$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa File: 2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa (raw, json) Hash identifier: rUt4hHGSMEX/ZumDPiA1Ol5gNK+LcII94nz0jk9nFno= Subject key identifier: 8A:CD:AF:74:91:3F:95:A2:D0:C2:D1:90:C6:2F:04:9F:20:9D:89:1D Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D270AF447794C6875AC6B7400 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa Signing time: Fri 13 Mar 2026 07:40:10 +0000 ROA not before: Fri 13 Mar 2026 07:40:10 +0000 ROA not after: Thu 11 Jun 2026 07:40:10 +0000 asID: 54994 IP address blocks: 153.43.120.0/24 maxlen: 24 153.43.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:0a:f4:47:79:4c:68:75:ac:6b:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 13 07:40:10 2026 GMT Not After : Jun 11 07:40:10 2026 GMT Subject: CN=9a37f810-8d6b-4b47-80e7-ad5368989636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:87:31:b2:b7:f8:22:6d:b3:4f:4a:a8:65: 49:d6:36:71:79:27:95:fb:1e:fb:a5:a1:c9:68:18: 9a:4f:3a:98:35:55:5d:bd:8d:9f:81:96:33:23:8e: 65:b1:aa:de:04:07:0d:45:88:80:c1:e3:67:f4:f4: bc:80:c3:1d:7d:e6:29:9a:24:7e:d7:73:74:4f:a9: eb:38:5d:4f:68:bb:b1:f2:e1:28:fe:76:bb:bd:fc: 76:04:4f:61:22:62:a2:9e:83:31:6e:cf:3c:99:de: b0:2d:e0:8c:1b:97:2c:b3:58:fe:2a:ed:d7:eb:ec: 38:fa:8a:91:19:ea:fc:6b:e1:25:ef:c1:67:8c:0e: 76:68:5b:61:9f:86:4d:60:68:bb:30:53:8f:97:9a: 80:f1:a9:66:f3:80:ba:39:9b:fb:83:86:68:f4:6c: 62:de:ce:c5:e8:a7:90:02:a2:44:65:c6:0c:75:da: 53:14:0f:88:73:c5:b8:de:0b:e1:15:f3:05:34:b6: e9:f7:a1:d1:c0:c6:65:83:37:54:7b:41:65:b7:a2: 90:67:5f:27:f2:48:be:5f:84:15:0e:47:7b:0e:c0: 6b:7c:09:65:e1:58:a1:1e:6a:df:cc:c9:ed:cf:f2: ae:bc:83:e1:0c:af:a2:4f:1b:a7:a9:80:5a:9c:a5: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:AF:74:91:3F:95:A2:D0:C2:D1:90:C6:2F:04:9F:20:9D:89:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6b:9b:70:0a:a1:59:30:dc:92:60:02:0b:53:1b:bb:a1:e4: 2a:50:95:f0:d3:8b:de:70:2e:db:6e:de:1d:6c:d3:7a:2b:30: 61:6d:b9:a9:1d:88:14:de:ab:f3:2e:b8:0c:37:e9:0a:bb:67: 58:e5:87:1a:a3:84:1d:22:43:04:ae:d5:80:47:1f:67:c4:76: 9e:bb:f2:47:fc:2c:63:c7:a2:67:96:a5:26:19:37:bf:52:a9: f9:2f:fd:1a:83:1a:45:af:7b:06:75:89:3c:22:49:d6:ef:13: 79:f6:ef:79:81:03:b5:9e:57:09:bc:6c:66:b5:cc:bc:c7:5a: 57:d7:b1:33:09:2a:7e:8f:24:53:ba:0d:b5:93:fc:fc:5b:53: a2:2c:67:96:f7:44:1c:2e:47:70:21:9a:2d:06:9c:51:13:c5: bf:5f:2a:9e:6a:3e:b1:6e:dc:a3:b9:93:4b:3b:5a:cd:d4:ec: f8:63:17:a1:31:d9:92:2d:d4:a5:de:8f:b0:63:36:1f:b4:5d: 3c:ec:13:4a:4b:e3:09:f0:27:ef:ce:81:2b:23:87:02:c7:dd: 29:ec:9d:85:fe:ea:de:b6:07:c0:02:f3:4b:77:d7:3b:a9:d7: 10:5a:3b:90:94:3d:3e:06:a4:39:bf:75:bb:59:85:d2:fb:d1: 33:ac:0e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nCvRHeUxodaxrdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMxMzA3NDAxMFoXDTI2MDYxMTA3NDAxMFowLzEtMCsGA1UEAxMk OWEzN2Y4MTAtOGQ2Yi00YjQ3LTgwZTctYWQ1MzY4OTg5NjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeWHMbK3+CJts09KqGVJ1jZxeSeV+x77paHJ aBiaTzqYNVVdvY2fgZYzI45lsareBAcNRYiAweNn9PS8gMMdfeYpmiR+13N0T6nr OF1PaLux8uEo/na7vfx2BE9hImKinoMxbs88md6wLeCMG5css1j+Ku3X6+w4+oqR Ger8a+El78FnjA52aFthn4ZNYGi7MFOPl5qA8alm84C6OZv7g4Zo9Gxi3s7F6KeQ AqJEZcYMddpTFA+Ic8W43gvhFfMFNLbp96HRwMZlgzdUe0Flt6KQZ18n8ki+X4QV Dkd7DsBrfAll4VihHmrfzMntz/KuvIPhDK+iTxunqYBanKVWJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrNr3SRP5Wi0MLRkMYvBJ8gnYkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMmQ1MjI4NGQtYTZkOC0z N2JkLWEyZjUtMWI3MDZlM2JiOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9rm3AKoVkw3JJgAgtTG7uh5CpQlfDTi95wLttu3h1s03orMGFtuakd iBTeq/MuuAw36Qq7Z1jlhxqjhB0iQwSu1YBHH2fEdp678kf8LGPHomeWpSYZN79S qfkv/RqDGkWvewZ1iTwiSdbvE3n273mBA7WeVwm8bGa1zLzHWlfXsTMJKn6PJFO6 DbWT/PxbU6IsZ5b3RBwuR3Ahmi0GnFETxb9fKp5qPrFu3KO5k0s7Ws3U7PhjF6Ex 2ZIt1KXej7BjNh+0XTzsE0pL4wnwJ+/OgSsjhwLH3SnsnYX+6t62B8AC80t31zup 1xBaO5CUPT4GpDm/dbtZhdL70TOsDl0= -----END CERTIFICATE-----Generated at Thu Mar 26 04:07:35 2026 by rpki-client