$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20905aae-0d55-3cfd-a661-839ae841fdd9.roa File: 20905aae-0d55-3cfd-a661-839ae841fdd9.roa (raw, json) Hash identifier: NrSmOskaUUJqzEeLm0D8/1f3XErV/ETcahUpDYtmtB8= Subject key identifier: 39:02:9B:0A:FE:3D:17:07:B9:15:98:E3:57:C3:E3:35:74:B5:F3:9C Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EFB47630D910CF2A2494BD680 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20905aae-0d55-3cfd-a661-839ae841fdd9.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:63:0d:91:0c:f2:a2:49:4b:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=40fc7ffa-5670-49fa-b625-c75291422719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:ba:e3:4f:72:73:18:bd:28:08:18:28:ae: d0:7f:85:36:12:b1:23:fc:c3:c8:22:1f:b1:de:b4: 4b:f0:68:1e:08:d4:2e:38:84:09:3d:7d:d2:ff:90: 9f:c4:3e:65:30:68:0a:b6:7e:32:cd:13:4f:4d:9f: 39:c2:e6:78:c4:8b:de:8b:41:ee:fd:dc:39:80:b4: 09:84:da:30:2a:f1:93:d3:c0:16:17:52:60:95:43: 8d:2c:34:e2:c0:f8:5e:7e:ee:1f:02:aa:b5:bd:e1: f4:77:6c:39:7b:3d:58:41:e6:65:9b:cd:da:e5:20: 78:b9:85:27:a8:41:1e:87:1e:53:db:46:3f:78:e9: a6:c5:35:ec:0e:c5:a8:b1:15:7d:03:50:ef:ab:67: d6:49:0a:29:d0:6b:ec:5d:cf:f0:dc:1a:e2:bd:62: 6b:aa:7f:91:15:4d:95:c3:b2:66:04:95:61:ef:03: 6a:73:af:24:06:03:50:e0:e4:cd:ad:d8:36:54:d7: 04:24:cb:e0:34:29:c0:f8:15:44:4d:c0:20:4f:26: 21:f2:74:b1:ac:b4:dd:63:c6:eb:bf:a7:28:18:70: 91:6b:dd:e6:66:44:19:b0:cd:ec:6f:40:0c:31:03: cf:c0:c9:99:2b:af:e8:ee:ba:25:43:47:25:00:fa: 5e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:9B:0A:FE:3D:17:07:B9:15:98:E3:57:C3:E3:35:74:B5:F3:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20905aae-0d55-3cfd-a661-839ae841fdd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2b:7e:f7:1b:b0:04:a6:7b:dc:8f:7d:a4:82:46:48:94:4a: b9:3b:35:d0:a9:1f:89:2a:5e:c8:94:5a:12:88:f0:b9:20:61: 8d:00:9c:3e:99:c9:d8:b2:b0:ec:4f:d8:d8:6e:16:45:ea:ca: 4d:82:70:19:f5:be:b8:c1:15:01:2f:d7:03:23:3a:54:20:d1: 43:a4:e8:07:d0:c4:3c:ae:59:be:65:c6:45:45:c1:97:e5:53: d5:da:a3:92:65:3d:f3:ff:72:8d:f8:5e:db:b4:01:f8:73:a9: fa:89:ff:6a:4f:af:b8:df:3e:54:c3:65:2a:7a:82:71:b4:81: 9b:da:fa:31:aa:c4:63:d1:d7:e5:f5:e7:cd:5e:a7:3a:2b:f7: 24:99:f2:29:43:60:a5:e6:1d:b0:5d:de:20:cb:f6:3d:e1:01: 1d:93:57:b6:d1:70:33:c2:e7:09:c9:69:1c:b5:33:14:db:ec: 3b:90:26:a1:ab:47:4a:b3:19:e4:a8:69:85:f0:b2:a6:4a:6e: d3:3d:6e:28:94:0b:eb:8b:0e:a5:08:b6:37:c0:18:58:49:c7: 1e:30:ea:3c:58:8a:58:57:33:0d:c2:24:8b:68:a7:68:41:22: 10:37:2d:ef:72:27:b0:d0:94:05:91:63:77:68:1d:37:2a:ad: 78:ab:50:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R2MNkQzyoklL1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk NDBmYzdmZmEtNTY3MC00OWZhLWI2MjUtYzc1MjkxNDIyNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBm6409ycxi9KAgYKK7Qf4U2ErEj/MPIIh+x 3rRL8GgeCNQuOIQJPX3S/5CfxD5lMGgKtn4yzRNPTZ85wuZ4xIvei0Hu/dw5gLQJ hNowKvGT08AWF1JglUONLDTiwPhefu4fAqq1veH0d2w5ez1YQeZlm83a5SB4uYUn qEEehx5T20Y/eOmmxTXsDsWosRV9A1Dvq2fWSQop0GvsXc/w3BrivWJrqn+RFU2V w7JmBJVh7wNqc68kBgNQ4OTNrdg2VNcEJMvgNCnA+BVETcAgTyYh8nSxrLTdY8br v6coGHCRa93mZkQZsM3sb0AMMQPPwMmZK6/o7rolQ0clAPpehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkCmwr+PRcHuRWY41fD4zV0tfOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjA5MDVhYWUtMGQ1NS0z Y2ZkLWE2NjEtODM5YWU4NDFmZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACorfvcbsASme9yPfaSCRkiUSrk7NdCpH4kqXsiUWhKI8LkgYY0AnD6Z ydiysOxP2NhuFkXqyk2CcBn1vrjBFQEv1wMjOlQg0UOk6AfQxDyuWb5lxkVFwZfl U9Xao5JlPfP/co34Xtu0AfhzqfqJ/2pPr7jfPlTDZSp6gnG0gZva+jGqxGPR1+X1 581epzor9ySZ8ilDYKXmHbBd3iDL9j3hAR2TV7bRcDPC5wnJaRy1MxTb7DuQJqGr R0qzGeSoaYXwsqZKbtM9biiUC+uLDqUItjfAGFhJxx4w6jxYilhXMw3CJItop2hB IhA3Le9yJ7DQlAWRY3doHTcqrXirUPg= -----END CERTIFICATE-----Generated at Mon Sep 21 19:20:03 2026 by rpki-client