$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8cd5a3b1-f453-301e-b84f-697820f27590.roa File: 8cd5a3b1-f453-301e-b84f-697820f27590.roa (raw, json) Hash identifier: UTaf0xyVD6F3pSsBzUw2Xi74vuApwTROVCbSpllLlHw= Subject key identifier: BA:00:ED:BF:3B:F9:69:27:AF:AE:9C:75:BA:C5:61:37:A0:71:94:E4 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F2EED0A4F50BDE1D364E344A0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8cd5a3b1-f453-301e-b84f-697820f27590.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0a:4f:50:bd:e1:d3:64:e3:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=c2b14ab3-fd7c-40cb-bc3c-e4d49ccd1d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:9a:67:19:7f:4a:df:78:8c:55:81:0b:6e: be:8d:c6:3d:f0:73:6d:fe:7a:37:d1:98:e5:4a:ed: d6:d5:ec:b2:a4:b9:8e:c1:f8:1f:d5:2c:f9:68:f8: 8e:d3:21:ad:8d:58:9d:e7:ee:0c:3e:a5:bd:6d:3c: 31:1f:e8:0d:a0:6f:9b:f1:58:32:10:d6:c6:ed:13: 39:05:e3:e8:96:d5:b0:f7:b6:e9:fa:a0:1a:3f:d9: a4:0b:97:78:8e:f8:15:45:ff:23:05:ba:be:3e:a3: b6:49:ef:6c:c0:55:24:2f:26:88:68:86:86:24:c7: 96:f8:ef:35:0e:24:90:c9:80:a1:09:1a:53:a3:01: 60:45:cf:67:46:f3:13:4f:07:b3:48:7b:d4:c8:7b: d4:48:91:8a:12:bf:7e:a7:f8:97:bb:24:74:26:17: cf:ac:65:81:67:d9:07:01:21:65:35:32:13:81:c5: 34:21:03:e3:41:25:80:91:fb:4c:40:7f:f9:0b:9a: 35:24:33:7b:43:43:1b:c0:a2:c3:d1:cd:f9:5b:50: 20:17:8f:65:b5:05:83:c5:8a:49:e7:5b:81:42:d8: 7e:f3:e6:38:6a:7c:c8:92:d4:e3:65:9a:f3:97:7a: c0:bc:30:8b:7e:6d:e9:44:6e:93:4f:98:f5:d5:b0: 2c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:00:ED:BF:3B:F9:69:27:AF:AE:9C:75:BA:C5:61:37:A0:71:94:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8cd5a3b1-f453-301e-b84f-697820f27590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:46:1d:c5:53:c8:1e:59:e3:02:00:9b:b1:9d:b5:f3:bd:87: c0:da:52:2a:e6:b1:bd:44:26:66:d1:10:fd:ad:e7:e1:de:c6: 2e:e9:f1:a8:43:df:5d:6e:3e:c0:e3:7e:a8:34:4c:2f:a0:b4: 0c:de:7e:24:bc:23:51:81:f3:2e:01:c1:8a:28:8c:5d:0e:66: 1d:6f:90:74:90:3c:26:f6:8c:3d:eb:fd:2f:90:05:01:b5:1e: f2:e1:4e:41:93:c8:4f:5a:6c:82:6b:55:5a:5c:4a:5b:53:18: a1:a4:8b:64:03:8d:33:90:14:cd:67:6e:b3:8b:42:f5:9b:32: d0:c8:47:a1:1f:86:6e:1b:58:fc:cc:73:27:9a:52:40:85:43: f1:25:ad:07:b6:87:85:b2:65:24:81:d4:2d:fb:a4:5e:65:8e: 01:07:86:88:c4:6e:35:07:1b:07:b4:59:6c:b2:23:75:8d:21: 1d:84:8f:36:5b:4b:19:6f:c8:52:00:b0:d4:e7:9d:ed:32:84: 21:9e:7f:bc:41:af:67:42:ab:35:3d:af:67:72:07:3a:eb:35: 47:e6:e9:09:2a:e6:0a:b0:69:f1:da:1d:25:3c:92:96:c2:b2: bb:57:cd:9d:35:3c:61:36:78:f8:40:c1:fb:b5:84:d2:84:85: 5d:88:6c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7QpPUL3h02TjRKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YzJiMTRhYjMtZmQ3Yy00MGNiLWJjM2MtZTRkNDljY2QxZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoSaZxl/St94jFWBC26+jcY98HNt/no30Zjl Su3W1eyypLmOwfgf1Sz5aPiO0yGtjVid5+4MPqW9bTwxH+gNoG+b8VgyENbG7RM5 BePoltWw97bp+qAaP9mkC5d4jvgVRf8jBbq+PqO2Se9swFUkLyaIaIaGJMeW+O81 DiSQyYChCRpTowFgRc9nRvMTTwezSHvUyHvUSJGKEr9+p/iXuyR0JhfPrGWBZ9kH ASFlNTITgcU0IQPjQSWAkftMQH/5C5o1JDN7Q0MbwKLD0c35W1AgF49ltQWDxYpJ 51uBQth+8+Y4anzIktTjZZrzl3rAvDCLfm3pRG6TT5j11bAspQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoA7b87+Wknr66cdbrFYTegcZTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGNkNWEzYjEtZjQ1My0z MDFlLWI4NGYtNjk3ODIwZjI3NTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxGHcVTyB5Z4wIAm7GdtfO9h8DaUirmsb1EJmbREP2t5+Hexi7p8ahD 311uPsDjfqg0TC+gtAzefiS8I1GB8y4BwYoojF0OZh1vkHSQPCb2jD3r/S+QBQG1 HvLhTkGTyE9abIJrVVpcSltTGKGki2QDjTOQFM1nbrOLQvWbMtDIR6Efhm4bWPzM cyeaUkCFQ/ElrQe2h4WyZSSB1C37pF5ljgEHhojEbjUHGwe0WWyyI3WNIR2EjzZb SxlvyFIAsNTnne0yhCGef7xBr2dCqzU9r2dyBzrrNUfm6Qkq5gqwafHaHSU8kpbC srtXzZ01PGE2ePhAwfu1hNKEhV2IbJ4= -----END CERTIFICATE-----Generated at Sun Oct 11 13:51:36 2026 by rpki-client