$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/03ab54db-6c37-3483-bd42-da60c64c46d2.roa File: 03ab54db-6c37-3483-bd42-da60c64c46d2.roa (raw, json) Hash identifier: B1j7Xh+f4L9SQ4z7xWJJVqFpR5yUjAAkJhSXgNERaNk= Subject key identifier: 1F:77:F7:79:DB:3C:E1:1F:53:97:8F:F6:DD:C9:40:77:DE:30:4A:76 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F49738F850115FD90E0EE0640 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/03ab54db-6c37-3483-bd42-da60c64c46d2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:8f:85:01:15:fd:90:e0:ee:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=efee8336-72fc-4c93-81ba-62a93483589c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8b:af:50:af:f2:d6:2f:eb:09:03:85:03:dc: bd:a3:de:51:4b:75:29:5d:84:88:c8:31:a2:5d:73: 98:e8:39:e0:c0:91:3c:37:be:88:3c:06:1e:44:33: 96:9a:bd:29:04:c3:bb:09:69:ff:b1:76:1a:cb:19: 2a:0a:70:95:af:f0:c7:ae:c3:b9:02:76:1b:46:e0: 71:52:26:23:11:4e:62:24:c6:5e:fa:5e:ee:ef:9d: e0:6d:5f:59:92:ec:4a:36:50:35:26:4a:c0:37:5c: 1e:8e:9d:7a:7c:4d:0b:5e:18:00:a3:ee:c6:43:5e: d6:3e:8f:f5:26:74:f2:78:9a:d6:46:a0:bc:fc:2c: 9a:7b:57:0f:62:d1:bf:74:35:94:73:ba:f9:74:31: db:cf:41:58:76:ce:62:2a:f1:5f:8f:42:e6:07:b0: e0:e4:d7:c1:b9:29:9d:f5:0d:be:83:81:fb:6d:49: ec:9e:f1:09:9f:7c:50:05:12:8c:24:ef:36:0a:48: d3:52:4f:2c:07:10:09:90:7b:19:cb:09:94:b4:12: 4b:a0:da:72:7c:60:9d:69:80:1a:76:79:e8:d9:f3: 1f:de:1a:16:ae:85:be:4b:05:ad:fc:93:bb:80:d0: 98:0f:20:30:4c:5f:2b:57:d8:e9:97:06:24:6f:12: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:F7:79:DB:3C:E1:1F:53:97:8F:F6:DD:C9:40:77:DE:30:4A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/03ab54db-6c37-3483-bd42-da60c64c46d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:97:4e:16:4f:30:09:c7:fa:fa:60:89:b3:20:b1:26:e7:75: c5:92:49:cf:eb:28:d6:57:85:5e:88:0f:7f:26:74:02:b0:f6: da:2a:90:6b:9d:3c:bf:dc:17:56:19:71:aa:09:11:18:bc:43: 2a:e3:bd:04:fd:5a:d1:f5:3f:f0:4e:e1:fc:d3:e3:e8:9a:30: 5a:c5:03:6c:e3:79:63:cc:8c:fd:d0:3a:3d:54:49:c0:bb:0e: ea:5e:d0:05:d7:88:d0:91:ff:b6:9d:36:af:96:41:7b:cd:0f: 10:62:f1:46:2e:51:aa:40:c5:86:3c:1e:2d:82:ae:34:4e:a6: 1e:67:0a:94:2c:ab:68:8d:39:97:d9:10:27:0d:a4:ed:00:f1: ef:9b:76:a8:5c:1e:c6:b7:e2:a3:46:04:04:34:a9:e6:ea:f2: c7:92:e5:c4:ed:46:15:02:fa:d9:3e:1a:0a:1b:01:42:57:73: 80:ed:d6:ba:3f:0f:af:b4:21:03:b2:27:f9:d6:e2:e4:bf:d4: 90:3c:2f:69:7e:08:6e:01:11:98:29:03:88:9c:72:b6:73:7e: 6c:42:3e:f6:7d:15:66:76:ed:d4:b5:c1:2e:45:99:48:a7:23: ed:4f:6d:33:93:80:78:38:d0:4b:13:3d:d0:70:0f:f7:1b:f3: 80:8a:23:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4+FARX9kODuBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWZlZTgzMzYtNzJmYy00YzkzLTgxYmEtNjJhOTM0ODM1ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4uvUK/y1i/rCQOFA9y9o95RS3UpXYSIyDGi XXOY6DngwJE8N76IPAYeRDOWmr0pBMO7CWn/sXYayxkqCnCVr/DHrsO5AnYbRuBx UiYjEU5iJMZe+l7u753gbV9ZkuxKNlA1JkrAN1wejp16fE0LXhgAo+7GQ17WPo/1 JnTyeJrWRqC8/Cyae1cPYtG/dDWUc7r5dDHbz0FYds5iKvFfj0LmB7Dg5NfBuSmd 9Q2+g4H7bUnsnvEJn3xQBRKMJO82CkjTUk8sBxAJkHsZywmUtBJLoNpyfGCdaYAa dnno2fMf3hoWroW+SwWt/JO7gNCYDyAwTF8rV9jplwYkbxI3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9393nbPOEfU5eP9t3JQHfeMEp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMDNhYjU0ZGItNmMzNy0z NDgzLWJkNDItZGE2MGM2NGM0NmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqXThZPMAnH+vpgibMgsSbndcWSSc/rKNZXhV6ID38mdAKw9toqkGud PL/cF1YZcaoJERi8QyrjvQT9WtH1P/BO4fzT4+iaMFrFA2zjeWPMjP3QOj1UScC7 Dupe0AXXiNCR/7adNq+WQXvNDxBi8UYuUapAxYY8Hi2CrjROph5nCpQsq2iNOZfZ ECcNpO0A8e+bdqhcHsa34qNGBAQ0qebq8seS5cTtRhUC+tk+GgobAUJXc4Dt1ro/ D6+0IQOyJ/nW4uS/1JA8L2l+CG4BEZgpA4iccrZzfmxCPvZ9FWZ27dS1wS5FmUin I+1PbTOTgHg40EsTPdBwD/cb84CKI00= -----END CERTIFICATE-----Generated at Sat Sep 26 22:21:40 2026 by rpki-client