$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a23beb21-fbbe-3393-8cd9-613538a93946.roa File: a23beb21-fbbe-3393-8cd9-613538a93946.roa (raw, json) Hash identifier: 35bnGZRZneBNEf0rcORnA7YPMyuNNusOe2DCnNEm23s= Subject key identifier: A0:64:12:01:F6:8D:5B:0E:41:FE:B6:A1:F4:33:93:65:7D:BC:47:1C Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DAC4565309DEDC803486A1980 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a23beb21-fbbe-3393-8cd9-613538a93946.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54994 IP address blocks: 153.43.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:65:30:9d:ed:c8:03:48:6a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=30d2700c-0080-428e-a07d-c8df4c1e4884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:c2:e5:34:f5:71:66:af:b2:f6:36:96:f8: b3:3d:af:6f:4e:39:34:5c:88:ed:a5:a1:df:1d:26: fb:33:c9:39:35:e3:78:bd:71:e1:7f:dd:d3:b4:b7: a1:49:40:d5:37:68:01:c6:06:42:d6:0c:5e:d6:b8: 3c:90:75:24:96:a5:69:20:66:c8:30:22:0a:0d:6c: ea:6b:36:85:9e:f5:7e:68:c7:ec:81:bc:c7:eb:0d: 7b:6e:d3:c4:27:bd:f9:84:10:f7:b4:d7:cd:58:2f: 61:9b:1a:75:5f:4a:d0:2f:12:4f:1a:af:46:34:ed: b1:a6:df:a6:52:60:62:21:b4:c2:97:6f:03:aa:62: e8:4d:f2:13:40:db:8e:cb:9b:9f:86:92:f2:d7:7e: e2:7f:ac:8d:e6:89:ba:4c:1b:d8:1b:6d:0f:58:e0: da:c5:3d:67:96:b0:df:98:94:b2:4d:bf:0d:6a:a6: d3:b6:a9:c7:3a:a9:06:c5:24:20:1b:48:8e:00:2e: 00:3d:cf:80:b8:c2:75:ea:06:b3:0e:a8:a8:37:58: 74:35:4d:0a:8d:94:f4:07:7c:76:c3:92:a7:27:41: 2e:11:47:3c:9e:27:a0:ca:5d:4c:03:3d:6b:53:81: e7:7c:f6:88:53:2e:e3:9e:35:48:99:cc:6e:8e:86: 87:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:12:01:F6:8D:5B:0E:41:FE:B6:A1:F4:33:93:65:7D:BC:47:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a23beb21-fbbe-3393-8cd9-613538a93946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3c:3b:b9:88:db:b3:84:92:75:14:09:9d:b0:0f:64:8d:0b: 2c:14:3d:f5:04:e9:ab:8c:3c:b6:ee:71:45:a9:09:9f:22:3e: fd:ad:32:ea:61:09:9a:b4:8e:06:0d:0f:b8:11:c6:f0:50:d6: 65:4d:f3:4c:87:ee:2a:0b:cd:30:64:3b:4e:33:a1:19:cc:99: 46:50:2c:77:57:e8:14:56:5c:db:ee:dd:72:75:df:95:9c:3d: db:2f:4f:f6:96:a2:48:4d:30:36:6d:d8:e9:04:04:9a:7d:29: 30:84:3e:b8:4d:4d:f4:8e:56:3d:4c:5a:79:97:57:c3:fa:63: b7:2a:82:9d:50:a0:f7:74:7d:66:e8:c7:ef:02:48:7d:8a:b5: 6c:f4:5c:30:5c:13:d9:2c:91:2a:ee:48:43:22:cc:bb:a3:ac: 64:03:11:78:7a:6d:68:7d:a8:ff:f3:16:9b:96:13:1d:69:1d: 9c:fd:88:38:9f:c4:75:09:c8:db:10:6b:3f:fd:e0:c2:6c:4c: 07:c5:11:da:f6:11:41:bd:97:3c:d4:d3:3d:bd:22:dc:31:c8: 7a:32:ab:16:61:0a:39:0e:73:73:99:4f:1e:89:1f:bb:09:da: c8:81:70:9d:56:97:1c:48:62:ba:3b:9d:1d:fc:16:b8:60:b2: 85:53:d9:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRWUwne3IA0hqGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MzBkMjcwMGMtMDA4MC00MjhlLWEwN2QtYzhkZjRjMWU0ODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/bC5TT1cWavsvY2lvizPa9vTjk0XIjtpaHf HSb7M8k5NeN4vXHhf93TtLehSUDVN2gBxgZC1gxe1rg8kHUklqVpIGbIMCIKDWzq azaFnvV+aMfsgbzH6w17btPEJ735hBD3tNfNWC9hmxp1X0rQLxJPGq9GNO2xpt+m UmBiIbTCl28DqmLoTfITQNuOy5ufhpLy137if6yN5om6TBvYG20PWODaxT1nlrDf mJSyTb8NaqbTtqnHOqkGxSQgG0iOAC4APc+AuMJ16gazDqioN1h0NU0KjZT0B3x2 w5KnJ0EuEUc8niegyl1MAz1rU4HnfPaIUy7jnjVImcxujoaHeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBkEgH2jVsOQf62ofQzk2V9vEccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYTIzYmViMjEtZmJiZS0z MzkzLThjZDktNjEzNTM4YTkzOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY8O7mI27OEknUUCZ2wD2SNCywUPfUE6auMPLbucUWpCZ8iPv2tMuph CZq0jgYND7gRxvBQ1mVN80yH7ioLzTBkO04zoRnMmUZQLHdX6BRWXNvu3XJ135Wc PdsvT/aWokhNMDZt2OkEBJp9KTCEPrhNTfSOVj1MWnmXV8P6Y7cqgp1QoPd0fWbo x+8CSH2KtWz0XDBcE9kskSruSEMizLujrGQDEXh6bWh9qP/zFpuWEx1pHZz9iDif xHUJyNsQaz/94MJsTAfFEdr2EUG9lzzU0z29ItwxyHoyqxZhCjkOc3OZTx6JH7sJ 2siBcJ1WlxxIYro7nR38FrhgsoVT2Xw= -----END CERTIFICATE-----Generated at Wed May 13 12:48:22 2026 by rpki-client