$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa File: 2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa (raw, json) Hash identifier: zHEj7wxrxTtrnvtbpxPyY962GuAshURzgIfrQ8qSYbY= Subject key identifier: 92:65:71:3F:06:D5:A9:75:85:63:B0:95:64:43:99:A2:DB:71:93:4D Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E016B505D4AD9419172F08180 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 54994 IP address blocks: 153.43.160.0/23 maxlen: 24 153.43.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:50:5d:4a:d9:41:91:72:f0:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=fe636511-5197-414c-a462-8210306dd477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:af:65:b1:a7:30:84:18:fe:5a:0a:d0:53: fe:d9:ec:94:98:e1:2e:c3:da:61:4e:e2:a7:42:c8: e5:1e:05:c9:bf:ff:2e:d7:d2:aa:9b:cf:06:85:70: 41:9c:43:b3:f3:4d:b6:72:8a:f5:b6:81:3e:39:81: 32:99:69:89:d6:fa:e6:80:f8:32:55:62:bb:5f:88: 39:10:1e:86:ff:fd:6c:b0:bf:0a:7d:fb:a0:17:46: 78:d2:92:c9:b9:96:9e:12:df:22:a8:3f:3c:cd:b1: df:f5:7b:c7:06:4a:27:45:95:7e:75:1f:8b:75:76: bb:be:87:15:b1:c6:7e:a5:1e:11:ff:dc:6f:51:15: 96:2a:3a:6a:a3:7e:64:26:9b:a4:bc:de:6b:b6:c3: c3:98:f7:c7:96:b7:39:f4:1b:a6:f1:45:23:25:c4: c3:8b:e4:5f:2f:51:ad:6b:9b:1e:02:50:68:3a:f6: 7e:15:39:0f:11:7c:4a:32:e8:00:68:d2:7c:be:9c: 3e:f0:64:92:43:71:70:f7:8f:d3:00:2b:03:7f:2a: 6e:cb:c4:8c:14:cd:7f:3f:5b:c7:42:39:57:91:82: e8:30:3a:58:c4:29:b3:73:11:44:c6:45:11:e6:c5: f8:d0:d4:8a:e7:22:6b:36:77:ec:c2:e4:7f:61:60: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:65:71:3F:06:D5:A9:75:85:63:B0:95:64:43:99:A2:DB:71:93:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c1:34:1c:70:ff:9a:8b:da:90:f1:d9:a4:74:63:43:cc:5d: 49:a8:0f:fd:02:1f:2e:4d:97:02:0b:16:22:82:a8:be:71:d8: 2a:6e:d6:a7:80:e1:15:92:26:7f:10:fc:da:53:f5:c7:83:44: 24:36:9a:be:37:49:af:77:86:35:02:fb:87:c6:2e:2e:37:83: 91:71:81:08:12:36:bc:ab:75:81:ce:e8:af:da:5f:e6:8e:b8: f2:34:cb:d7:9e:84:66:7c:ce:4a:1d:b6:51:e6:aa:d0:b7:2e: c8:c7:d6:ab:f0:d7:eb:e9:fc:a3:3c:a2:08:97:da:a5:9d:05: 9f:ec:cd:b5:0b:dc:c5:93:53:bc:57:50:5d:ea:32:62:6d:1a: da:e8:90:a6:5f:28:52:8d:eb:30:7f:1d:6e:fc:e2:98:be:e9: 12:3a:12:a7:a4:c2:56:8d:8b:1f:74:e2:5c:59:7c:6e:1a:d3: 36:b0:4a:89:70:68:47:58:d7:2d:db:62:04:a8:32:19:a5:61: 25:52:43:62:0e:a0:61:c5:c4:f8:28:ca:d5:e9:25:f1:d2:80: 78:82:7c:89:d7:23:0e:5e:d6:d5:47:5d:5b:ac:30:64:a3:10: 82:b0:10:65:fe:6b:a1:64:c8:b2:26:21:7f:9a:e3:0d:ff:f4: e4:ba:13:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Ba1BdStlBkXLwgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk ZmU2MzY1MTEtNTE5Ny00MTRjLWE0NjItODIxMDMwNmRkNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUKvZbGnMIQY/loK0FP+2eyUmOEuw9phTuKn QsjlHgXJv/8u19Kqm88GhXBBnEOz8022cor1toE+OYEymWmJ1vrmgPgyVWK7X4g5 EB6G//1ssL8KffugF0Z40pLJuZaeEt8iqD88zbHf9XvHBkonRZV+dR+LdXa7vocV scZ+pR4R/9xvURWWKjpqo35kJpukvN5rtsPDmPfHlrc59Bum8UUjJcTDi+RfL1Gt a5seAlBoOvZ+FTkPEXxKMugAaNJ8vpw+8GSSQ3Fw94/TACsDfypuy8SMFM1/P1vH QjlXkYLoMDpYxCmzcxFExkUR5sX40NSK5yJrNnfswuR/YWCHrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJlcT8G1al1hWOwlWRDmaLbcZNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMmNmNmNhNzUtMzZiOS0z NjI0LWI2ZjItZTIxZWIwYWI2OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmSugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvBNBxw/5qL2pDx2aR0Y0PMXUmoD/0CHy5NlwILFiKCqL5x2Cpu1qeA 4RWSJn8Q/NpT9ceDRCQ2mr43Sa93hjUC+4fGLi43g5FxgQgSNryrdYHO6K/aX+aO uPI0y9eehGZ8zkodtlHmqtC3LsjH1qvw1+vp/KM8ogiX2qWdBZ/szbUL3MWTU7xX UF3qMmJtGtrokKZfKFKN6zB/HW784pi+6RI6EqekwlaNix904lxZfG4a0zawSolw aEdY1y3bYgSoMhmlYSVSQ2IOoGHFxPgoytXpJfHSgHiCfInXIw5e1tVHXVusMGSj EIKwEGX+a6FkyLImIX+a4w3/9OS6E+I= -----END CERTIFICATE-----Generated at Sat Jun 13 13:35:26 2026 by rpki-client