$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7815acac-0068-32f4-9e0b-9b8c44e30fd1.roa File: 7815acac-0068-32f4-9e0b-9b8c44e30fd1.roa (raw, json) Hash identifier: 8fSf0Kaq6MMPHLvPQlT61JX1LM8DJlYvnrFmH7O552A= Subject key identifier: 0E:E7:18:9E:43:43:68:56:2C:AD:95:9E:37:24:0F:1F:59:7D:31:05 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D8EF9A001DDCF52E1D23DD600 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7815acac-0068-32f4-9e0b-9b8c44e30fd1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 54994 IP address blocks: 153.43.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:a0:01:dd:cf:52:e1:d2:3d:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=6a7b20dd-1590-462f-acfe-57fa6b9d4563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:95:a7:19:4a:06:7c:2c:a2:07:17:79:dd: d6:96:eb:69:71:4b:d5:ca:20:54:14:ee:d9:d5:20: ae:92:66:27:bb:1c:a4:20:dc:eb:8b:4f:31:30:94: c0:67:ef:d1:f0:0f:4b:66:9f:cd:21:fe:f2:2a:7b: 93:32:16:bc:50:b2:f4:11:93:6e:a5:b9:86:fa:31: 3c:13:8c:34:ec:03:ef:51:c6:a5:65:e3:f8:fe:55: 7d:da:dd:ce:b8:e9:77:c4:a1:c7:80:99:06:c1:a1: 6c:0a:1e:6b:52:3d:77:aa:23:cc:59:d1:99:34:8d: b6:1c:d0:0f:46:60:14:00:37:e5:6f:5d:3e:bd:f8: 46:e9:84:97:18:6b:36:db:ed:50:00:b1:90:52:91: 92:c1:4a:9a:e8:8f:6b:69:d4:ed:84:ea:93:6f:d8: 8c:04:15:ee:30:14:e6:1b:e8:a8:a0:37:35:56:29: c2:54:f9:ac:ad:73:48:3e:57:16:9a:be:d7:aa:81: 99:21:27:71:d6:86:06:32:b7:45:c6:b8:dd:ec:7e: d2:43:d7:9c:78:dd:5e:a2:fd:5d:ad:54:2c:e5:1c: a8:65:d7:55:b2:be:c7:ab:8b:85:f0:aa:1d:cd:26: 4b:54:65:2b:49:65:37:fa:b9:f5:ef:e2:01:07:fd: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E7:18:9E:43:43:68:56:2C:AD:95:9E:37:24:0F:1F:59:7D:31:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7815acac-0068-32f4-9e0b-9b8c44e30fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:5f:66:90:14:90:5b:51:fb:b8:6a:9e:a5:dd:5f:d2:0b:26: 7b:3f:3c:c0:90:75:30:3a:20:91:1f:7f:b8:66:40:17:f5:2e: d9:fc:b2:88:81:7d:8e:61:0f:86:9e:d5:32:d6:e1:bf:56:d5: f3:3e:c9:d5:e8:76:f4:00:e4:10:a0:f5:1c:33:0d:54:49:a5: 56:ee:07:f9:9d:83:28:44:2b:db:ba:5d:1b:3b:71:cf:18:f0: 5c:5a:86:81:4b:d5:28:5f:da:8f:bb:13:9a:80:a3:2b:a1:bb: e5:ac:c6:82:b9:3d:22:b4:29:a0:79:b0:11:cd:da:1f:3a:12: 7f:6a:6b:51:f1:73:c6:26:86:f2:27:3c:9a:68:69:e4:97:19: ef:92:84:2e:e9:ec:6c:2f:c0:80:53:c0:0e:ff:22:5a:5e:3a: 51:ed:9c:cc:c3:54:b2:c4:c1:9e:1a:a8:6d:7b:73:f9:aa:65: 38:94:fc:05:26:f8:95:72:db:55:ab:b2:9c:38:4b:23:4f:74: c3:2f:8d:02:3d:27:d5:77:28:f6:84:1b:2c:c2:26:46:47:e9: 78:fd:8a:ec:3d:32:4c:95:7c:d4:38:d1:d1:db:61:38:7f:eb: f0:f1:6a:ab:99:06:b4:55:77:c7:1c:8f:72:dd:b2:1f:26:11: 10:3d:73:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+aAB3c9S4dI91gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NmE3YjIwZGQtMTU5MC00NjJmLWFjZmUtNTdmYTZiOWQ0NTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmiVpxlKBnwsogcXed3WlutpcUvVyiBUFO7Z 1SCukmYnuxykINzri08xMJTAZ+/R8A9LZp/NIf7yKnuTMha8ULL0EZNupbmG+jE8 E4w07APvUcalZeP4/lV92t3OuOl3xKHHgJkGwaFsCh5rUj13qiPMWdGZNI22HNAP RmAUADflb10+vfhG6YSXGGs22+1QALGQUpGSwUqa6I9radTthOqTb9iMBBXuMBTm G+iooDc1VinCVPmsrXNIPlcWmr7XqoGZISdx1oYGMrdFxrjd7H7SQ9eceN1eov1d rVQs5RyoZddVsr7Hq4uF8KodzSZLVGUrSWU3+rn17+IBB/3spwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7nGJ5DQ2hWLK2VnjckDx9ZfTEFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzgxNWFjYWMtMDA2OC0z MmY0LTllMGItOWI4YzQ0ZTMwZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVfZpAUkFtR+7hqnqXdX9ILJns/PMCQdTA6IJEff7hmQBf1Ltn8soiB fY5hD4ae1TLW4b9W1fM+ydXodvQA5BCg9RwzDVRJpVbuB/mdgyhEK9u6XRs7cc8Y 8FxahoFL1Shf2o+7E5qAoyuhu+WsxoK5PSK0KaB5sBHN2h86En9qa1Hxc8YmhvIn PJpoaeSXGe+ShC7p7GwvwIBTwA7/IlpeOlHtnMzDVLLEwZ4aqG17c/mqZTiU/AUm +JVy21Wrspw4SyNPdMMvjQI9J9V3KPaEGyzCJkZH6Xj9iuw9MkyVfNQ40dHbYTh/ 6/DxaquZBrRVd8ccj3Ldsh8mERA9c8Q= -----END CERTIFICATE-----Generated at Wed May 13 10:28:21 2026 by rpki-client