$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa File: 39953f1b-77cc-3f24-ac5e-a313835b8627.roa (raw, json) Hash identifier: fO+aKUWCvU5g4eUSVO43v6ONxemE4NPc624p07qPnZs= Subject key identifier: 95:4C:C0:2C:C0:2D:63:E5:1F:A9:FE:47:A7:B2:61:E4:C2:AB:42:42 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4987569BACCA6EF90A6FB9B0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:56:9b:ac:ca:6e:f9:0a:6f:b9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=19b38f85-1ba6-4ba4-9b7b-d91d8da6d7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:4e:94:9e:cc:0d:a2:f1:cd:90:39:c4:18: f5:e1:c2:b1:73:9b:12:29:ce:4e:c3:a1:5c:40:23: e8:85:94:51:f0:92:8f:eb:29:d3:14:1a:d5:b4:0e: 64:8e:e0:21:63:d8:6e:d9:16:75:c4:3c:9e:8c:0b: 3f:16:43:04:3b:78:53:ce:1e:d9:af:42:9f:0b:68: 25:4f:d1:bb:97:a7:a5:d0:39:74:d0:e4:48:ed:5c: 43:49:8c:f9:d4:1f:37:a9:49:86:97:0d:4a:25:96: d9:44:f2:82:fc:2f:25:68:05:5a:12:43:3e:b6:cb: 46:71:d0:9a:b4:ff:39:50:f6:b7:38:ef:1e:67:b2: 5a:74:52:3d:f0:54:71:cf:a0:5e:71:f9:5a:73:b1: 98:eb:37:b7:eb:84:ce:8f:71:d5:17:fc:19:7e:2a: d6:c7:74:99:06:e0:e9:05:e5:2a:0b:e8:21:c8:7e: b9:6a:ba:91:a0:fb:b2:7b:14:ae:cb:ea:c9:16:56: 69:f5:a5:2e:a0:2e:e2:6a:bd:9e:87:2c:51:1e:46: db:e1:27:8c:da:8b:d1:b7:89:9d:4c:1c:da:75:b8: 54:94:20:ad:39:d9:22:35:ae:c3:b0:ba:37:db:40: e5:0a:20:65:4c:75:c1:71:cb:9e:bf:6a:cc:97:ad: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4C:C0:2C:C0:2D:63:E5:1F:A9:FE:47:A7:B2:61:E4:C2:AB:42:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:de:9d:d4:0c:3f:86:68:1c:e9:1f:8b:68:9d:d2:4f:48:66: 3e:f5:8e:aa:63:9a:c6:9c:87:5a:6a:30:a9:2d:b5:ea:9f:61: 92:ba:90:11:10:52:9b:00:7f:d1:6d:80:20:85:e8:a4:66:2b: 91:44:e1:50:39:52:60:75:fc:59:3c:be:5b:26:a7:3d:98:77: f1:32:43:db:69:8b:52:8b:30:ce:50:5f:a6:21:84:b4:08:cc: 25:50:27:e5:69:c2:7b:33:f6:00:23:0b:6a:b3:37:e6:23:d7: e6:0d:d3:15:93:86:3f:08:07:a5:1f:18:da:f9:4a:9a:69:97: 11:2f:b6:9b:72:0f:9a:fc:18:31:a2:d4:62:f9:0a:7d:40:9e: be:51:54:0d:e1:95:80:87:3d:f8:b8:df:d6:89:33:10:74:b2: 01:65:d2:56:bd:a3:2a:0d:8c:65:61:a3:01:aa:6c:d4:ad:8d: 3f:9e:23:cc:34:8f:54:88:3b:fe:dd:e1:3d:30:cd:8d:3c:6e: 7b:e3:76:2b:2c:22:3b:91:3a:d8:78:d6:dc:49:db:ea:7a:14: 44:67:5d:5c:ed:6a:84:54:e8:bb:fd:d1:27:9e:87:ea:5b:c4: 0b:cd:5f:f8:98:97:ad:03:bb:ee:85:62:47:74:19:b8:62:ac: 1a:36:56:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh1abrMpu+QpvubAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTliMzhmODUtMWJhNi00YmE0LTliN2ItZDkxZDhkYTZkN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbNOlJ7MDaLxzZA5xBj14cKxc5sSKc5Ow6Fc QCPohZRR8JKP6ynTFBrVtA5kjuAhY9hu2RZ1xDyejAs/FkMEO3hTzh7Zr0KfC2gl T9G7l6el0Dl00ORI7VxDSYz51B83qUmGlw1KJZbZRPKC/C8laAVaEkM+tstGcdCa tP85UPa3OO8eZ7JadFI98FRxz6Becflac7GY6ze364TOj3HVF/wZfirWx3SZBuDp BeUqC+ghyH65arqRoPuyexSuy+rJFlZp9aUuoC7iar2ehyxRHkbb4SeM2ovRt4md TBzadbhUlCCtOdkiNa7DsLo320DlCiBlTHXBccuev2rMl62dpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVMwCzALWPlH6n+R6eyYeTCq0JCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzk5NTNmMWItNzdjYy0z ZjI0LWFjNWUtYTMxMzgzNWI4NjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/endQMP4ZoHOkfi2id0k9IZj71jqpjmsach1pqMKktteqfYZK6kBEQ UpsAf9FtgCCF6KRmK5FE4VA5UmB1/Fk8vlsmpz2Yd/EyQ9tpi1KLMM5QX6YhhLQI zCVQJ+Vpwnsz9gAjC2qzN+Yj1+YN0xWThj8IB6UfGNr5SppplxEvtptyD5r8GDGi 1GL5Cn1Anr5RVA3hlYCHPfi439aJMxB0sgFl0la9oyoNjGVhowGqbNStjT+eI8w0 j1SIO/7d4T0wzY08bnvjdissIjuROth41txJ2+p6FERnXVztaoRU6Lv90Seeh+pb xAvNX/iYl60Du+6FYkd0GbhirBo2Voo= -----END CERTIFICATE-----Generated at Sun Sep 27 17:31:24 2026 by rpki-client