$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24865ebc-555d-3891-8204-23c1082b48c6.roa File: 24865ebc-555d-3891-8204-23c1082b48c6.roa (raw, json) Hash identifier: 9wMkbtr8Q4T5bwrCABHOq7BqCbDY1Nw2WNh47++bukc= Subject key identifier: 9C:F7:51:81:42:5E:96:B4:84:5E:1C:12:0F:4E:EB:54:35:08:12:04 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EF9E224042A5CE8A97BCF0E80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24865ebc-555d-3891-8204-23c1082b48c6.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:24:04:2a:5c:e8:a9:7b:cf:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=a6639b37-50bf-4889-ac1f-023db13bd7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:1c:fb:b7:9d:1e:fc:07:42:91:cc:e7:c1: 6b:2f:fa:6b:21:84:4f:c7:42:6d:92:f5:7a:8a:54: 95:ef:68:77:01:10:dc:5b:2b:d0:9f:76:5d:e9:0e: a5:05:f3:45:d6:11:99:74:13:55:92:10:01:b9:59: b5:7c:5d:f2:cf:0a:18:c3:64:a4:28:93:f6:53:06: 63:e8:8e:cb:36:65:1e:3d:94:2d:ad:4a:63:a2:68: 6e:23:ef:df:68:d5:29:3c:a8:de:dd:ad:f7:22:76: d1:81:e6:9d:87:6f:5e:8b:7a:f6:b8:f9:66:f2:da: 8c:c7:f9:b8:d8:f1:bc:34:e4:89:25:88:1b:5d:a7: 80:80:f5:4a:c1:31:64:d9:96:62:99:5f:e8:db:2b: 4a:15:d3:2b:43:29:2f:ec:f0:a4:4b:1b:4f:8c:7a: 24:26:2b:87:f7:1b:42:1e:d0:a4:12:d4:89:f2:67: d4:e7:ed:3c:93:6a:c4:16:17:fc:2c:5a:90:4a:bf: 35:7b:45:c7:5f:fa:18:53:0e:3b:82:17:da:29:20: cf:fd:6a:dc:77:78:1a:a4:ea:a4:ae:ba:62:fe:82: 09:c0:ea:57:ad:0b:05:20:14:72:de:7c:8c:1c:39: 05:8d:5a:77:d4:2a:8e:7d:35:4c:95:64:77:d0:31: 9d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F7:51:81:42:5E:96:B4:84:5E:1C:12:0F:4E:EB:54:35:08:12:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24865ebc-555d-3891-8204-23c1082b48c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:bc:c9:6b:14:71:46:eb:5f:b0:de:64:74:dc:ea:d3:02:31: ac:98:c9:36:53:cf:67:55:e7:77:d9:79:92:ac:99:a0:fb:a6: e1:4e:5d:c0:83:03:9b:16:29:e4:4c:94:40:9e:f0:15:49:8c: 7b:00:a4:84:73:1b:d7:c6:cd:f6:29:33:ab:16:81:ec:a1:fc: 1b:eb:e1:dd:8a:8b:90:51:ff:9a:36:dd:ec:6e:42:b8:b6:7f: c4:0e:fb:49:dc:d4:93:08:0c:47:49:4b:62:6f:20:52:90:e3: 22:61:5f:42:07:2b:f7:a7:90:68:76:34:1c:6f:5e:65:17:71: 8e:a4:0d:45:e3:db:63:4a:d1:20:5b:65:f1:a4:88:8c:7b:9c: 5c:3d:f5:a9:db:5c:cb:82:8f:42:1b:e3:b5:1f:70:3a:ce:2c: 8b:bb:7e:0e:8c:23:2b:8c:de:a2:02:82:e7:c9:12:09:5d:ec: dd:ec:9d:7a:2e:e0:fa:0f:56:ce:d9:ac:3a:83:29:93:b0:49: 41:3f:54:eb:3f:ac:9d:d4:db:28:d5:85:e8:b1:65:a9:3f:0e: 8d:f4:cb:d6:2e:4e:bd:73:ce:3d:e7:67:26:f2:20:6b:63:35: c6:b4:04:45:d8:af:20:84:f3:3f:66:8a:c7:b1:2b:33:2c:a2: f8:f4:c6:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754iQEKlzoqXvPDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk YTY2MzliMzctNTBiZi00ODg5LWFjMWYtMDIzZGIxM2JkN2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfkc+7edHvwHQpHM58FrL/prIYRPx0JtkvV6 ilSV72h3ARDcWyvQn3Zd6Q6lBfNF1hGZdBNVkhABuVm1fF3yzwoYw2SkKJP2UwZj 6I7LNmUePZQtrUpjomhuI+/faNUpPKje3a33InbRgeadh29ei3r2uPlm8tqMx/m4 2PG8NOSJJYgbXaeAgPVKwTFk2ZZimV/o2ytKFdMrQykv7PCkSxtPjHokJiuH9xtC HtCkEtSJ8mfU5+08k2rEFhf8LFqQSr81e0XHX/oYUw47ghfaKSDP/Wrcd3gapOqk rrpi/oIJwOpXrQsFIBRy3nyMHDkFjVp31CqOfTVMlWR30DGdsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz3UYFCXpa0hF4cEg9O61Q1CBIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjQ4NjVlYmMtNTU1ZC0z ODkxLTgyMDQtMjNjMTA4MmI0OGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE28yWsUcUbrX7DeZHTc6tMCMayYyTZTz2dV53fZeZKsmaD7puFOXcCD A5sWKeRMlECe8BVJjHsApIRzG9fGzfYpM6sWgeyh/Bvr4d2Ki5BR/5o23exuQri2 f8QO+0nc1JMIDEdJS2JvIFKQ4yJhX0IHK/enkGh2NBxvXmUXcY6kDUXj22NK0SBb ZfGkiIx7nFw99anbXMuCj0Ib47UfcDrOLIu7fg6MIyuM3qICgufJEgld7N3snXou 4PoPVs7ZrDqDKZOwSUE/VOs/rJ3U2yjVheixZak/Do30y9YuTr1zzj3nZybyIGtj Nca0BEXYryCE8z9misexKzMsovj0xqo= -----END CERTIFICATE-----Generated at Thu Oct 8 16:52:15 2026 by rpki-client