$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3e670ae3-cbef-3eb1-a4b3-8be04ed6b8da.roa File: 3e670ae3-cbef-3eb1-a4b3-8be04ed6b8da.roa (raw, json) Hash identifier: qkQNLYG6qh3cOhd6Ysz7A2Q0Oy3kmIcqhNuaqRg5aDQ= Subject key identifier: F7:06:30:0D:5B:62:42:D4:17:01:4D:17:94:37:AD:13:FA:EC:17:1F Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4277D55210F8D0CAF1BABD00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3e670ae3-cbef-3eb1-a4b3-8be04ed6b8da.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:d5:52:10:f8:d0:ca:f1:ba:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=b569385c-c215-4d5b-9d75-efee425a24b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:1f:f1:90:90:21:1c:e1:26:73:03:04:3f: 2c:b6:10:d2:00:8e:b2:cd:45:fd:fc:46:e8:f6:2f: 54:54:ba:fe:a9:64:b6:aa:08:59:39:e1:bf:b6:eb: 62:d3:1c:39:4f:15:4e:f2:88:f1:0c:c8:5c:1b:5d: c1:c4:61:d6:4f:2f:af:5a:2a:a8:6b:9d:c5:23:c4: 0e:67:20:b8:98:a2:0d:53:df:14:ff:2d:d3:35:3a: 21:95:95:56:84:cd:fe:e6:51:e0:2e:58:d2:56:52: d4:ed:57:cf:7f:55:3e:84:48:bb:ed:98:d3:78:43: 59:8e:71:94:5c:89:ca:41:37:3c:4a:58:9d:14:ce: 94:81:5b:21:31:fb:7e:98:82:8b:bd:41:1e:64:fb: e0:af:98:b2:dc:62:e3:fa:ec:e0:f3:1d:f6:d5:a4: 05:85:46:48:ad:d9:dd:15:9a:d6:70:ed:96:57:3f: 87:ae:7f:1b:cc:ca:17:32:18:3e:61:9d:88:22:25: 08:e8:06:8e:72:1a:10:3c:db:ce:b9:2d:73:92:39: 7e:3e:4a:26:2f:47:f4:6d:59:07:bc:55:d2:55:8b: 20:fe:76:f7:93:e6:0b:cf:aa:53:4c:e0:e7:f9:47: f2:10:9d:c2:6a:7e:c0:f3:dd:4e:86:f1:86:a1:06: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:06:30:0D:5B:62:42:D4:17:01:4D:17:94:37:AD:13:FA:EC:17:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3e670ae3-cbef-3eb1-a4b3-8be04ed6b8da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0a:5a:f8:cc:35:7e:42:53:68:6b:2c:0f:57:d0:f0:41:62: d5:24:83:88:4f:63:9c:2e:c9:77:3b:f4:2c:ac:f2:c4:ff:da: fd:25:f7:5e:04:ba:df:fe:49:7a:07:94:39:d4:32:e6:d3:5a: 0d:d8:54:6e:cf:b9:ec:f5:ab:ac:67:62:0d:eb:a6:67:39:48: f9:4b:5b:bb:8a:a8:76:27:be:37:bb:16:cf:8b:0e:b7:d3:b9: be:e6:96:dc:9f:f5:a8:66:7b:9e:bb:e2:42:ed:b3:c8:3d:ea: cc:68:50:b0:c8:cc:de:63:30:fa:1a:e8:f7:ac:3c:06:d2:b8: 23:62:5e:08:5e:19:ff:8b:a5:9f:7a:64:c4:c8:1d:ec:a7:5f: 07:6a:15:0f:18:2c:4a:5c:71:0f:bf:d7:bf:37:06:25:6a:09: 60:54:86:0b:3a:38:54:f3:0c:56:ac:7b:ba:a2:6e:ad:bb:27: af:8d:0d:51:b0:50:34:d9:b1:8a:5b:2b:9a:bc:fd:2f:a7:67: 52:4d:4a:d7:35:7f:68:b4:f1:df:bd:75:1f:af:98:52:5b:65: 99:1d:df:e8:15:4f:18:3e:8a:47:e8:5d:84:58:32:51:45:14: f6:19:7a:6f:c6:d9:19:8c:c8:52:07:d4:36:a9:f9:ba:1b:63: 67:e8:5b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd9VSEPjQyvG6vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YjU2OTM4NWMtYzIxNS00ZDViLTlkNzUtZWZlZTQyNWEyNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn40f8ZCQIRzhJnMDBD8sthDSAI6yzUX9/Ebo 9i9UVLr+qWS2qghZOeG/tuti0xw5TxVO8ojxDMhcG13BxGHWTy+vWiqoa53FI8QO ZyC4mKINU98U/y3TNTohlZVWhM3+5lHgLljSVlLU7VfPf1U+hEi77ZjTeENZjnGU XInKQTc8SlidFM6UgVshMft+mIKLvUEeZPvgr5iy3GLj+uzg8x321aQFhUZIrdnd FZrWcO2WVz+Hrn8bzMoXMhg+YZ2IIiUI6AaOchoQPNvOuS1zkjl+PkomL0f0bVkH vFXSVYsg/nb3k+YLz6pTTODn+UfyEJ3Can7A891OhvGGoQYnxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcGMA1bYkLUFwFNF5Q3rRP67BcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvM2U2NzBhZTMtY2JlZi0z ZWIxLWE0YjMtOGJlMDRlZDZiOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAKWvjMNX5CU2hrLA9X0PBBYtUkg4hPY5wuyXc79Cys8sT/2v0l914E ut/+SXoHlDnUMubTWg3YVG7Puez1q6xnYg3rpmc5SPlLW7uKqHYnvje7Fs+LDrfT ub7mltyf9ahme5674kLts8g96sxoULDIzN5jMPoa6PesPAbSuCNiXgheGf+LpZ96 ZMTIHeynXwdqFQ8YLEpccQ+/1783BiVqCWBUhgs6OFTzDFase7qibq27J6+NDVGw UDTZsYpbK5q8/S+nZ1JNStc1f2i08d+9dR+vmFJbZZkd3+gVTxg+ikfoXYRYMlFF FPYZem/G2RmMyFIH1Dap+bobY2foW50= -----END CERTIFICATE-----Generated at Thu Sep 24 09:00:39 2026 by rpki-client