$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa File: 8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa (raw, json) Hash identifier: EE8vbUtRxQHDlHvG8orAB1r7EcmRXTdMwgLA35mFdNo= Subject key identifier: 70:1D:66:ED:AD:6B:6E:22:80:29:6B:0A:C6:40:07:D0:6C:EA:24:72 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D1E8F628999E4A0E355B55600 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa Signing time: Tue 10 Mar 2026 06:44:44 +0000 ROA not before: Tue 10 Mar 2026 06:44:44 +0000 ROA not after: Mon 08 Jun 2026 06:44:44 +0000 asID: 54994 IP address blocks: 153.43.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1e:8f:62:89:99:e4:a0:e3:55:b5:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 10 06:44:44 2026 GMT Not After : Jun 8 06:44:44 2026 GMT Subject: CN=0f663574-37e4-4a30-ada3-e400c56b91ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:73:8e:00:bc:c9:d2:8c:94:63:eb:29:89: b6:9b:7c:c9:4b:c3:d9:25:9c:11:ac:99:fd:be:07: 6d:1f:12:cf:1f:e2:c3:44:24:00:4c:eb:c5:71:c3: dd:bd:75:a6:1b:63:93:b1:8e:42:12:41:7a:e1:a4: 50:02:2d:a1:6f:11:25:2e:b3:d3:77:c5:8d:2b:25: be:90:45:8c:3c:e7:d1:ff:6c:f6:2a:7e:3a:1f:3c: 6f:16:bb:63:f2:27:9b:12:cf:5d:df:61:86:ae:da: f9:2a:b2:6d:5b:03:b1:1e:bc:b0:2c:b3:74:b6:f8: 41:c4:0a:5d:90:43:44:4d:c9:d0:5f:50:16:dd:8a: 95:0a:ec:6a:dd:1c:f5:90:31:3a:16:af:28:f1:f1: 75:53:e2:1a:48:91:92:3b:25:76:6c:a0:90:d4:03: 71:2d:dd:df:87:20:dc:8c:43:82:57:c4:ca:ca:63: 5e:ad:5d:02:49:93:5d:76:e5:9f:92:54:c5:d8:f8: 46:06:81:e6:da:25:b7:2b:eb:10:be:1d:3a:45:5f: 57:7e:ac:2e:3a:45:68:24:c0:c0:2f:72:af:29:54: cd:c0:ae:bf:70:a3:be:6e:fc:0d:aa:4d:62:13:5a: c1:15:d4:85:eb:78:41:56:65:e2:df:5b:a7:14:8e: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1D:66:ED:AD:6B:6E:22:80:29:6B:0A:C6:40:07:D0:6C:EA:24:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:95:bd:37:55:b3:5a:40:89:80:4b:27:e7:1f:61:ab:49:34: a5:29:db:de:75:ea:61:86:30:a7:dc:2f:b1:00:38:ef:4e:d0: 4d:86:d4:f1:d0:b4:55:91:95:7c:10:59:14:85:1a:c2:70:ed: 83:14:a1:dc:e9:b4:ac:4e:ac:ae:de:e6:ee:c2:67:60:51:7f: 16:40:0d:5e:63:81:78:63:e4:c7:08:e2:dd:67:0f:70:93:b3: 67:ff:ee:7e:cf:50:24:23:a7:3a:bc:5e:bf:19:45:4c:45:5a: e2:4e:e9:6f:ed:b8:d1:40:19:30:60:bd:20:8a:fb:4c:56:36: 06:90:b5:e6:61:cd:92:29:75:09:ef:1c:ff:e7:d9:6b:4b:d1: bd:4a:a3:8c:2d:cc:24:93:69:21:2c:53:66:e8:f2:43:0b:63: 90:b7:63:60:fa:b5:09:7b:77:a5:3e:09:36:54:2d:f7:b4:31: 5d:dc:3e:36:a9:e8:ae:65:36:bf:c6:89:54:3d:01:1d:be:dc: 6b:75:f0:2d:66:3c:cb:66:9e:15:75:68:e8:e9:f7:c8:21:ef: 4f:37:ae:78:bd:99:85:94:14:7f:67:e8:a8:c1:1f:a5:90:6e: 10:f2:f5:2b:d7:89:f6:d7:c1:92:f7:a3:f4:6c:69:a1:31:31: 08:91:9d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ej2KJmeSg41W1VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMxMDA2NDQ0NFoXDTI2MDYwODA2NDQ0NFowLzEtMCsGA1UEAxMk MGY2NjM1NzQtMzdlNC00YTMwLWFkYTMtZTQwMGM1NmI5MWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16FzjgC8ydKMlGPrKYm2m3zJS8PZJZwRrJn9 vgdtHxLPH+LDRCQATOvFccPdvXWmG2OTsY5CEkF64aRQAi2hbxElLrPTd8WNKyW+ kEWMPOfR/2z2Kn46HzxvFrtj8iebEs9d32GGrtr5KrJtWwOxHrywLLN0tvhBxApd kENETcnQX1AW3YqVCuxq3Rz1kDE6Fq8o8fF1U+IaSJGSOyV2bKCQ1ANxLd3fhyDc jEOCV8TKymNerV0CSZNdduWfklTF2PhGBoHm2iW3K+sQvh06RV9XfqwuOkVoJMDA L3KvKVTNwK6/cKO+bvwNqk1iE1rBFdSF63hBVmXi31unFI7NfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAdZu2ta24igClrCsZAB9Bs6iRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGFjMDI5ZjMtZDNlYS0z MTZkLWJlOTgtODU2NmE1ZDNiY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2VvTdVs1pAiYBLJ+cfYatJNKUp29516mGGMKfcL7EAOO9O0E2G1PHQ tFWRlXwQWRSFGsJw7YMUodzptKxOrK7e5u7CZ2BRfxZADV5jgXhj5McI4t1nD3CT s2f/7n7PUCQjpzq8Xr8ZRUxFWuJO6W/tuNFAGTBgvSCK+0xWNgaQteZhzZIpdQnv HP/n2WtL0b1Ko4wtzCSTaSEsU2bo8kMLY5C3Y2D6tQl7d6U+CTZULfe0MV3cPjap 6K5lNr/GiVQ9AR2+3Gt18C1mPMtmnhV1aOjp98gh7083rni9mYWUFH9n6KjBH6WQ bhDy9SvXifbXwZL3o/RsaaExMQiRnfo= -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:50 2026 by rpki-client