$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2b2d18fa-380b-3237-89ff-9697e4d22db2.roa File: 2b2d18fa-380b-3237-89ff-9697e4d22db2.roa (raw, json) Hash identifier: yse8qzcslLE36NYOo0mmu/tAEZVBLwS4sOeTvcS9cLk= Subject key identifier: 7D:32:CD:E2:E5:2C:E9:BD:09:18:1E:62:AF:C3:55:D7:D3:0A:CF:73 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F13023263D92BBEE0681E6C00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2b2d18fa-380b-3237-89ff-9697e4d22db2.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:32:63:d9:2b:be:e0:68:1e:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=cda240c7-6dd3-4eb7-95af-55571da1131f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:62:00:38:bf:85:2c:e5:7d:2b:bc:68:94: b4:a1:22:f9:e1:a8:f5:db:ca:85:f3:22:1e:4d:84: 5c:1b:ec:28:4e:89:b4:16:9a:4f:21:35:43:ee:ad: c4:58:cc:85:58:8f:00:a9:93:b4:b8:a8:05:29:18: d4:f7:18:e1:56:22:ee:01:36:f6:73:43:75:ff:30: e2:78:ff:0f:c4:b3:64:83:a7:17:ef:22:6d:bf:9c: bf:f6:c9:f8:21:34:38:f8:92:45:c5:20:96:b0:5d: 2b:f4:99:05:0d:9a:04:f1:1e:0a:c4:93:97:c9:65: 91:74:07:d5:20:cc:38:e6:60:f9:81:4a:d7:90:19: 27:69:d9:ca:84:76:6e:29:04:fb:79:56:0a:c2:f4: bc:30:af:04:67:bd:a4:a1:6e:7f:ab:54:eb:e6:6c: e8:dd:f3:72:8f:43:e6:79:09:1d:6d:e7:75:48:4f: 68:60:3a:88:ba:d4:86:fd:76:d7:10:f8:71:17:2b: 04:4f:3d:94:eb:7a:d2:12:e3:5b:4d:c0:f8:cc:18: 61:70:f4:1f:6d:f2:eb:b5:3d:cd:46:96:a9:e1:c7: 32:ef:a5:eb:36:18:80:4f:4d:e0:e8:c1:ce:2e:f5: 27:37:9a:08:51:ae:0d:93:09:94:37:c4:b1:80:92: c5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:32:CD:E2:E5:2C:E9:BD:09:18:1E:62:AF:C3:55:D7:D3:0A:CF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2b2d18fa-380b-3237-89ff-9697e4d22db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ad:1a:e0:a1:c0:6e:28:4d:5d:10:89:b8:25:db:b4:8e:47: 09:ea:5b:d8:09:3d:ab:e4:ed:72:db:24:43:f1:ae:a0:ab:00: df:9d:60:6c:55:f9:42:72:e6:4c:69:b4:48:59:9b:71:9f:0a: 0f:91:0c:ee:ae:c0:5d:41:a1:05:b6:de:b3:f8:9b:d8:96:08: 72:bd:cc:8e:21:d5:9f:eb:28:8a:da:4a:d8:b8:fe:d9:fe:ab: 09:4f:5d:9d:02:06:94:9c:3a:5b:06:a0:95:d6:18:1d:79:78: 7a:f4:07:85:9b:3d:35:16:9f:40:4a:1f:ea:40:4e:ca:0e:66: 21:7d:4c:68:7e:94:01:54:ea:1a:07:99:f0:2c:ce:48:21:41: 3e:c5:38:48:90:b1:bc:83:02:5c:85:01:f5:48:b4:e7:97:af: 0c:cb:3e:cb:bf:f2:27:d7:aa:60:fd:b4:dc:b9:b9:03:5d:04: 15:8c:a0:bd:78:23:05:45:d9:24:b3:95:9b:b1:ec:0c:40:87: 4d:b7:89:3f:33:f4:4a:f0:f4:43:ec:c4:da:d7:29:19:b4:28: 5f:c8:69:39:0e:d1:63:24:2c:52:a3:eb:4f:9e:bb:61:c1:a2: cd:e1:8a:9f:07:75:d7:7c:63:35:28:c5:00:e9:9e:85:24:3c: 66:23:e1:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjJj2Su+4GgebAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2RhMjQwYzctNmRkMy00ZWI3LTk1YWYtNTU1NzFkYTExMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXBiADi/hSzlfSu8aJS0oSL54aj128qF8yIe TYRcG+woTom0FppPITVD7q3EWMyFWI8AqZO0uKgFKRjU9xjhViLuATb2c0N1/zDi eP8PxLNkg6cX7yJtv5y/9sn4ITQ4+JJFxSCWsF0r9JkFDZoE8R4KxJOXyWWRdAfV IMw45mD5gUrXkBknadnKhHZuKQT7eVYKwvS8MK8EZ72koW5/q1Tr5mzo3fNyj0Pm eQkdbed1SE9oYDqIutSG/XbXEPhxFysETz2U63rSEuNbTcD4zBhhcPQfbfLrtT3N Rpap4ccy76XrNhiAT03g6MHOLvUnN5oIUa4NkwmUN8SxgJLFeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0yzeLlLOm9CRgeYq/DVdfTCs9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMmIyZDE4ZmEtMzgwYi0z MjM3LTg5ZmYtOTY5N2U0ZDIyZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSv+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqtGuChwG4oTV0Qibgl27SORwnqW9gJPavk7XLbJEPxrqCrAN+dYGxV +UJy5kxptEhZm3GfCg+RDO6uwF1BoQW23rP4m9iWCHK9zI4h1Z/rKIraSti4/tn+ qwlPXZ0CBpScOlsGoJXWGB15eHr0B4WbPTUWn0BKH+pATsoOZiF9TGh+lAFU6hoH mfAszkghQT7FOEiQsbyDAlyFAfVItOeXrwzLPsu/8ifXqmD9tNy5uQNdBBWMoL14 IwVF2SSzlZux7AxAh023iT8z9Erw9EPsxNrXKRm0KF/IaTkO0WMkLFKj60+eu2HB os3hip8Hddd8YzUoxQDpnoUkPGYj4eA= -----END CERTIFICATE-----Generated at Tue Sep 22 19:05:21 2026 by rpki-client