$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e64dcb9e-5571-3c3e-9579-f71437358588.roa File: e64dcb9e-5571-3c3e-9579-f71437358588.roa (raw, json) Hash identifier: YONstv9Lud+pDC5bNYyFIwmksT0WvRTPdLwvSdDiXAI= Subject key identifier: B9:5B:71:38:29:98:1A:AD:3C:B6:04:0B:E3:32:01:E9:C4:73:AD:63 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D2A74DBB85C87F959A6824340 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e64dcb9e-5571-3c3e-9579-f71437358588.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 54994 IP address blocks: 153.43.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:db:b8:5c:87:f9:59:a6:82:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=656f727c-9eb8-44cb-ba68-96f712604179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:3a:a3:dd:5e:c8:6f:cc:88:e7:b1:24:db: 77:4a:a0:a3:59:3f:00:d1:d8:56:3e:62:80:da:d5: 58:cc:ec:4c:53:7c:ef:68:00:92:9e:aa:c3:3d:3f: 06:ef:01:f2:4d:af:44:5b:af:fe:cd:bb:08:2a:f6: 49:bf:a3:a9:80:ae:83:2d:0b:d5:f1:2a:29:57:ff: 63:d0:63:0a:7b:97:2b:d0:cf:95:d0:13:ea:8a:78: 9b:6b:83:4a:e6:32:c0:f2:a4:13:ab:3b:aa:cf:65: 46:b1:fe:ec:4e:16:95:46:96:a8:ac:df:5a:6a:8a: 50:57:c6:98:87:eb:0f:f4:22:01:08:f7:87:ca:87: d3:cd:58:29:6e:4c:1f:69:fc:cd:a6:3a:dc:89:4d: ba:36:8a:c8:d0:90:8b:b1:aa:d0:e6:d5:07:97:96: 5a:db:36:b5:a7:9f:28:5e:7f:6b:db:65:1a:de:a9: 3b:31:05:c1:ea:9e:2d:da:c3:41:9c:82:5c:16:ed: 05:bd:43:dd:1c:d1:8f:e1:c9:6d:30:f1:01:b8:16: 53:29:aa:2d:d8:ea:a8:3a:11:8d:b1:dd:0f:60:76: eb:68:05:7d:f9:b0:35:c3:bf:19:cf:55:c0:6c:cd: b5:33:42:19:b5:e4:3f:9b:b2:7d:92:c7:b1:c6:ab: a9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5B:71:38:29:98:1A:AD:3C:B6:04:0B:E3:32:01:E9:C4:73:AD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e64dcb9e-5571-3c3e-9579-f71437358588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:42:18:9b:83:7d:42:86:90:06:18:f1:b9:dc:9d:64:67:82: 38:b8:46:b1:47:61:09:85:df:c1:27:09:9d:76:27:e3:50:3d: d0:91:cd:4c:04:7d:23:50:00:b9:02:f1:8b:52:1c:0c:d6:b7: b8:cd:77:27:6d:eb:15:36:d4:f6:7b:70:bc:d0:1d:52:e9:bb: cf:41:ca:27:e1:a6:41:e2:34:5b:b8:4c:4e:55:04:d9:b2:c6: 03:0c:3f:e3:53:f6:06:5d:bf:f9:bf:2a:aa:29:30:31:d2:5a: b6:bb:b1:93:d1:dd:89:1c:5c:66:ee:cf:88:9d:8a:93:1b:e2: bb:d6:7b:e1:e3:07:8b:4a:a1:f2:38:79:9c:7b:b2:16:a6:ea: 84:3b:2f:e9:73:68:3e:b7:2a:24:49:bc:18:18:19:c1:09:8a: 7f:e8:3a:c9:b8:26:f7:8a:5e:00:c4:0f:e6:6e:49:b0:b9:12: 9a:71:be:ac:8d:75:87:74:38:b7:b8:3c:b6:74:9c:42:be:74: 51:dc:a6:d3:a9:eb:39:e1:17:f3:c3:ab:1c:38:5f:23:67:e4: c8:91:27:94:0a:e2:ff:b1:19:eb:f3:0c:fe:6d:bd:07:2d:18: df:4c:4d:dd:6c:ba:26:c1:a0:94:ad:2b:cc:33:97:58:b9:27: 4f:04:38:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNu4XIf5WaaCQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NjU2ZjcyN2MtOWViOC00NGNiLWJhNjgtOTZmNzEyNjA0MTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIM6o91eyG/MiOexJNt3SqCjWT8A0dhWPmKA 2tVYzOxMU3zvaACSnqrDPT8G7wHyTa9EW6/+zbsIKvZJv6OpgK6DLQvV8SopV/9j 0GMKe5cr0M+V0BPqiniba4NK5jLA8qQTqzuqz2VGsf7sThaVRpaorN9aaopQV8aY h+sP9CIBCPeHyofTzVgpbkwfafzNpjrciU26NorI0JCLsarQ5tUHl5Za2za1p58o Xn9r22Ua3qk7MQXB6p4t2sNBnIJcFu0FvUPdHNGP4cltMPEBuBZTKaot2OqoOhGN sd0PYHbraAV9+bA1w78Zz1XAbM21M0IZteQ/m7J9ksexxqupXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlbcTgpmBqtPLYEC+MyAenEc61jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZTY0ZGNiOWUtNTU3MS0z YzNlLTk1NzktZjcxNDM3MzU4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRCGJuDfUKGkAYY8bncnWRngji4RrFHYQmF38EnCZ12J+NQPdCRzUwE fSNQALkC8YtSHAzWt7jNdydt6xU21PZ7cLzQHVLpu89ByifhpkHiNFu4TE5VBNmy xgMMP+NT9gZdv/m/KqopMDHSWra7sZPR3YkcXGbuz4idipMb4rvWe+HjB4tKofI4 eZx7sham6oQ7L+lzaD63KiRJvBgYGcEJin/oOsm4JveKXgDED+ZuSbC5EppxvqyN dYd0OLe4PLZ0nEK+dFHcptOp6znhF/PDqxw4XyNn5MiRJ5QK4v+xGevzDP5tvQct GN9MTd1suibBoJStK8wzl1i5J08EOOo= -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:23 2026 by rpki-client