$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fd956f03-616c-3cb6-9c67-05adc876b3a5.roa File: fd956f03-616c-3cb6-9c67-05adc876b3a5.roa (raw, json) Hash identifier: OumxzEbM+uxQXL6pLtysZh2F/SkWVjzW43ca24BPAHY= Subject key identifier: B7:29:63:3D:D4:A0:3C:F1:6F:26:44:CB:0D:EC:60:B8:37:ED:9E:95 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DA770FBE073A7A4EBDF6942F0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fd956f03-616c-3cb6-9c67-05adc876b3a5.roa Signing time: Tue 28 Apr 2026 07:29:13 +0000 ROA not before: Tue 28 Apr 2026 07:29:13 +0000 ROA not after: Mon 27 Jul 2026 07:29:13 +0000 asID: 54994 IP address blocks: 153.43.152.0/24 maxlen: 24 153.43.153.0/24 maxlen: 24 153.43.154.0/24 maxlen: 24 153.43.155.0/24 maxlen: 24 153.43.156.0/24 maxlen: 24 153.43.157.0/24 maxlen: 24 153.43.158.0/24 maxlen: 24 153.43.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a7:70:fb:e0:73:a7:a4:eb:df:69:42:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 28 07:29:13 2026 GMT Not After : Jul 27 07:29:13 2026 GMT Subject: CN=2d9c74fa-acfc-4a89-8629-99b60643b8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9c:e6:31:06:9a:3a:bc:c6:a3:6b:81:cb:fb: ac:6d:7c:b6:18:3d:b2:eb:7b:5a:99:1b:a7:1c:7c: 44:ce:26:65:ad:d0:b1:78:d8:73:73:65:8e:eb:33: f7:32:f7:d3:b6:f8:b4:fa:ab:25:81:61:2a:0c:da: 8d:c6:a7:7a:61:6c:31:25:93:16:41:32:33:a7:cb: c3:50:a0:91:cc:6a:d7:b1:ce:75:6e:da:d1:87:e8: 10:58:bf:b2:59:1f:ae:c2:6b:9d:5d:28:f2:76:68: 77:d0:48:59:ba:04:52:36:80:1f:39:d6:14:70:62: 96:db:1a:12:f8:20:0f:71:4e:37:87:b2:b5:41:bb: b2:f0:45:07:97:76:fe:be:e3:dd:4d:a0:17:ec:2a: 4c:5c:f3:9e:69:5c:a2:3d:57:29:d7:d9:32:e7:54: ac:43:32:8f:a4:57:f0:e0:23:8d:87:29:00:0b:26: 53:50:66:5b:64:9d:24:d5:be:14:39:5d:f7:a6:2c: cd:b8:d1:f2:60:3d:f1:41:7e:51:8e:21:c7:8f:26: 32:e6:ec:8c:aa:7f:94:ff:f7:b1:ab:04:39:63:a5: 35:2b:b4:2e:05:fc:80:15:b5:67:3e:e9:70:87:8b: ed:91:9d:b4:da:19:4d:3f:ff:3d:8f:67:ae:92:0c: d8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:29:63:3D:D4:A0:3C:F1:6F:26:44:CB:0D:EC:60:B8:37:ED:9E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fd956f03-616c-3cb6-9c67-05adc876b3a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f0:16:5b:a0:61:53:ea:2c:17:7d:ff:87:37:de:5b:2f:55: f6:58:76:ea:26:b8:30:65:b8:04:df:af:c9:51:27:ac:bd:34: f4:f6:31:b0:65:c2:6b:d3:30:32:ad:b0:7a:78:c6:bf:6b:92: 7a:2a:ca:02:aa:b3:8e:ca:fb:e4:df:63:cd:bf:c1:ab:f6:db: 59:87:dd:a3:c3:2d:b8:7f:46:e7:1e:c0:40:eb:c7:95:7b:36: 37:e9:4c:80:bf:e6:50:c6:33:90:9b:cc:9b:8f:90:f7:4a:8d: b5:c4:18:fe:21:2c:32:61:87:12:54:f5:9f:80:6d:b5:15:a9: 8f:0f:52:2d:de:0a:a7:78:5f:51:33:41:99:2d:77:a8:96:2f: 07:a3:fa:c2:90:e0:dd:9a:e2:a5:31:21:5a:04:11:41:dd:ee: 2d:f0:a0:ca:25:e0:fc:3e:a8:ae:52:77:e1:57:05:b3:fd:25: e9:c4:62:d4:8e:2b:92:74:26:b3:92:e9:1a:93:52:25:3a:a3: 60:a3:98:6a:1f:da:be:0b:89:be:01:c2:eb:19:92:1a:41:9c: 73:9e:b2:88:04:0b:a9:7b:8e:47:ef:ca:79:70:71:7c:46:64: 90:76:45:e9:f6:75:58:cd:d1:0a:3a:5e:e8:47:69:49:23:b2: 5e:21:d4:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ncPvgc6ek699pQvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQyODA3MjkxM1oXDTI2MDcyNzA3MjkxM1owLzEtMCsGA1UEAxMk MmQ5Yzc0ZmEtYWNmYy00YTg5LTg2MjktOTliNjA2NDNiOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZzmMQaaOrzGo2uBy/usbXy2GD2y63tamRun HHxEziZlrdCxeNhzc2WO6zP3MvfTtvi0+qslgWEqDNqNxqd6YWwxJZMWQTIzp8vD UKCRzGrXsc51btrRh+gQWL+yWR+uwmudXSjydmh30EhZugRSNoAfOdYUcGKW2xoS +CAPcU43h7K1Qbuy8EUHl3b+vuPdTaAX7CpMXPOeaVyiPVcp19ky51SsQzKPpFfw 4CONhykACyZTUGZbZJ0k1b4UOV33pizNuNHyYD3xQX5RjiHHjyYy5uyMqn+U//ex qwQ5Y6U1K7QuBfyAFbVnPulwh4vtkZ202hlNP/89j2eukgzYsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcpYz3UoDzxbyZEyw3sYLg37Z6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZmQ5NTZmMDMtNjE2Yy0z Y2I2LTljNjctMDVhZGM4NzZiM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmSuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXwFlugYVPqLBd9/4c33lsvVfZYduomuDBluATfr8lRJ6y9NPT2MbBl wmvTMDKtsHp4xr9rknoqygKqs47K++TfY82/wav221mH3aPDLbh/RucewEDrx5V7 NjfpTIC/5lDGM5CbzJuPkPdKjbXEGP4hLDJhhxJU9Z+AbbUVqY8PUi3eCqd4X1Ez QZktd6iWLwej+sKQ4N2a4qUxIVoEEUHd7i3woMol4Pw+qK5Sd+FXBbP9JenEYtSO K5J0JrOS6RqTUiU6o2CjmGof2r4Lib4BwusZkhpBnHOesogEC6l7jkfvynlwcXxG ZJB2Ren2dVjN0Qo6XuhHaUkjsl4h1OM= -----END CERTIFICATE-----Generated at Wed May 13 06:47:30 2026 by rpki-client