$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/115764b7-6cb9-336e-854b-dfee8dfb1b54.roa File: 115764b7-6cb9-336e-854b-dfee8dfb1b54.roa (raw, json) Hash identifier: +N6nZ+OjOxZYBNUIyKI3N7G1W5pa/pKRdzeLas7TQME= Subject key identifier: BB:85:D7:D0:BA:45:6E:65:3B:B6:19:2D:70:A0:09:E6:4A:86:EC:AA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4974422E9D1CABE1B4681E00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/115764b7-6cb9-336e-854b-dfee8dfb1b54.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:42:2e:9d:1c:ab:e1:b4:68:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=af291df1-c779-4351-bb1b-7626723aee52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:09:e1:c4:d5:e4:25:e0:6f:51:6c:18:5f: 8b:4e:39:95:70:8c:d5:09:7e:7f:04:2d:05:2a:ee: 0f:6b:ce:2b:6c:df:a8:37:9e:26:a8:34:cd:d7:0a: 50:ad:4e:8b:5f:c5:07:e4:92:aa:a3:b8:21:0d:d9: 14:ef:67:92:e9:d4:50:c0:6b:20:51:43:c5:d6:69: 5c:5d:39:e0:48:b3:0c:6b:f8:5a:6e:4c:9a:90:ca: d6:57:da:59:b2:04:5d:95:74:7d:5a:a7:6a:d9:41: a3:f9:bc:64:fe:53:68:1b:21:36:2f:17:06:9d:32: fc:1f:aa:48:89:f4:2a:a3:76:f8:03:a1:ad:fc:bc: 26:e3:39:90:4a:3d:fc:18:a7:aa:3b:d1:57:fa:5a: e1:b7:11:63:e8:6f:67:d7:f8:ad:23:70:73:68:36: 95:a6:68:7a:21:f0:58:d3:2d:2e:b6:32:cf:81:33: 5f:f3:cd:5a:47:4b:71:6f:a9:5e:c6:2e:c2:84:66: f8:c0:12:42:b4:53:df:04:e0:50:eb:79:d4:5a:98: 4f:bd:5f:d0:b1:af:a5:a3:db:b9:ca:f6:79:4b:a9: 0d:bf:6a:a2:95:15:de:a8:9b:19:d9:20:fb:47:ac: 90:3a:fa:b1:b5:7c:96:54:e0:e3:b8:03:38:88:9b: e0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:85:D7:D0:BA:45:6E:65:3B:B6:19:2D:70:A0:09:E6:4A:86:EC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/115764b7-6cb9-336e-854b-dfee8dfb1b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fe:99:8c:bd:e9:3f:ca:0a:85:c5:c4:4d:15:0d:5d:f7:53: 60:c0:07:e5:3b:f7:42:c6:e7:fe:7f:56:25:86:49:93:b6:5e: d6:dd:27:d8:ef:a6:b0:53:44:69:63:7e:0a:7b:ed:07:42:bb: 73:79:45:a3:79:31:ea:7f:5e:80:32:4a:53:35:88:2a:c6:dc: 11:20:41:39:79:a9:37:dd:aa:cf:8b:69:73:ba:d9:1c:e0:f2: aa:56:35:3b:b6:31:52:f9:be:bb:aa:19:09:3e:24:c8:0b:0f: 8b:e2:35:f6:59:58:d5:f5:82:a3:5b:d4:96:17:51:21:b6:4b: a1:43:8d:18:a1:3a:e7:0c:3a:d5:56:85:4e:de:e3:2e:aa:ba: 64:59:95:20:a7:04:f3:e3:7c:9e:24:50:e6:6a:e5:33:9e:81: 28:07:02:da:20:7b:45:dd:ef:00:4f:74:f8:39:ec:a2:aa:00: 85:08:31:40:32:65:83:a5:b2:37:9d:8a:10:67:44:f8:a8:3b: 99:b1:0d:44:e7:df:fb:66:b9:5f:1d:7b:ab:45:0d:b7:d2:2d: c1:a4:2b:eb:f0:c9:be:29:57:6c:db:a1:a4:56:92:cd:c2:66: 33:35:16:6e:27:a8:25:83:c3:52:54:30:6d:d2:3e:12:9e:a4: 1b:c0:d5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEIunRyr4bRoHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWYyOTFkZjEtYzc3OS00MzUxLWJiMWItNzYyNjcyM2FlZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQIJ4cTV5CXgb1FsGF+LTjmVcIzVCX5/BC0F Ku4Pa84rbN+oN54mqDTN1wpQrU6LX8UH5JKqo7ghDdkU72eS6dRQwGsgUUPF1mlc XTngSLMMa/habkyakMrWV9pZsgRdlXR9Wqdq2UGj+bxk/lNoGyE2LxcGnTL8H6pI ifQqo3b4A6Gt/Lwm4zmQSj38GKeqO9FX+lrhtxFj6G9n1/itI3BzaDaVpmh6IfBY 0y0utjLPgTNf881aR0txb6lexi7ChGb4wBJCtFPfBOBQ63nUWphPvV/Qsa+lo9u5 yvZ5S6kNv2qilRXeqJsZ2SD7R6yQOvqxtXyWVODjuAM4iJvgdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuF19C6RW5lO7YZLXCgCeZKhuyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMTE1NzY0YjctNmNiOS0z MzZlLTg1NGItZGZlZThkZmIxYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7+mYy96T/KCoXFxE0VDV33U2DAB+U790LG5/5/ViWGSZO2XtbdJ9jv prBTRGljfgp77QdCu3N5RaN5Mep/XoAySlM1iCrG3BEgQTl5qTfdqs+LaXO62Rzg 8qpWNTu2MVL5vruqGQk+JMgLD4viNfZZWNX1gqNb1JYXUSG2S6FDjRihOucMOtVW hU7e4y6qumRZlSCnBPPjfJ4kUOZq5TOegSgHAtoge0Xd7wBPdPg57KKqAIUIMUAy ZYOlsjedihBnRPioO5mxDUTn3/tmuV8de6tFDbfSLcGkK+vwyb4pV2zboaRWks3C ZjM1Fm4nqCWDw1JUMG3SPhKepBvA1Q4= -----END CERTIFICATE-----Generated at Fri Sep 25 07:15:42 2026 by rpki-client