$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0fc04279-e97a-3623-83c8-28cf30bf4900.roa File: 0fc04279-e97a-3623-83c8-28cf30bf4900.roa (raw, json) Hash identifier: 5B6SJj3/4A6gOsqvVMbWFSL1msD2cH46XurpLgM9oGA= Subject key identifier: 2B:E3:F7:40:9F:F9:50:D2:21:74:19:C2:AC:BE:D0:CF:5D:7E:6A:C4 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F15CD07001C960F4B641E4B20 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0fc04279-e97a-3623-83c8-28cf30bf4900.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:07:00:1c:96:0f:4b:64:1e:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=1a0e591c-8d72-4ae6-8c3c-9c939e0b4339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:13:91:2f:72:e8:4c:b5:60:9f:77:3d:fe: f7:63:b6:ae:54:b9:15:6d:1a:71:73:6a:71:9d:3a: 1a:f7:9a:f2:9e:73:55:66:2c:4f:56:c5:d9:ed:6f: 3a:94:02:bc:5d:6b:bf:d1:87:c2:f4:8e:0b:68:8e: cc:88:1f:7d:0e:8b:d7:db:f1:f0:13:71:97:40:8b: b6:b8:b0:5c:0d:ab:51:6a:43:e3:29:c0:37:b8:05: 63:a8:3b:87:4c:4d:a3:de:2d:b9:22:5f:71:61:48: 1e:f7:e8:f8:3d:5a:cd:90:dd:fb:17:3c:99:84:68: 6e:d3:b3:ae:4d:ac:33:52:9f:0c:97:f3:02:25:ca: 13:5c:db:8a:a6:29:94:fb:38:05:62:08:b6:7c:65: a3:89:dd:c2:b4:16:85:f5:66:62:38:23:95:85:b4: b6:6a:36:b7:6d:b7:81:b5:d5:da:90:6c:69:c2:53: 03:f6:0d:52:c2:88:a6:e9:b3:91:f5:4f:1a:47:6a: 09:ad:64:bb:50:02:ea:51:e8:8c:06:8a:1c:fe:10: ed:c5:67:c1:50:39:67:13:17:93:6c:77:4d:11:53: a5:72:09:40:64:05:42:de:18:be:b8:f6:ba:14:96: 00:92:a9:93:58:65:97:9b:70:b7:40:89:b1:b0:2c: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:F7:40:9F:F9:50:D2:21:74:19:C2:AC:BE:D0:CF:5D:7E:6A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0fc04279-e97a-3623-83c8-28cf30bf4900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9e:cb:8c:ed:fc:3b:02:86:54:5f:ed:0e:74:11:23:15:2c: 9d:45:a3:28:55:e4:ff:28:bd:3a:a3:8b:dc:83:5e:7b:46:ec: 7b:b0:6c:23:c7:ae:dc:91:65:3f:8e:fc:03:44:c5:3b:88:8c: ad:e3:88:da:73:69:3b:5e:2f:de:24:c8:bc:9f:0e:5d:46:8f: 92:df:a2:c4:88:57:e5:91:f9:47:51:9c:bc:c0:02:43:c2:16: fc:17:3d:c4:aa:1b:55:e7:72:3c:e3:d1:c3:26:fa:22:74:c7: 24:4d:36:a8:f3:7d:4c:e4:84:83:2b:7a:8b:56:15:2f:91:d2: 6e:16:71:d9:79:51:bf:7e:d2:c1:fe:fa:1a:64:7b:aa:da:2e: 31:88:70:72:17:02:c9:18:38:92:9e:76:1f:aa:14:57:3d:4e: 29:06:8a:e0:9c:0b:b0:f4:bf:27:e7:c6:5b:a7:ea:1e:5d:ce: 4b:9d:ec:cf:39:a1:a7:b9:ab:48:0b:ba:04:77:4e:c0:fc:8d: 29:14:ba:41:8d:8c:d7:4f:70:ce:d7:34:31:d4:ae:2e:e0:8f: 0b:2a:e6:d2:3e:07:06:ac:a9:b5:36:98:71:94:c4:57:c4:d3: 8d:73:88:1a:fd:f7:e1:bd:ac:d0:12:d8:40:5e:62:82:d6:b4: 59:a8:5d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQcAHJYPS2QeSyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MWEwZTU5MWMtOGQ3Mi00YWU2LThjM2MtOWM5MzllMGI0MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSwTkS9y6Ey1YJ93Pf73Y7auVLkVbRpxc2px nToa95rynnNVZixPVsXZ7W86lAK8XWu/0YfC9I4LaI7MiB99DovX2/HwE3GXQIu2 uLBcDatRakPjKcA3uAVjqDuHTE2j3i25Il9xYUge9+j4PVrNkN37FzyZhGhu07Ou TawzUp8Ml/MCJcoTXNuKpimU+zgFYgi2fGWjid3CtBaF9WZiOCOVhbS2aja3bbeB tdXakGxpwlMD9g1Swoim6bOR9U8aR2oJrWS7UALqUeiMBooc/hDtxWfBUDlnExeT bHdNEVOlcglAZAVC3hi+uPa6FJYAkqmTWGWXm3C3QImxsCyIFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvj90Cf+VDSIXQZwqy+0M9dfmrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMGZjMDQyNzktZTk3YS0z NjIzLTgzYzgtMjhjZjMwYmY0OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmey4zt/DsChlRf7Q50ESMVLJ1FoyhV5P8ovTqji9yDXntG7HuwbCPH rtyRZT+O/ANExTuIjK3jiNpzaTteL94kyLyfDl1Gj5LfosSIV+WR+UdRnLzAAkPC FvwXPcSqG1Xncjzj0cMm+iJ0xyRNNqjzfUzkhIMreotWFS+R0m4Wcdl5Ub9+0sH+ +hpke6raLjGIcHIXAskYOJKedh+qFFc9TikGiuCcC7D0vyfnxlun6h5dzkud7M85 oae5q0gLugR3TsD8jSkUukGNjNdPcM7XNDHUri7gjwsq5tI+BwasqbU2mHGUxFfE 041ziBr99+G9rNAS2EBeYoLWtFmoXR4= -----END CERTIFICATE-----Generated at Tue Sep 22 00:00:51 2026 by rpki-client