$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1dc4e8dd-549c-366c-b51f-e80cb8acc712.roa File: 1dc4e8dd-549c-366c-b51f-e80cb8acc712.roa (raw, json) Hash identifier: NHAR4YZajNknvzVzdxC7s61evRNHWlNc7u1rvRAiHsg= Subject key identifier: B8:E3:D3:6F:FF:0F:29:D4:35:62:CF:4D:BD:75:49:A4:AD:75:9B:CF Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F2EED2905687729DE9CCAAB80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1dc4e8dd-549c-366c-b51f-e80cb8acc712.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:29:05:68:77:29:de:9c:ca:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=24880da9-504d-4f32-97f5-8086d3c4ffc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:78:2e:45:9b:0f:01:c2:a0:03:27:ba:4d: 8c:8d:27:aa:12:9c:e9:37:4d:0d:c3:00:67:73:8c: 28:a9:4d:da:c6:f4:5c:5e:25:a7:bf:30:58:ba:a3: 33:48:a1:55:54:29:0e:b1:7b:88:d8:05:ce:90:87: 43:8a:20:c4:38:49:c3:0c:c9:d1:60:4d:34:d5:9c: 3d:8d:b4:e2:78:a5:48:f7:a4:57:97:0a:ad:b3:90: 3b:2c:a4:4b:e2:b7:53:13:1a:00:a6:a4:82:8b:ae: d3:d9:fe:30:76:fc:4a:66:70:e9:1c:62:fd:a6:a2: b5:19:73:08:da:1d:ca:14:50:a4:26:13:aa:ab:10: 98:4d:94:27:25:82:3e:0f:81:ff:b9:9e:17:68:20: b5:8e:47:87:1a:c2:57:67:61:a2:b6:74:ec:02:93: c3:98:07:5c:46:96:25:9c:39:d0:09:c5:a6:16:0e: 09:2f:f3:a7:d0:91:69:d3:32:0d:fe:50:0d:dd:36: 6d:c2:f0:1c:4e:9e:88:65:08:48:53:de:8f:8c:7b: 36:51:c7:93:17:85:d4:fd:e6:55:ec:c0:63:cb:94: 14:cb:1b:cd:75:db:55:c8:d4:06:d0:97:ff:27:a7: 6e:cd:1d:1f:98:21:4a:ec:08:a5:c8:b7:9b:05:19: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E3:D3:6F:FF:0F:29:D4:35:62:CF:4D:BD:75:49:A4:AD:75:9B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1dc4e8dd-549c-366c-b51f-e80cb8acc712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b9:e5:5f:34:29:f4:a5:0d:79:e9:5c:fe:72:65:e2:46:eb: f5:d6:7e:a5:f9:fd:ce:c7:09:48:3b:c3:5f:37:19:a2:17:9e: 44:eb:95:3e:35:7b:9c:a0:21:6b:4c:9b:38:3f:34:7b:07:92: 36:19:23:2b:ff:1e:08:a5:e4:85:88:41:47:91:28:6d:00:31: d9:7e:27:be:0b:36:32:42:2d:9a:90:dd:18:6a:2c:b4:03:81: eb:bd:d0:ab:21:93:bf:65:fe:6f:43:1f:8d:05:8b:91:35:af: 13:35:72:32:a8:82:20:48:9e:bd:96:85:9f:99:c4:c0:ec:8b: 6a:63:6c:05:a1:eb:c9:45:11:c4:e8:45:15:3f:c4:c9:0b:b8: 5f:a8:94:61:b5:79:92:98:be:bf:3e:dc:d4:d9:63:cd:60:50: f1:6b:3c:e2:e4:68:03:b3:6d:d4:0e:08:24:09:35:b4:2f:50: c8:d8:5e:dc:67:51:9f:68:e6:3b:84:9c:69:93:51:04:90:63: 35:3e:fd:01:6b:c4:4e:8e:d8:13:e0:fc:a3:7f:33:14:26:eb: 85:c4:9d:b3:52:df:ad:94:fe:29:a5:16:b7:91:b7:c7:b6:14: 5b:a4:92:6b:0a:b3:d1:be:3f:f4:eb:6c:3d:4c:1e:dd:9e:67: b8:24:fd:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7SkFaHcp3pzKq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MjQ4ODBkYTktNTA0ZC00ZjMyLTk3ZjUtODA4NmQzYzRmZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul94LkWbDwHCoAMnuk2MjSeqEpzpN00NwwBn c4woqU3axvRcXiWnvzBYuqMzSKFVVCkOsXuI2AXOkIdDiiDEOEnDDMnRYE001Zw9 jbTieKVI96RXlwqts5A7LKRL4rdTExoApqSCi67T2f4wdvxKZnDpHGL9pqK1GXMI 2h3KFFCkJhOqqxCYTZQnJYI+D4H/uZ4XaCC1jkeHGsJXZ2GitnTsApPDmAdcRpYl nDnQCcWmFg4JL/On0JFp0zIN/lAN3TZtwvAcTp6IZQhIU96PjHs2UceTF4XU/eZV 7MBjy5QUyxvNddtVyNQG0Jf/J6duzR0fmCFK7AilyLebBRn5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjj02//DynUNWLPTb11SaStdZvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMWRjNGU4ZGQtNTQ5Yy0z NjZjLWI1MWYtZTgwY2I4YWNjNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK55V80KfSlDXnpXP5yZeJG6/XWfqX5/c7HCUg7w183GaIXnkTrlT41 e5ygIWtMmzg/NHsHkjYZIyv/Hgil5IWIQUeRKG0AMdl+J74LNjJCLZqQ3RhqLLQD geu90Kshk79l/m9DH40Fi5E1rxM1cjKogiBInr2WhZ+ZxMDsi2pjbAWh68lFEcTo RRU/xMkLuF+olGG1eZKYvr8+3NTZY81gUPFrPOLkaAOzbdQOCCQJNbQvUMjYXtxn UZ9o5juEnGmTUQSQYzU+/QFrxE6O2BPg/KN/MxQm64XEnbNS362U/imlFreRt8e2 FFukkmsKs9G+P/TrbD1MHt2eZ7gk/bE= -----END CERTIFICATE-----Generated at Mon Sep 21 23:48:17 2026 by rpki-client