$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/df33903b-ff49-33ff-a048-c2d4f6347955.roa File: df33903b-ff49-33ff-a048-c2d4f6347955.roa (raw, json) Hash identifier: Y3nIlAY3I9kTXh7poIEgFHFij5axQq7nUWExQap7TuQ= Subject key identifier: C0:CF:59:DA:8B:78:76:CB:EB:4C:7D:39:9A:1B:CE:2C:13:C4:2E:6E Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D9CEAB5307E28014DD9F2A5C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/df33903b-ff49-33ff-a048-c2d4f6347955.roa Signing time: Fri 24 Apr 2026 13:00:31 +0000 ROA not before: Fri 24 Apr 2026 13:00:31 +0000 ROA not after: Thu 23 Jul 2026 13:00:31 +0000 asID: 54994 IP address blocks: 153.43.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9c:ea:b5:30:7e:28:01:4d:d9:f2:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 24 13:00:31 2026 GMT Not After : Jul 23 13:00:31 2026 GMT Subject: CN=391e849d-ea3d-4f4b-8ae5-63e852f34e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:fe:f8:81:07:6f:0a:e3:e3:fb:9b:95:60: 90:fb:9e:47:ad:57:d0:01:66:f0:c6:33:4a:bc:f2: ef:d7:79:17:51:78:7c:ca:26:7a:19:bd:d7:01:97: 94:70:16:15:cb:ac:ae:77:b2:e0:03:88:13:bd:6d: 53:84:b8:93:78:14:23:cc:3b:d4:7e:c4:54:ff:92: 8d:2c:06:b5:82:6a:f8:87:9c:fc:18:2b:d3:9b:af: 3c:cb:62:42:4b:e4:5f:68:9e:d8:dd:33:01:ab:ee: 28:62:c1:89:d5:de:5f:e6:d0:e7:89:6b:1f:3c:f7: e8:e7:9b:cb:6d:fc:ee:ae:f1:40:cb:c5:01:e5:e2: da:5f:e8:6e:60:ac:00:0c:53:d8:8c:f5:48:93:85: 15:d6:a0:f4:06:19:3e:87:37:c8:b9:cd:49:93:ad: 38:7f:fb:86:40:75:65:c9:00:a4:8e:2d:1c:76:f5: 76:23:73:b9:ce:3f:d9:10:b3:e5:db:af:ae:3d:1a: 4b:25:dd:17:4a:74:e0:a9:5f:c6:58:de:72:4b:f8: fa:b5:c4:04:70:2e:72:47:db:df:26:2b:64:e3:7b: 8a:77:c0:8e:54:60:72:15:bc:36:b4:84:44:c0:d6: 37:a8:c7:9c:ab:dc:8e:39:79:9b:71:74:59:ac:1a: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CF:59:DA:8B:78:76:CB:EB:4C:7D:39:9A:1B:CE:2C:13:C4:2E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/df33903b-ff49-33ff-a048-c2d4f6347955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:19:15:d4:91:11:52:1d:5a:9b:e8:c9:5e:91:72:71:1c:78: bb:95:ce:03:e7:a9:dd:b5:d2:9b:ea:37:f9:6c:90:fc:14:4b: 44:1f:51:29:52:6a:f7:19:fd:3e:ce:35:60:be:06:ce:eb:a8: 8e:de:11:0c:71:05:57:a6:19:ee:27:af:49:c8:d5:94:49:9b: b5:52:d6:83:54:47:11:5a:53:8e:fe:60:c7:6d:6d:ac:ea:7a: fa:57:4e:79:9a:5d:8b:c4:e9:13:29:43:2e:77:bd:e6:61:1b: c0:21:1a:69:22:57:25:fd:b6:34:1a:13:93:08:00:9d:32:8d: d6:ad:7f:fd:6f:2e:7d:9b:3d:a8:bc:18:19:18:5b:a4:6a:41: 20:f3:4b:0d:c9:ca:97:80:d6:35:14:f6:cc:38:06:49:9f:d5: fa:86:ec:4a:b8:93:47:e0:66:47:5a:14:32:47:b2:2a:a4:75: f4:fa:82:1c:3a:6a:a8:f5:ff:fb:3f:e5:78:2f:a6:3e:7c:5d: 89:44:9f:0e:4d:47:bf:5b:cf:c9:d4:6a:bc:cd:ba:94:ee:bf: 60:b9:e0:77:94:7a:7c:1a:63:ad:83:07:82:ec:e3:a9:f9:a9: a8:6b:6a:7f:eb:8d:4c:b2:53:76:0b:47:e5:91:62:64:94:13: 91:9c:30:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2c6rUwfigBTdnypcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQyNDEzMDAzMVoXDTI2MDcyMzEzMDAzMVowLzEtMCsGA1UEAxMk MzkxZTg0OWQtZWEzZC00ZjRiLThhZTUtNjNlODUyZjM0ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e3++IEHbwrj4/ublWCQ+55HrVfQAWbwxjNK vPLv13kXUXh8yiZ6Gb3XAZeUcBYVy6yud7LgA4gTvW1ThLiTeBQjzDvUfsRU/5KN LAa1gmr4h5z8GCvTm688y2JCS+RfaJ7Y3TMBq+4oYsGJ1d5f5tDniWsfPPfo55vL bfzurvFAy8UB5eLaX+huYKwADFPYjPVIk4UV1qD0Bhk+hzfIuc1Jk604f/uGQHVl yQCkji0cdvV2I3O5zj/ZELPl26+uPRpLJd0XSnTgqV/GWN5yS/j6tcQEcC5yR9vf Jitk43uKd8COVGByFbw2tIREwNY3qMecq9yOOXmbcXRZrBoC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDPWdqLeHbL60x9OZobziwTxC5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZGYzMzkwM2ItZmY0OS0z M2ZmLWEwNDgtYzJkNGY2MzQ3OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUZFdSREVIdWpvoyV6RcnEceLuVzgPnqd210pvqN/lskPwUS0QfUSlS avcZ/T7ONWC+Bs7rqI7eEQxxBVemGe4nr0nI1ZRJm7VS1oNURxFaU47+YMdtbazq evpXTnmaXYvE6RMpQy53veZhG8AhGmkiVyX9tjQaE5MIAJ0yjdatf/1vLn2bPai8 GBkYW6RqQSDzSw3JypeA1jUU9sw4Bkmf1fqG7Eq4k0fgZkdaFDJHsiqkdfT6ghw6 aqj1//s/5Xgvpj58XYlEnw5NR79bz8nUarzNupTuv2C54HeUenwaY62DB4Ls46n5 qahran/rjUyyU3YLR+WRYmSUE5GcMCU= -----END CERTIFICATE-----Generated at Wed May 13 07:09:47 2026 by rpki-client