$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa File: 0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa (raw, json) Hash identifier: 1260mVfBclxhI63McIgyCuUtcku04N5okWK6PB4faks= Subject key identifier: 1C:73:36:F4:1A:63:D8:AD:B6:47:74:30:E9:E3:3B:15:0D:39:92:A9 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D3A62B7A1BF018EED53942FC0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa Signing time: Fri 20 Mar 2026 05:57:22 +0000 ROA not before: Fri 20 Mar 2026 05:57:22 +0000 ROA not after: Thu 18 Jun 2026 05:57:22 +0000 asID: 54994 IP address blocks: 153.43.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3a:62:b7:a1:bf:01:8e:ed:53:94:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 20 05:57:22 2026 GMT Not After : Jun 18 05:57:22 2026 GMT Subject: CN=9dd556c1-801a-404e-8653-34eab364a0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:df:bd:9f:39:1d:2b:ee:4b:26:06:0b:ab: 73:51:f4:8a:01:7a:75:2d:1c:03:df:1d:b6:64:d1: bc:a1:e9:95:c8:78:c7:ab:8a:c4:a9:8e:49:45:6d: 34:76:08:2a:72:6e:42:6c:bd:57:fe:fa:13:af:14: 7d:15:11:4f:1b:e9:0d:8f:74:17:fa:1a:dc:1c:82: 2a:e9:54:b0:da:2d:44:a7:f7:fa:e7:b5:a8:04:cb: c9:cf:c1:1d:14:5f:66:34:c8:b0:e0:32:9f:34:44: a1:51:86:8e:10:d5:3e:1f:3c:3e:0b:59:7a:f7:40: c6:2a:6a:7e:44:0e:36:61:7a:43:49:ae:57:f4:23: 70:3e:34:1f:dc:a8:69:a2:a2:3f:fa:9c:fc:c6:62: 4f:25:cf:42:d3:6b:5a:5e:6c:0d:9f:f6:86:e6:0b: e4:ae:e4:38:67:af:73:0e:a9:fd:43:9e:54:a1:c9: 04:79:80:9c:b6:ce:b6:27:4a:b8:50:96:de:00:f5: 16:00:f3:e0:dc:90:de:f6:b1:88:bf:f0:41:26:2d: dc:8d:5a:55:01:41:05:24:0c:38:bf:16:4d:ad:5e: e0:5a:65:f7:10:2c:01:13:2e:c8:d6:8e:3a:d2:d3: 97:60:bc:9b:2b:23:66:19:1d:a7:34:9b:86:8d:19: 15:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:73:36:F4:1A:63:D8:AD:B6:47:74:30:E9:E3:3B:15:0D:39:92:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:dd:6f:db:d2:4a:16:1e:1b:93:d0:55:0b:b3:1c:aa:3a:b7: 5a:c0:8e:96:25:ed:b7:f9:ed:0c:e6:3d:80:de:c9:90:31:73: 02:42:7d:96:39:b2:9a:2d:ca:a8:72:f7:20:04:20:d4:4e:cd: 2c:37:57:13:1e:f0:b3:a0:9e:cb:be:b7:61:d2:03:a3:99:f3: 04:ed:cb:0a:1f:9f:47:90:db:3e:2c:6f:7a:16:09:e6:74:21: 24:31:49:ef:05:78:b3:d7:9d:c8:ff:c7:93:e4:6e:bf:e9:3d: 52:f1:c7:4f:17:98:c3:9b:b1:5b:4c:3d:a5:46:14:7d:cf:ce: 46:66:12:e5:42:4f:76:e5:75:48:9b:76:dd:ff:c8:a0:fa:39: da:d0:45:28:65:30:66:ed:ad:39:c4:d4:68:6c:f4:27:76:6e: d0:2a:f4:38:1f:c6:d2:77:20:ae:15:d9:eb:a5:a4:2d:4d:f8: 39:d3:e5:1a:ee:e8:40:f0:86:9c:13:cb:ad:69:61:0a:50:a0: 23:eb:79:c9:79:75:18:1c:76:6f:ed:84:36:8b:a2:14:aa:6e: 3c:7b:ef:d2:23:2a:ac:e2:f4:29:9e:a3:c5:29:43:1e:5c:a8: 91:c2:d8:40:8d:32:a4:2d:8d:ef:59:e7:b5:f7:77:cc:46:39: aa:c5:ac:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE06YrehvwGO7VOUL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMyMDA1NTcyMloXDTI2MDYxODA1NTcyMlowLzEtMCsGA1UEAxMk OWRkNTU2YzEtODAxYS00MDRlLTg2NTMtMzRlYWIzNjRhMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSvfvZ85HSvuSyYGC6tzUfSKAXp1LRwD3x22 ZNG8oemVyHjHq4rEqY5JRW00dggqcm5CbL1X/voTrxR9FRFPG+kNj3QX+hrcHIIq 6VSw2i1Ep/f657WoBMvJz8EdFF9mNMiw4DKfNEShUYaOENU+Hzw+C1l690DGKmp+ RA42YXpDSa5X9CNwPjQf3KhpoqI/+pz8xmJPJc9C02taXmwNn/aG5gvkruQ4Z69z Dqn9Q55UockEeYCcts62J0q4UJbeAPUWAPPg3JDe9rGIv/BBJi3cjVpVAUEFJAw4 vxZNrV7gWmX3ECwBEy7I1o460tOXYLybKyNmGR2nNJuGjRkV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxzNvQaY9ittkd0MOnjOxUNOZKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMGVkOGNmY2MtY2I4ZS0z MWE2LTlhYTktODU5ODE0ZmZiNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7db9vSShYeG5PQVQuzHKo6t1rAjpYl7bf57QzmPYDeyZAxcwJCfZY5 spotyqhy9yAEINROzSw3VxMe8LOgnsu+t2HSA6OZ8wTtywofn0eQ2z4sb3oWCeZ0 ISQxSe8FeLPXncj/x5Pkbr/pPVLxx08XmMObsVtMPaVGFH3PzkZmEuVCT3bldUib dt3/yKD6OdrQRShlMGbtrTnE1Ghs9Cd2btAq9DgfxtJ3IK4V2eulpC1N+DnT5Rru 6EDwhpwTy61pYQpQoCPrecl5dRgcdm/thDaLohSqbjx779IjKqzi9Cmeo8UpQx5c qJHC2ECNMqQtje9Z57X3d8xGOarFrCI= -----END CERTIFICATE-----Generated at Thu Mar 26 04:07:05 2026 by rpki-client