$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa File: 2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa (raw, json) Hash identifier: 3I096hp+iT7OtHzKj6WZUe4lk1ekv97iDSuvlwIEsqM= Subject key identifier: D3:20:CD:72:0F:A4:A3:19:97:79:D4:E1:81:2D:FE:5A:3F:38:3E:82 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4C3D4BCABBA49452B83B1C80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 54994 IP address blocks: 153.43.120.0/24 maxlen: 24 153.43.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4b:ca:bb:a4:94:52:b8:3b:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1aa1ee73-c78f-4a26-81b0-e4f4991fc63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:2f:88:26:83:bd:7f:ca:af:1b:68:f7:5a: 3c:c3:dc:b5:aa:25:de:55:ea:84:ea:0a:1a:39:4b: 1c:85:81:97:26:77:f0:62:50:23:f6:47:4b:af:f5: 4d:23:82:8b:1c:19:b3:9f:91:e2:3c:5f:bb:04:bb: 52:17:4a:b8:d1:c1:4b:eb:e7:c0:44:08:52:df:dc: 9e:df:fe:d9:11:97:03:4a:27:20:25:95:b8:6a:b5: 24:76:f6:3b:dc:a1:4c:87:c5:3a:d8:20:80:79:89: 59:b6:f3:e5:75:25:84:bf:71:a0:46:07:4c:24:9c: 5b:86:6e:9e:57:bf:94:ce:ed:41:89:be:0d:68:08: 92:53:3c:2e:8f:d7:9b:9d:0c:77:26:6b:b8:0a:d0: d3:fb:99:f3:bd:83:fb:58:7b:8a:a7:ec:00:8c:d5: 4f:9e:84:91:b8:c0:31:7b:64:ec:44:bb:90:14:1b: 57:1a:2d:20:ce:0a:4f:7d:b6:60:11:98:df:85:04: 5b:af:e6:09:05:94:24:62:6d:e9:67:1f:fc:d3:88: fa:1f:e4:2f:a0:66:a8:d4:31:1f:a8:14:e1:a4:03: 0c:85:b6:af:70:ff:fb:7d:1a:9d:fb:71:e1:99:20: fd:d1:68:a9:6a:48:cc:6c:d3:94:a1:55:16:17:6c: 8d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:20:CD:72:0F:A4:A3:19:97:79:D4:E1:81:2D:FE:5A:3F:38:3E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4c:c8:d9:8f:08:ec:76:73:0b:f8:eb:29:6f:19:26:65:50: f7:81:ce:0e:9c:5a:d0:5b:a8:0b:12:b4:ef:70:27:10:90:d1: e4:ed:40:b0:0a:b0:05:eb:15:ff:c5:62:f1:3d:2e:21:9e:91: 3a:2f:35:34:99:2e:2f:85:da:11:3b:7d:1d:d3:46:5a:08:ce: 31:67:97:25:66:e4:9b:b9:10:ed:c4:e6:08:e6:12:62:5a:e9: dc:25:c5:7b:e7:1b:6b:80:3f:e0:4e:7b:15:26:9a:d5:9c:6a: 3c:88:7c:f1:68:29:76:21:e5:4e:5f:a3:0f:22:9f:e3:9e:3f: 2d:c6:08:c2:cd:c9:62:ac:ec:8c:48:8e:aa:ac:c5:dd:28:a1: de:8e:94:3b:1d:6e:94:8c:d6:fa:85:f7:18:6a:b3:0c:78:82: ef:68:10:16:5c:ef:23:31:24:a4:6c:c5:ab:3c:6e:89:71:b2: 8e:33:bd:b9:ad:9d:b8:30:d9:07:33:f7:8e:68:78:89:16:c5: 97:02:3e:55:44:b5:58:d9:45:ec:b8:69:29:25:60:9d:77:12: 9c:f2:0a:c7:c5:7d:d1:a7:f0:01:11:99:81:37:a9:dc:68:7b: 18:13:bc:b0:3f:3c:67:5c:c8:64:ee:dc:b7:ec:29:e7:4f:36: c3:2f:d8:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUvKu6SUUrg7HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWFhMWVlNzMtYzc4Zi00YTI2LTgxYjAtZTRmNDk5MWZjNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9gviCaDvX/Krxto91o8w9y1qiXeVeqE6goa OUschYGXJnfwYlAj9kdLr/VNI4KLHBmzn5HiPF+7BLtSF0q40cFL6+fARAhS39ye 3/7ZEZcDSicgJZW4arUkdvY73KFMh8U62CCAeYlZtvPldSWEv3GgRgdMJJxbhm6e V7+Uzu1Bib4NaAiSUzwuj9ebnQx3Jmu4CtDT+5nzvYP7WHuKp+wAjNVPnoSRuMAx e2TsRLuQFBtXGi0gzgpPfbZgEZjfhQRbr+YJBZQkYm3pZx/804j6H+QvoGao1DEf qBThpAMMhbavcP/7fRqd+3HhmSD90WipakjMbNOUoVUWF2yN0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMgzXIPpKMZl3nU4YEt/lo/OD6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMmQ1MjI4NGQtYTZkOC0z N2JkLWEyZjUtMWI3MDZlM2JiOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxMyNmPCOx2cwv46ylvGSZlUPeBzg6cWtBbqAsStO9wJxCQ0eTtQLAK sAXrFf/FYvE9LiGekTovNTSZLi+F2hE7fR3TRloIzjFnlyVm5Ju5EO3E5gjmEmJa 6dwlxXvnG2uAP+BOexUmmtWcajyIfPFoKXYh5U5fow8in+OePy3GCMLNyWKs7IxI jqqsxd0ood6OlDsdbpSM1vqF9xhqswx4gu9oEBZc7yMxJKRsxas8bolxso4zvbmt nbgw2Qcz945oeIkWxZcCPlVEtVjZRey4aSklYJ13EpzyCsfFfdGn8AERmYE3qdxo exgTvLA/PGdcyGTu3LfsKedPNsMv2H4= -----END CERTIFICATE-----Generated at Sun Sep 27 08:05:27 2026 by rpki-client