$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa File: 603dfc99-3ee4-36ed-8a9a-a311835734b1.roa (raw, json) Hash identifier: CMSL6M2yko6d3AQTti3LR6+NNVTqtX4oJ5nU6xT5lMw= Subject key identifier: DA:3C:DD:DC:09:B6:2A:F6:CC:96:25:7A:5B:37:95:4C:10:1A:81:2F Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DAC4568937551CE42A6869780 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54994 IP address blocks: 153.43.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:68:93:75:51:ce:42:a6:86:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=ccdfe59e-7e0b-45b0-bfa6-0a679d808307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:c5:0e:f3:0b:75:3b:07:cc:89:14:18:92: ce:bd:05:3b:c7:db:ba:fc:97:36:00:e0:d5:97:19: cf:f5:98:d0:15:73:14:5a:82:3f:45:13:6d:d2:e0: cc:82:88:8a:1b:99:2a:e5:4b:f0:64:7c:6c:e0:e0: b2:05:e4:3e:b9:dd:a4:f9:e1:68:a9:34:03:eb:17: 63:97:b2:11:7c:74:b8:2e:8d:5f:b7:fc:d9:2a:58: d5:83:af:5d:47:fe:10:39:20:b5:1c:4a:27:d3:24: ff:1a:61:1c:6b:c0:c2:5d:3f:e9:0a:1d:10:ed:dc: d5:00:bf:55:34:48:61:9a:88:99:fb:0f:a7:8e:5d: 17:da:fb:f5:90:17:11:87:a0:3b:3d:d1:61:a0:1f: 63:b2:ec:3a:3a:1b:95:4a:4c:b6:5f:2b:30:8a:45: 15:3a:82:ab:14:de:3d:47:56:5a:17:ef:a0:a1:77: eb:be:1b:30:ed:28:62:18:9a:6d:04:28:cb:34:53: be:ed:21:0d:49:7e:52:a6:4b:94:c0:45:c8:27:47: 0f:77:fe:65:ce:f8:6c:1c:77:a6:63:e8:08:e4:94: 15:b1:7c:1a:26:bd:80:73:f1:ca:22:0c:bf:52:d4: 0d:4e:08:b1:bd:38:51:29:1a:d2:91:70:9d:50:a0: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:DD:DC:09:B6:2A:F6:CC:96:25:7A:5B:37:95:4C:10:1A:81:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8f:f4:22:55:2b:3e:a6:f7:59:09:08:83:6a:03:42:02:76: 2f:d2:05:93:7f:30:c4:5e:10:1d:e2:0f:a7:af:be:15:6d:d8: 60:bb:0e:c9:05:f4:1a:32:14:b6:ee:8f:77:c5:06:2c:3b:da: e4:98:92:5d:b1:c9:9a:a6:bc:33:3a:45:0a:91:8e:48:86:30: 80:0a:40:90:be:04:df:a1:0b:20:81:7b:86:fb:b1:5b:0b:11: c8:cc:e7:3f:b3:56:4f:d1:5c:ad:a7:dc:85:98:9e:91:cd:fc: 08:b9:39:38:bc:f2:d8:ca:87:10:ba:e0:c0:63:82:ba:4a:a3: 62:84:55:97:11:66:d8:59:5a:9f:92:6c:b7:5c:ef:e4:99:76: 49:94:73:93:51:f5:b3:fd:09:cc:a4:85:db:95:95:0a:88:3a: e5:5a:a2:aa:52:55:32:8c:16:3e:29:df:92:c9:7b:c5:15:81: 5d:f8:89:a4:6b:f6:41:3e:95:1b:e6:58:60:6c:9a:20:06:da: 0c:cd:00:3f:d4:82:f4:e7:6e:78:45:98:42:40:b4:59:04:29: d1:af:96:63:7c:2c:28:e1:59:ca:1f:b1:8d:e6:a4:29:49:54: 5a:8f:fe:d7:4d:be:ea:12:eb:ed:3f:ff:99:9b:29:fd:e8:8b: bd:e0:3e:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRWiTdVHOQqaGl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk Y2NkZmU1OWUtN2UwYi00NWIwLWJmYTYtMGE2NzlkODA4MzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHfFDvMLdTsHzIkUGJLOvQU7x9u6/Jc2AODV lxnP9ZjQFXMUWoI/RRNt0uDMgoiKG5kq5UvwZHxs4OCyBeQ+ud2k+eFoqTQD6xdj l7IRfHS4Lo1ft/zZKljVg69dR/4QOSC1HEon0yT/GmEca8DCXT/pCh0Q7dzVAL9V NEhhmoiZ+w+njl0X2vv1kBcRh6A7PdFhoB9jsuw6OhuVSky2XyswikUVOoKrFN49 R1ZaF++goXfrvhsw7ShiGJptBCjLNFO+7SENSX5SpkuUwEXIJ0cPd/5lzvhsHHem Y+gI5JQVsXwaJr2Ac/HKIgy/UtQNTgixvThRKRrSkXCdUKClVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo83dwJtir2zJYlels3lUwQGoEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjAzZGZjOTktM2VlNC0z NmVkLThhOWEtYTMxMTgzNTczNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCP9CJVKz6m91kJCINqA0ICdi/SBZN/MMReEB3iD6evvhVt2GC7DskF 9BoyFLbuj3fFBiw72uSYkl2xyZqmvDM6RQqRjkiGMIAKQJC+BN+hCyCBe4b7sVsL EcjM5z+zVk/RXK2n3IWYnpHN/Ai5OTi88tjKhxC64MBjgrpKo2KEVZcRZthZWp+S bLdc7+SZdkmUc5NR9bP9CcykhduVlQqIOuVaoqpSVTKMFj4p35LJe8UVgV34iaRr 9kE+lRvmWGBsmiAG2gzNAD/UgvTnbnhFmEJAtFkEKdGvlmN8LCjhWcofsY3mpClJ VFqP/tdNvuoS6+0//5mbKf3oi73gPtI= -----END CERTIFICATE-----Generated at Wed May 13 08:36:58 2026 by rpki-client