$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa File: 28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa (raw, json) Hash identifier: +Xs47RLgaoyyjEjAm35I1zz43X6uJisccEYeSn+pCNI= Subject key identifier: D3:65:6A:3A:D5:F7:DB:1C:C1:67:DC:62:CA:FD:02:39:E9:81:AE:1D Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D6944F90D0FF684D7E5D71C80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa Signing time: Mon 06 Apr 2026 01:00:24 +0000 ROA not before: Mon 06 Apr 2026 01:00:24 +0000 ROA not after: Sun 05 Jul 2026 01:00:24 +0000 asID: 54994 IP address blocks: 153.43.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:69:44:f9:0d:0f:f6:84:d7:e5:d7:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 6 01:00:24 2026 GMT Not After : Jul 5 01:00:24 2026 GMT Subject: CN=c277931e-f90d-47a8-8757-ed7043694808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:15:fb:09:c2:21:a4:25:7b:a0:c2:f3:06: a0:80:0b:99:b1:96:b8:88:23:e2:5f:53:f1:46:82: b9:1e:3b:9b:93:b8:a7:e5:6c:c6:3f:59:bf:cc:cb: 87:30:89:f5:c5:68:e6:3c:04:99:94:3e:48:d1:95: a9:f1:96:cc:5b:4d:e9:d4:59:c2:de:1b:ce:75:c2: a0:c4:54:12:c2:34:43:cb:4d:a4:a6:cd:2c:ed:d8: c8:9f:4c:39:f8:d8:28:3b:95:e1:44:2c:a4:af:23: 09:c3:78:c6:23:db:32:4f:bb:05:ed:a0:f5:2f:dc: 76:a7:2c:71:6f:f9:4f:2f:6e:28:3e:85:f6:77:93: 98:54:a9:44:cc:4d:9b:74:dd:bb:96:8c:83:d6:d9: 3f:df:9e:f3:04:64:f0:a7:6b:d8:18:1b:fc:a2:b6: 68:57:fa:49:31:f2:79:4b:c1:88:8c:78:63:16:65: ae:fe:d0:4c:1e:4d:6c:78:79:6b:e5:40:7d:69:72: 8c:1f:35:84:3f:7d:2a:c6:39:14:fd:51:2f:45:77: 6b:1e:94:d4:31:56:de:18:28:f2:60:81:ec:ad:57: 44:4b:ee:b0:33:50:9f:ad:50:cc:9b:7b:96:f8:f8: 80:59:4e:e8:05:e8:55:c7:c5:be:36:8e:4e:c1:a3: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:65:6A:3A:D5:F7:DB:1C:C1:67:DC:62:CA:FD:02:39:E9:81:AE:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e2:1f:36:23:3e:00:32:a3:b3:5c:56:44:99:29:db:87:23: 48:55:d4:56:96:80:5b:b8:cc:72:45:7b:a3:be:a0:f0:e2:2f: 70:16:47:dd:29:0d:64:ce:eb:dd:85:04:08:86:a5:81:e5:16: c9:c8:fe:2d:a9:80:05:a3:7d:14:2a:4a:7e:d5:33:27:f7:6b: 53:b1:7a:f7:e0:42:53:fc:75:e9:eb:c3:24:17:a1:3b:04:8e: 19:44:66:15:ed:df:61:fd:8a:67:b6:71:60:9d:08:64:14:f6: 5e:2f:ac:6e:32:62:b5:27:3a:cf:ca:21:c2:bb:aa:26:a8:20: f3:67:5f:ed:64:ca:ef:19:5c:e0:25:9f:1c:e2:eb:49:84:b0: 23:b7:97:04:5f:bb:8a:40:41:80:0f:fe:4c:ee:53:f0:10:2f: 58:43:84:eb:21:2e:9a:4c:63:0d:90:85:c1:63:aa:1d:86:d6: 0a:0c:ac:1e:91:c5:03:4b:f6:c7:cc:54:01:16:66:ba:73:74: e0:12:9d:5b:2d:18:de:ae:df:b1:96:fc:19:2c:24:91:a5:10: 47:60:eb:f6:3f:9a:56:67:d1:1c:0d:3f:1a:37:d9:a2:ef:5c: 75:c2:62:45:cd:6f:3d:28:18:63:fc:ec:e1:71:bd:49:82:b9: 33:2e:60:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1pRPkND/aE1+XXHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQwNjAxMDAyNFoXDTI2MDcwNTAxMDAyNFowLzEtMCsGA1UEAxMk YzI3NzkzMWUtZjkwZC00N2E4LTg3NTctZWQ3MDQzNjk0ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP8V+wnCIaQle6DC8waggAuZsZa4iCPiX1Px RoK5Hjubk7in5WzGP1m/zMuHMIn1xWjmPASZlD5I0ZWp8ZbMW03p1FnC3hvOdcKg xFQSwjRDy02kps0s7djIn0w5+NgoO5XhRCykryMJw3jGI9syT7sF7aD1L9x2pyxx b/lPL24oPoX2d5OYVKlEzE2bdN27loyD1tk/357zBGTwp2vYGBv8orZoV/pJMfJ5 S8GIjHhjFmWu/tBMHk1seHlr5UB9aXKMHzWEP30qxjkU/VEvRXdrHpTUMVbeGCjy YIHsrVdES+6wM1CfrVDMm3uW+PiAWU7oBehVx8W+No5OwaPuBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNlajrV99scwWfcYsr9Ajnpga4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjhhNGRjNGYtMzhkOS0z ZWEwLWI0MjAtODMwNzk5YTVmYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7iHzYjPgAyo7NcVkSZKduHI0hV1FaWgFu4zHJFe6O+oPDiL3AWR90p DWTO692FBAiGpYHlFsnI/i2pgAWjfRQqSn7VMyf3a1OxevfgQlP8denrwyQXoTsE jhlEZhXt32H9ime2cWCdCGQU9l4vrG4yYrUnOs/KIcK7qiaoIPNnX+1kyu8ZXOAl nxzi60mEsCO3lwRfu4pAQYAP/kzuU/AQL1hDhOshLppMYw2QhcFjqh2G1goMrB6R xQNL9sfMVAEWZrpzdOASnVstGN6u37GW/BksJJGlEEdg6/Y/mlZn0RwNPxo32aLv XHXCYkXNbz0oGGP87OFxvUmCuTMuYPY= -----END CERTIFICATE-----Generated at Fri Apr 17 12:50:26 2026 by rpki-client