$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8f04580e-a8a3-3a7d-8004-8ae450796340.roa File: 8f04580e-a8a3-3a7d-8004-8ae450796340.roa (raw, json) Hash identifier: XxaMD8gSoyreIJvsp780LsvI2eW3Nbbmjg/wjOBowxE= Subject key identifier: 6F:CF:54:B6:15:AE:11:89:52:DF:94:A6:E8:A1:F7:12:9A:2A:A1:BE Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4989F14C140A28AA94BA08E0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8f04580e-a8a3-3a7d-8004-8ae450796340.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f1:4c:14:0a:28:aa:94:ba:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b1d216a0-b665-41d5-b2f7-5b27f8d21c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:a2:58:fb:09:ef:4d:41:66:47:66:f7:3b: 7a:74:de:cf:9a:a3:6a:00:72:36:f1:7c:ad:55:3a: 0f:e0:05:0a:e0:78:43:c8:92:7a:f7:bf:b6:d5:d8: 21:e2:c9:e1:5d:65:b9:5c:87:45:43:56:63:22:91: a3:60:35:ba:b0:fd:b8:65:02:62:62:8f:09:f2:3f: c7:47:91:7f:35:42:e0:16:c5:3c:42:b1:fb:1d:c7: a1:ff:2e:ef:2b:4d:be:a2:ca:8d:e3:03:1a:6f:99: 1d:23:bb:92:85:05:1e:45:af:76:77:c3:dd:48:28: 82:a8:8d:33:75:07:21:98:45:1e:c4:0d:59:c5:75: 56:16:e3:3a:af:f1:7f:30:71:4c:72:6c:4f:86:59: 82:5a:d8:76:97:8d:10:20:d1:12:af:be:c1:4b:d7: a8:7d:42:27:69:06:ed:93:c0:20:fe:35:10:33:46: b8:2d:72:a5:49:68:6b:06:e9:43:50:30:ed:65:ce: 93:01:c5:a5:71:37:3b:c6:c8:80:65:58:1d:d6:dc: ac:b0:e2:48:ed:49:30:c0:59:36:6d:22:c3:96:e3: fd:ee:9b:a3:a1:17:64:6d:2c:60:18:41:35:e3:ab: 5e:53:f3:8c:12:76:9d:bd:4d:8d:0a:63:15:14:fc: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CF:54:B6:15:AE:11:89:52:DF:94:A6:E8:A1:F7:12:9A:2A:A1:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8f04580e-a8a3-3a7d-8004-8ae450796340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b2:c3:02:bb:30:1c:3b:db:99:f3:fb:05:bb:08:50:6c:54: b3:a6:6d:7e:15:5b:46:31:41:87:88:d9:75:0a:b7:0c:42:68: 5e:38:d9:8b:bd:c0:e5:f7:97:4b:a6:05:26:f0:af:32:29:5f: c0:e6:9a:0a:89:38:0f:e8:8d:e0:ad:af:8a:78:45:02:4f:b1: f0:b7:da:dc:88:9d:9c:81:63:ba:a9:52:0e:80:a1:80:9b:0b: 25:3d:2e:18:d6:26:5d:36:98:5b:58:ae:20:82:e0:f4:bd:61: 7e:32:6d:87:1a:ac:ce:6a:2f:11:94:4b:77:b0:78:61:42:c2: 9d:57:19:82:fd:ff:3d:fe:82:23:fd:72:26:d4:6b:b3:ae:07: 89:dd:9e:29:00:a0:f6:66:82:91:de:f2:16:70:7d:b9:27:90: fc:b0:0d:6a:85:21:18:cd:0a:39:ea:12:52:29:7d:68:ca:5b: b6:6a:68:b6:25:9c:a2:f1:da:2a:d0:9e:81:94:4d:85:f4:c4: a0:31:14:6f:d6:f6:d7:08:3e:bc:c3:b5:7a:21:a0:ef:6c:5c: 96:dc:26:e2:0b:10:bf:db:db:c6:02:6c:72:07:f7:0c:31:c9: 57:16:4d:25:a1:e9:04:86:e3:49:2e:fa:5f:eb:92:14:99:92: 09:60:79:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JifFMFAooqpS6COAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjFkMjE2YTAtYjY2NS00MWQ1LWIyZjctNWIyN2Y4ZDIxYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vCiWPsJ701BZkdm9zt6dN7PmqNqAHI28Xyt VToP4AUK4HhDyJJ697+21dgh4snhXWW5XIdFQ1ZjIpGjYDW6sP24ZQJiYo8J8j/H R5F/NULgFsU8QrH7Hceh/y7vK02+osqN4wMab5kdI7uShQUeRa92d8PdSCiCqI0z dQchmEUexA1ZxXVWFuM6r/F/MHFMcmxPhlmCWth2l40QINESr77BS9eofUInaQbt k8Ag/jUQM0a4LXKlSWhrBulDUDDtZc6TAcWlcTc7xsiAZVgd1tyssOJI7UkwwFk2 bSLDluP97pujoRdkbSxgGEE146teU/OMEnadvU2NCmMVFPw8WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/PVLYVrhGJUt+Upuih9xKaKqG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGYwNDU4MGUtYThhMy0z YTdkLTgwMDQtOGFlNDUwNzk2MzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiywwK7MBw725nz+wW7CFBsVLOmbX4VW0YxQYeI2XUKtwxCaF442Yu9 wOX3l0umBSbwrzIpX8DmmgqJOA/ojeCtr4p4RQJPsfC32tyInZyBY7qpUg6AoYCb CyU9LhjWJl02mFtYriCC4PS9YX4ybYcarM5qLxGUS3eweGFCwp1XGYL9/z3+giP9 cibUa7OuB4ndnikAoPZmgpHe8hZwfbknkPywDWqFIRjNCjnqElIpfWjKW7ZqaLYl nKLx2irQnoGUTYX0xKAxFG/W9tcIPrzDtXohoO9sXJbcJuILEL/b28YCbHIH9wwx yVcWTSWh6QSG40ku+l/rkhSZkglgeUw= -----END CERTIFICATE-----Generated at Fri Sep 25 20:16:53 2026 by rpki-client