$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa File: 8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa (raw, json) Hash identifier: 2AK6WO2xvcd+T1NplOb2m3KFPsWwBOju3ZKsc7nX5rU= Subject key identifier: 75:13:8C:76:05:E8:96:A2:69:58:84:B5:68:27:3A:96:F3:23:AE:65 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4987DCCC1588957F126E6B20 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:dc:cc:15:88:95:7f:12:6e:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=749a6c1e-5040-498c-bf25-e0efdd9b1760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a8:b6:4c:4e:51:73:c9:52:84:d6:23:82:df: a0:05:34:11:76:9d:38:45:21:14:be:6a:ef:b8:b6: 9b:ab:a0:d9:14:61:9f:c0:df:3b:14:07:1c:02:cf: 98:34:ad:84:32:fd:7a:ae:bc:10:e4:ef:96:56:50: d9:71:44:7a:60:8f:5e:7a:9f:46:e4:f2:7c:91:88: 0c:b8:8a:fe:75:ec:36:ab:93:49:aa:69:e0:62:de: 61:77:cc:c4:63:18:4d:d8:8c:44:a6:8d:69:9c:74: 6b:11:a8:8e:9e:49:8f:a9:1a:95:5d:6e:b4:86:61: b7:8d:f9:32:a5:2f:34:06:25:4a:5e:ad:c1:b9:aa: b0:73:2e:ed:46:5c:aa:04:c6:0c:6c:65:61:a7:05: 95:25:89:da:e6:90:3a:cd:fb:86:43:4f:f4:aa:9a: 3c:4f:ea:5d:f9:4e:46:a7:82:6d:13:22:82:88:e1: 38:8b:6b:ab:09:50:74:c6:a8:1f:e7:2d:9d:05:2b: ca:c0:32:ca:34:1b:46:78:89:b8:7c:59:55:34:0d: 11:3d:d8:9e:27:4b:45:c3:d6:bc:0a:dd:24:e0:29: 7f:c6:4d:bb:8c:ef:64:1c:01:4c:7a:37:60:12:91: ed:56:1c:0a:a0:d0:c5:0a:04:9b:ee:f0:61:a8:b5: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:13:8C:76:05:E8:96:A2:69:58:84:B5:68:27:3A:96:F3:23:AE:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5a:5a:7b:05:44:cb:8a:14:63:81:0d:34:65:99:d5:90:57: b8:79:95:8f:0e:09:c7:11:fc:8f:1b:d0:08:a9:45:d0:7d:d5: db:eb:f5:70:98:41:da:fd:01:bd:cf:87:bc:26:68:6d:0b:4f: 50:22:f9:be:3c:e3:74:f6:d3:ba:b4:ff:99:50:a5:15:d8:3d: 5e:63:47:fa:2d:f7:93:e4:eb:d3:1d:6f:e7:8f:74:4f:4d:22: c8:64:b9:f1:86:ba:20:d4:ed:cc:f8:6c:25:a3:04:12:7d:74: 3a:81:e9:c9:63:d9:8e:1f:2e:28:a7:92:1f:f9:6c:0b:3c:96: a6:f2:10:ab:a9:09:1b:86:03:52:76:3e:9d:98:07:81:2b:4a: 23:6b:9e:e3:54:bf:1d:99:b8:83:d6:68:27:61:f2:35:24:bc: ef:70:da:a8:d8:11:32:a1:c1:16:ce:19:f5:67:e3:14:68:e5: 63:64:ba:87:b8:a9:83:7e:a6:65:fd:fe:40:2b:55:48:ed:e2: 18:72:77:b5:b5:31:42:7e:12:e7:3e:f5:58:77:4e:5b:d4:32: a9:11:1c:a9:15:d0:26:2c:ff:ce:fe:75:3e:4e:5e:04:e9:84: f4:1b:7e:b2:10:77:31:ae:2d:27:79:d9:cf:22:c2:ee:83:74: 7e:41:8f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh9zMFYiVfxJuayAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzQ5YTZjMWUtNTA0MC00OThjLWJmMjUtZTBlZmRkOWIxNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqi2TE5Rc8lShNYjgt+gBTQRdp04RSEUvmrv uLabq6DZFGGfwN87FAccAs+YNK2EMv16rrwQ5O+WVlDZcUR6YI9eep9G5PJ8kYgM uIr+dew2q5NJqmngYt5hd8zEYxhN2IxEpo1pnHRrEaiOnkmPqRqVXW60hmG3jfky pS80BiVKXq3Buaqwcy7tRlyqBMYMbGVhpwWVJYna5pA6zfuGQ0/0qpo8T+pd+U5G p4JtEyKCiOE4i2urCVB0xqgf5y2dBSvKwDLKNBtGeIm4fFlVNA0RPdieJ0tFw9a8 Ct0k4Cl/xk27jO9kHAFMejdgEpHtVhwKoNDFCgSb7vBhqLUU1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUTjHYF6JaiaViEtWgnOpbzI65lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGFjMDI5ZjMtZDNlYS0z MTZkLWJlOTgtODU2NmE1ZDNiY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtaWnsFRMuKFGOBDTRlmdWQV7h5lY8OCccR/I8b0AipRdB91dvr9XCY Qdr9Ab3Ph7wmaG0LT1Ai+b4843T207q0/5lQpRXYPV5jR/ot95Pk69Mdb+ePdE9N IshkufGGuiDU7cz4bCWjBBJ9dDqB6clj2Y4fLiinkh/5bAs8lqbyEKupCRuGA1J2 Pp2YB4ErSiNrnuNUvx2ZuIPWaCdh8jUkvO9w2qjYETKhwRbOGfVn4xRo5WNkuoe4 qYN+pmX9/kArVUjt4hhyd7W1MUJ+Euc+9Vh3TlvUMqkRHKkV0CYs/87+dT5OXgTp hPQbfrIQdzGuLSd52c8iwu6DdH5Bj8Q= -----END CERTIFICATE-----Generated at Sun Sep 27 14:57:18 2026 by rpki-client