$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1b0dcf33-bed0-327a-bf66-4fa3892ad79c.roa File: 1b0dcf33-bed0-327a-bf66-4fa3892ad79c.roa (raw, json) Hash identifier: Aofbh6wBkv3U4a/3SkeJdJ3+5ZSyyPeV+xgvYSMmKS4= Subject key identifier: C7:FA:E7:4F:B8:13:AB:92:B8:E2:BB:1B:0D:83:EF:B9:3B:B8:64:34 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F3FAD893ECA5DF1DD4228F340 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1b0dcf33-bed0-327a-bf66-4fa3892ad79c.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:89:3e:ca:5d:f1:dd:42:28:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=e1ee7e19-e99e-4134-8baa-e9470a238741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:d0:ed:e8:81:d3:25:8c:ff:e7:36:73:f2: a8:dc:3b:30:97:39:c2:46:ec:09:50:a4:a3:68:e8: 5f:de:08:95:80:35:4e:13:ef:0f:ad:f3:f3:35:ef: 45:a4:0b:80:5e:a0:29:09:4c:ec:05:8b:4c:5b:cf: 2a:48:2c:60:bb:96:07:17:e9:3c:58:5e:00:b1:91: 9e:c2:a6:0a:db:c6:36:69:d9:7a:69:d8:be:84:51: 56:08:9c:d1:8e:68:59:e1:c1:68:32:3e:d6:2e:1a: ce:a7:8a:55:f2:2e:46:fa:08:ab:3e:4f:d3:bf:d6: c5:5f:44:4d:3e:6a:4f:79:60:c3:af:56:9a:55:c7: 3a:a1:de:b4:cf:bb:01:96:26:2d:93:52:7d:da:48: 32:ab:01:b1:e5:69:68:d8:94:31:d9:10:73:2b:bd: f4:e8:4a:77:cb:46:6c:a5:16:1e:aa:08:b1:75:3d: f1:9a:2a:f0:b1:fe:61:bc:0c:f4:77:60:c4:6c:1a: e6:d9:11:87:39:ae:20:c1:3a:92:98:e0:35:29:6d: 9c:ff:16:5a:ab:c6:a9:b7:03:5e:3a:e3:30:06:5c: de:ff:74:06:80:97:3b:d9:42:0e:3a:f8:d3:25:a6: 6f:0b:e8:ce:f5:c4:01:56:c3:c3:11:a4:60:70:d8: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FA:E7:4F:B8:13:AB:92:B8:E2:BB:1B:0D:83:EF:B9:3B:B8:64:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1b0dcf33-bed0-327a-bf66-4fa3892ad79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5e:9b:35:59:6b:65:28:fd:77:dc:f2:d5:b9:8d:88:61:4d: aa:95:c2:9d:0a:b9:71:77:94:67:cf:b2:d0:22:9b:ae:52:30: ed:ec:54:30:55:8b:82:2a:39:f1:08:d9:49:35:a5:ff:fd:e8: 35:6d:1a:ce:51:4d:70:fc:d8:9b:44:ce:32:e4:e1:f5:90:f7: 3c:6d:19:df:56:fa:9e:99:d5:86:93:e1:13:72:44:4c:f3:75: db:72:05:64:82:e5:15:79:ce:24:cf:71:2a:f8:b2:4a:17:23: eb:41:b2:1b:dd:e3:a4:86:95:0b:d6:43:e2:c6:98:35:16:3a: 57:1c:3b:9e:ac:56:b4:47:ce:38:24:f7:ec:29:59:95:63:6b: 9f:cf:e3:35:83:43:ed:4d:b3:aa:08:d9:48:cd:09:ae:f8:ca: 31:0c:25:ad:8a:62:c6:e7:ea:7d:36:a0:ec:a7:7e:e0:ed:3e: ba:db:c2:b2:26:0e:b8:d4:5b:7c:9b:86:3e:86:c2:1a:88:c1: ef:a3:69:48:dc:aa:33:2f:72:08:c9:0e:48:d3:a6:ce:22:99: ea:7a:84:e3:cb:2e:2c:78:f4:9a:11:ce:0d:c0:03:c1:87:33: 11:b4:28:ab:e7:71:92:b8:f5:71:46:d7:ee:20:73:03:97:bc: ba:50:59:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYk+yl3x3UIo80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTFlZTdlMTktZTk5ZS00MTM0LThiYWEtZTk0NzBhMjM4NzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGvQ7eiB0yWM/+c2c/Ko3DswlznCRuwJUKSj aOhf3giVgDVOE+8PrfPzNe9FpAuAXqApCUzsBYtMW88qSCxgu5YHF+k8WF4AsZGe wqYK28Y2adl6adi+hFFWCJzRjmhZ4cFoMj7WLhrOp4pV8i5G+girPk/Tv9bFX0RN PmpPeWDDr1aaVcc6od60z7sBliYtk1J92kgyqwGx5Wlo2JQx2RBzK7306Ep3y0Zs pRYeqgixdT3xmirwsf5hvAz0d2DEbBrm2RGHOa4gwTqSmOA1KW2c/xZaq8aptwNe OuMwBlze/3QGgJc72UIOOvjTJaZvC+jO9cQBVsPDEaRgcNiB3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMf650+4E6uSuOK7Gw2D77k7uGQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMWIwZGNmMzMtYmVkMC0z MjdhLWJmNjYtNGZhMzg5MmFkNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtemzVZa2Uo/Xfc8tW5jYhhTaqVwp0KuXF3lGfPstAim65SMO3sVDBV i4IqOfEI2Uk1pf/96DVtGs5RTXD82JtEzjLk4fWQ9zxtGd9W+p6Z1YaT4RNyREzz ddtyBWSC5RV5ziTPcSr4skoXI+tBshvd46SGlQvWQ+LGmDUWOlccO56sVrRHzjgk 9+wpWZVja5/P4zWDQ+1Ns6oI2UjNCa74yjEMJa2KYsbn6n02oOynfuDtPrrbwrIm DrjUW3ybhj6GwhqIwe+jaUjcqjMvcgjJDkjTps4imep6hOPLLix49JoRzg3AA8GH MxG0KKvncZK49XFG1+4gcwOXvLpQWfo= -----END CERTIFICATE-----Generated at Thu Sep 24 14:55:05 2026 by rpki-client