$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3861691c-e9ba-3b12-a363-eca5eb210fdc.roa File: 3861691c-e9ba-3b12-a363-eca5eb210fdc.roa (raw, json) Hash identifier: Twu+i5hFUAWN77F/RGHSGZ8NEI8yvK5WiN5ny+hAm8I= Subject key identifier: B1:1A:96:2F:12:41:EC:3A:EF:BC:BC:D2:CA:B6:00:4B:9A:66:8D:1D Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D386A3A646F299EFB58A08040 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3861691c-e9ba-3b12-a363-eca5eb210fdc.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 54994 IP address blocks: 153.43.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:3a:64:6f:29:9e:fb:58:a0:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=8d8bd322-26ed-4218-b958-eaa06cf7feed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:90:b2:51:91:ad:a9:e0:0a:78:41:af:97: ed:75:37:84:0c:bf:5c:b7:7d:fe:ed:d0:fc:61:0e: 70:ed:4c:29:c0:51:10:60:db:48:86:e2:bb:c8:9b: 11:35:83:a9:89:90:fe:ec:b3:96:cd:4f:d7:33:51: 02:82:ce:18:0c:6f:2f:a5:14:e9:65:61:e5:22:7c: dd:00:3b:09:27:77:3d:eb:97:d7:79:10:a0:8e:da: 9e:f2:69:47:f6:8e:25:8a:d9:8e:7d:a4:8f:3f:90: 2b:c8:f8:46:f6:20:fb:0b:29:ba:2a:b5:ab:65:c6: 98:62:8c:98:36:54:56:1e:1d:25:49:59:a8:e7:08: 38:1a:7c:84:80:4f:39:b3:7d:d1:2a:c9:ad:a1:d0: 72:00:8d:ee:a5:14:1e:48:02:2d:6b:d5:ee:01:61: 21:75:28:66:55:05:38:8b:66:3b:9c:de:3d:50:90: 1e:05:45:1c:4d:b6:09:45:ee:75:a1:a3:45:e4:33: 23:1e:9b:9c:8a:dd:52:a0:21:a2:1a:17:6d:a3:e9: 86:08:52:7b:38:5e:ff:46:b7:91:c0:04:32:8a:7f: 16:a8:f6:e6:25:d7:98:9b:b9:e3:87:33:71:17:b5: 62:10:6e:d0:62:74:79:94:a1:a1:c6:a1:dc:37:62: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1A:96:2F:12:41:EC:3A:EF:BC:BC:D2:CA:B6:00:4B:9A:66:8D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3861691c-e9ba-3b12-a363-eca5eb210fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4a:3b:01:bd:f5:fe:80:86:81:45:0c:47:a9:88:e3:f1:11: 78:a5:fe:b5:ef:36:3f:38:fc:85:a0:4b:68:15:a8:70:6f:58: f5:4d:67:13:3f:51:9e:92:ae:4c:7b:b1:82:54:b7:80:ef:08: 5f:1f:10:f7:8a:5a:97:85:95:a9:6b:3a:15:90:c7:fc:c3:42: b2:c7:49:78:7c:3e:7c:e4:0e:9f:f1:dd:de:49:56:37:79:09: 6e:4a:39:b5:49:27:57:cc:01:64:28:ca:62:ca:6d:30:f8:99: 34:9b:81:fb:cc:88:b1:54:51:e5:02:19:d6:3a:b3:fe:98:4d: f1:c2:b7:2d:96:a9:e6:96:ee:af:e3:73:24:d6:d4:15:c3:77: 58:be:d1:4d:6c:b8:73:52:09:21:a0:87:de:78:57:f0:fe:c5: a1:1e:33:38:b0:78:e5:63:71:36:13:1d:96:11:7e:fd:7a:82: da:eb:83:f0:bc:90:98:2f:3e:85:48:8c:02:8d:5a:a6:36:8f: 52:d4:6c:1c:6f:f0:83:88:34:08:d7:d5:fd:36:ae:b8:33:52: 78:1a:eb:04:d4:46:74:4e:f6:fb:49:18:21:6e:99:9f:5e:63: b7:e5:02:ff:73:2d:63:18:3c:a9:06:9e:fa:13:3d:7c:e3:3a: e3:dc:3e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajpkbyme+1iggEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk OGQ4YmQzMjItMjZlZC00MjE4LWI5NTgtZWFhMDZjZjdmZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+mQslGRrangCnhBr5ftdTeEDL9ct33+7dD8 YQ5w7UwpwFEQYNtIhuK7yJsRNYOpiZD+7LOWzU/XM1ECgs4YDG8vpRTpZWHlInzd ADsJJ3c965fXeRCgjtqe8mlH9o4litmOfaSPP5AryPhG9iD7Cym6KrWrZcaYYoyY NlRWHh0lSVmo5wg4GnyEgE85s33RKsmtodByAI3upRQeSAIta9XuAWEhdShmVQU4 i2Y7nN49UJAeBUUcTbYJRe51oaNF5DMjHpucit1SoCGiGhdto+mGCFJ7OF7/RreR wAQyin8WqPbmJdeYm7njhzNxF7ViEG7QYnR5lKGhxqHcN2Jn5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEali8SQew677y80sq2AEuaZo0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzg2MTY5MWMtZTliYS0z YjEyLWEzNjMtZWNhNWViMjEwZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdKOwG99f6AhoFFDEepiOPxEXil/rXvNj84/IWgS2gVqHBvWPVNZxM/ UZ6Srkx7sYJUt4DvCF8fEPeKWpeFlalrOhWQx/zDQrLHSXh8PnzkDp/x3d5JVjd5 CW5KObVJJ1fMAWQoymLKbTD4mTSbgfvMiLFUUeUCGdY6s/6YTfHCty2WqeaW7q/j cyTW1BXDd1i+0U1suHNSCSGgh954V/D+xaEeMziweOVjcTYTHZYRfv16gtrrg/C8 kJgvPoVIjAKNWqY2j1LUbBxv8IOINAjX1f02rrgzUnga6wTURnRO9vtJGCFumZ9e Y7flAv9zLWMYPKkGnvoTPXzjOuPcPms= -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:14 2026 by rpki-client