiGcXH3PpP75u38ZsGoKAzip/BLPX5h n9i/CIuMIwtO01hvihtDOKeF8ot65CRcEDg2T2NJ32gg+NUcrzHfS+wK/tck2Upp QtLYTLBbPVc+X3gklhtwZfqLtOdEBUNH1r2xwMH6iizU9wvqzW/wPgTkzM0pPbL6 P9mw9xDHdl4w2GgO57B391M5KW76DEg8VJpdINsNNMZRblBtrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/ribMBpSs9CbnPyNYjICCuSfywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYmZhMGJhYjMtYTU2NC0z ZTdjLWFiZDgtOGEwMDlmMTA0N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRcLrujDhoMhElSqHHXuBWGXkC1DSrIkPdeE6IR6w2+3mt583HucLx+ ha9++QeDR6IlOrukj7fhY/4nsQR7sN8kwnkqDIILdDWU3Q9sAbLenH6eWPTb5g6R y6/kHlDByx4lAxoSTILNJLRKI8xufFOF7jh13uNhytPVBgQJvToadiQNzydSmkw5 SUDkHszTz8CPvveqZE3FngNMayMJM+wvbQbnnOxEfFDMc/V/21fmRI3dOOoLcji/ fAYk+t8O1Mz9nssCnx8SMRYf7F+AIzPtnnzzTlnuNlPcvk3MI41fOjcfvdOqs0FM sU3uRsr80ctsTnr/fMhk7hSQTqj+E0s= -----END CERTIFICATE-----Generated at Wed Jul 29 08:56:37 2026 by rpki-client