$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a2f4c59c-d5c7-30f9-a69d-e2a9bc068ab8.roa File: a2f4c59c-d5c7-30f9-a69d-e2a9bc068ab8.roa (raw, json) Hash identifier: UzNc3GynUQsQx7Jgd0uY+twZyOoc3p+nSJJDqdkNmZM= Subject key identifier: 6B:75:68:A3:97:29:AD:03:D6:2C:D4:E9:45:75:D0:51:E8:EC:7C:4B Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584FBCDBDA3C45926F76A1E7B380 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a2f4c59c-d5c7-30f9-a69d-e2a9bc068ab8.roa Signing time: Thu 05 Nov 2026 09:10:24 +0000 ROA not before: Thu 05 Nov 2026 09:10:24 +0000 ROA not after: Wed 03 Feb 2027 09:10:24 +0000 asID: 54994 IP address blocks: 153.43.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bc:db:da:3c:45:92:6f:76:a1:e7:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Nov 5 09:10:24 2026 GMT Not After : Feb 3 09:10:24 2027 GMT Subject: CN=2202a1b3-2c10-4fda-ab7d-3195cce7aae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f8:15:2a:2c:86:c7:c5:4e:73:9c:11:fd:bb: dd:f2:ef:e9:a5:57:26:f9:06:2a:20:45:73:df:97: 45:9e:26:64:de:5d:51:5d:64:78:13:13:50:00:4c: 82:03:73:c0:0e:43:4b:7a:c3:63:0f:9b:a7:c0:02: 9c:1b:41:fc:8e:bd:0f:0c:d1:13:e7:06:e5:00:cf: d5:ce:31:d6:6e:3f:8d:2d:e4:5a:f6:b8:15:85:f4: 9a:24:c8:69:40:7e:89:69:4f:b7:0c:72:ea:0c:5b: 57:49:67:dc:2a:dd:67:3c:c9:17:36:64:1f:53:7a: 7a:90:38:cd:c5:58:a4:63:87:a1:cd:51:a7:88:08: 32:f5:35:78:97:6f:82:52:57:5c:14:0e:30:b5:7e: 1c:71:b4:f7:07:fa:ef:5d:ea:16:65:ea:ec:99:57: 2e:db:1e:fc:ca:fc:e4:6e:36:79:55:57:2c:5a:77: 75:ce:cb:63:9b:ac:86:d8:b2:1f:99:44:e3:26:fe: cb:5a:73:08:a4:d7:cb:f2:8e:63:a2:aa:bf:ee:07: 78:ca:a7:bb:60:fc:d6:c0:e1:93:d9:97:05:06:74: d8:6d:25:2c:95:cf:a1:e0:67:ad:c1:78:84:c3:d1: bf:4e:51:94:f3:2c:fa:71:aa:dd:04:76:51:30:09: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:75:68:A3:97:29:AD:03:D6:2C:D4:E9:45:75:D0:51:E8:EC:7C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a2f4c59c-d5c7-30f9-a69d-e2a9bc068ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4f:36:0b:d7:0b:43:2a:1e:39:5e:a5:9c:27:1c:9e:c7:37: 9b:ac:38:eb:9c:c1:7b:d3:59:9c:e6:4c:25:3c:75:8c:aa:e3: 32:bb:8a:ee:54:50:ed:39:51:da:d5:53:29:1c:da:d9:1d:2b: fc:dd:61:c7:4a:21:8f:07:50:d2:16:71:eb:b6:70:e5:95:8f: ac:a2:2b:d5:13:33:c5:48:56:be:c3:bf:2e:43:67:6f:9e:7d: 4e:a8:3e:6e:c5:c6:31:41:85:60:09:d3:17:61:e3:5c:93:12: ef:3f:10:aa:60:7a:ae:d6:4d:78:a0:b5:26:4e:31:63:68:d3: f7:76:82:35:50:5f:03:5e:f7:74:c9:db:68:af:08:de:80:da: 7f:56:44:40:80:c8:c8:05:1c:0b:5d:7c:cb:a4:68:6a:ea:b6: c0:5b:6c:df:ac:fe:f2:c4:a4:9e:8e:5e:6c:2f:13:21:63:a7: 24:d5:37:ee:6a:ed:74:67:18:30:aa:ed:74:98:8e:c5:b5:04: 58:96:ee:36:fc:a7:88:9a:2a:54:4f:9c:03:66:a8:d4:76:dd: f4:d8:34:5d:e4:3f:8f:ee:44:e8:1d:1e:a8:62:ee:36:87:93: 28:a5:68:14:96:a4:a4:df:5b:e3:94:3d:95:6f:1c:dc:0a:d2: 6f:d3:87:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+829o8RZJvdqHns4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTEwNTA5MTAyNFoXDTI3MDIwMzA5MTAyNFowLzEtMCsGA1UEAxMk MjIwMmExYjMtMmMxMC00ZmRhLWFiN2QtMzE5NWNjZTdhYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/gVKiyGx8VOc5wR/bvd8u/ppVcm+QYqIEVz 35dFniZk3l1RXWR4ExNQAEyCA3PADkNLesNjD5unwAKcG0H8jr0PDNET5wblAM/V zjHWbj+NLeRa9rgVhfSaJMhpQH6JaU+3DHLqDFtXSWfcKt1nPMkXNmQfU3p6kDjN xVikY4ehzVGniAgy9TV4l2+CUldcFA4wtX4ccbT3B/rvXeoWZersmVcu2x78yvzk bjZ5VVcsWnd1zstjm6yG2LIfmUTjJv7LWnMIpNfL8o5joqq/7gd4yqe7YPzWwOGT 2ZcFBnTYbSUslc+h4GetwXiEw9G/TlGU8yz6cardBHZRMAnerQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt1aKOXKa0D1izU6UV10FHo7HxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYTJmNGM1OWMtZDVjNy0z MGY5LWE2OWQtZTJhOWJjMDY4YWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdPNgvXC0MqHjlepZwnHJ7HN5usOOucwXvTWZzmTCU8dYyq4zK7iu5U UO05UdrVUykc2tkdK/zdYcdKIY8HUNIWceu2cOWVj6yiK9UTM8VIVr7Dvy5DZ2+e fU6oPm7FxjFBhWAJ0xdh41yTEu8/EKpgeq7WTXigtSZOMWNo0/d2gjVQXwNe93TJ 22ivCN6A2n9WRECAyMgFHAtdfMukaGrqtsBbbN+s/vLEpJ6OXmwvEyFjpyTVN+5q 7XRnGDCq7XSYjsW1BFiW7jb8p4iaKlRPnANmqNR23fTYNF3kP4/uROgdHqhi7jaH kyilaBSWpKTfW+OUPZVvHNwK0m/Th00= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:37 2026 by rpki-client