$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1dc4e8dd-549c-366c-b51f-e80cb8acc712.roa File: 1dc4e8dd-549c-366c-b51f-e80cb8acc712.roa (raw, json) Hash identifier: PIcFItM+6wlQoSdZ6uHhgZXOud+WUW+Vnx/a1ZZaHoU= Subject key identifier: A4:80:90:0E:4D:96:13:EA:47:49:8A:AB:AE:B9:CF:FC:BF:27:EA:53 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DAC45942983EBFD9B5032E980 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1dc4e8dd-549c-366c-b51f-e80cb8acc712.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54994 IP address blocks: 153.43.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:94:29:83:eb:fd:9b:50:32:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=04b8a98b-50da-489f-aeb4-d145e6e61a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:79:68:db:dd:12:f5:c3:46:83:bd:f4:c4: 9b:aa:fa:cc:03:5b:1c:b0:ee:eb:5e:f9:7a:f9:f1: e7:ff:6f:33:16:4a:80:0f:fa:a1:7f:a5:bb:de:00: 90:89:f2:06:6c:f2:ec:48:04:5a:be:02:de:4a:6f: 0b:50:be:ae:19:6f:82:5b:c6:5c:a1:34:06:8f:09: 4d:0f:64:2b:63:9d:a2:4b:26:a4:40:45:88:fa:b0: a8:b9:48:16:9e:c5:dc:f0:de:c8:5c:94:77:18:73: 32:1c:c6:db:0c:4f:e8:df:fb:d0:e9:3a:29:a8:8f: 2b:86:2e:46:d2:71:42:0b:eb:d5:cb:3f:64:23:5d: 37:a2:6d:35:28:c4:89:f4:61:03:a4:d0:47:a5:92: 5b:ea:81:78:aa:35:4e:1d:7d:a8:65:da:59:ea:8c: 19:54:0a:35:a2:ce:ef:ba:72:37:9f:99:f4:f1:9f: d3:b5:5c:8c:24:0f:04:50:62:a7:1a:3d:27:12:a7: 54:44:21:62:92:ca:1e:ea:bf:7d:14:7e:cb:d3:36: dd:61:29:79:82:d8:16:6a:38:82:4b:b8:29:92:4d: bd:2e:15:97:8e:1d:9c:a2:e9:35:17:6b:4f:4d:f2: 9b:20:43:d6:52:2f:92:c6:1c:13:f0:93:b5:aa:3f: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:80:90:0E:4D:96:13:EA:47:49:8A:AB:AE:B9:CF:FC:BF:27:EA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1dc4e8dd-549c-366c-b51f-e80cb8acc712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:2b:3a:06:ce:ac:b3:00:d7:88:13:3f:27:7c:08:49:14:2f: 53:34:3d:aa:ea:74:d0:bc:78:e6:36:f7:57:39:31:f4:63:c2: a6:4d:08:ce:70:ce:d8:59:30:57:fc:b9:7b:27:e6:93:93:61: 0d:2d:1a:f4:bb:09:a6:c2:21:aa:e8:28:39:a9:f4:d9:4b:3a: 13:12:db:09:19:45:e4:d5:10:46:91:8c:b6:b2:58:6d:31:42: 6f:9e:63:8b:8d:38:01:32:44:10:97:9b:a7:01:43:12:21:1e: f8:d2:15:9f:39:7d:b6:12:e6:38:b5:72:49:f0:c9:ea:82:a7: 27:28:d1:7a:da:83:35:53:ba:14:64:06:8f:53:17:6d:34:c7: 82:1e:a0:26:8d:0e:27:e7:bd:bc:78:c1:5a:3b:c8:e6:63:17: 63:91:5f:61:0b:04:3e:8c:10:cf:50:92:9d:76:ba:06:32:0c: 22:13:48:fa:52:8d:cf:21:30:9b:98:05:de:0d:94:38:d7:4d: 98:d8:36:10:ff:7e:96:af:6b:0a:aa:f0:e7:d3:8c:65:6c:7e: 45:48:67:af:a3:d9:4d:13:62:c2:fc:b3:97:f3:22:19:a6:89: 7b:89:82:cd:e1:06:0f:70:2e:e3:0e:91:31:5e:f4:a4:8d:5c: a7:35:bd:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZQpg+v9m1Ay6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MDRiOGE5OGItNTBkYS00ODlmLWFlYjQtZDE0NWU2ZTYxYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXd5aNvdEvXDRoO99MSbqvrMA1scsO7rXvl6 +fHn/28zFkqAD/qhf6W73gCQifIGbPLsSARavgLeSm8LUL6uGW+CW8ZcoTQGjwlN D2QrY52iSyakQEWI+rCouUgWnsXc8N7IXJR3GHMyHMbbDE/o3/vQ6TopqI8rhi5G 0nFCC+vVyz9kI103om01KMSJ9GEDpNBHpZJb6oF4qjVOHX2oZdpZ6owZVAo1os7v unI3n5n08Z/TtVyMJA8EUGKnGj0nEqdURCFiksoe6r99FH7L0zbdYSl5gtgWajiC S7gpkk29LhWXjh2couk1F2tPTfKbIEPWUi+SxhwT8JO1qj9iNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSAkA5NlhPqR0mKq665z/y/J+pTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMWRjNGU4ZGQtNTQ5Yy0z NjZjLWI1MWYtZTgwY2I4YWNjNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIrOgbOrLMA14gTPyd8CEkUL1M0ParqdNC8eOY291c5MfRjwqZNCM5w zthZMFf8uXsn5pOTYQ0tGvS7CabCIaroKDmp9NlLOhMS2wkZReTVEEaRjLayWG0x Qm+eY4uNOAEyRBCXm6cBQxIhHvjSFZ85fbYS5ji1cknwyeqCpyco0XragzVTuhRk Bo9TF200x4IeoCaNDifnvbx4wVo7yOZjF2ORX2ELBD6MEM9Qkp12ugYyDCITSPpS jc8hMJuYBd4NlDjXTZjYNhD/fpavawqq8OfTjGVsfkVIZ6+j2U0TYsL8s5fzIhmm iXuJgs3hBg9wLuMOkTFe9KSNXKc1vb8= -----END CERTIFICATE-----Generated at Wed May 13 04:14:59 2026 by rpki-client