$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa File: 2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa (raw, json) Hash identifier: xB31oeFM53KcIdW40l4cStHzIlkGaRYJp+29HsYEcEE= Subject key identifier: ED:36:D3:CA:F8:A3:3B:B3:B0:97:20:AE:71:A7:25:22:A7:7C:02:41 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E0700A853D83109E7098CB700 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 54994 IP address blocks: 153.43.120.0/24 maxlen: 24 153.43.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:a8:53:d8:31:09:e7:09:8c:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=e256baba-f750-4fc9-a04e-6ac5a825ca7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0e:06:96:4a:12:ef:e6:34:a4:4b:e4:37:c2: a5:00:f9:de:f6:ea:76:db:a6:00:7c:77:9d:a3:21: 2f:8b:16:49:10:30:ed:4f:e1:e1:88:83:af:40:6b: a5:6b:99:37:64:9d:e5:97:fb:00:bc:c2:bb:7f:4b: f9:76:e2:fa:fc:2d:e0:7a:c7:01:c9:83:55:43:3e: 72:97:62:b4:1b:5b:0e:ab:a7:fb:2b:79:e1:66:54: 24:85:64:70:a0:d6:48:f8:4c:aa:5c:58:40:2d:9a: 62:9b:03:44:87:20:7c:e1:5e:79:13:3c:16:55:6d: 3b:6b:45:4d:44:f5:0f:5d:ef:40:c9:02:d5:17:d5: 08:0a:80:b5:3a:59:4f:c7:9b:67:ec:97:86:51:a0: 62:e4:f0:5b:36:02:93:ce:e7:ef:c5:1e:a4:6e:fa: ce:53:db:2b:4e:26:8d:cd:58:0c:cd:b4:a6:bf:c2: f8:57:e8:05:40:8f:7a:40:94:3e:3a:7b:dd:a5:68: a1:50:4f:26:aa:c4:42:ef:12:c0:7f:e8:06:bd:af: a3:74:f3:f5:62:4e:0c:68:b8:5b:05:08:60:23:dc: 17:9f:a9:6d:b1:ba:86:d8:bc:51:4b:09:2d:94:88: be:02:f3:ad:57:f0:16:76:02:47:04:cd:b3:a9:90: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:D3:CA:F8:A3:3B:B3:B0:97:20:AE:71:A7:25:22:A7:7C:02:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:21:dc:d7:4d:02:98:b1:b6:1a:68:3c:71:2d:9d:6f:ea:91: a7:96:f2:dc:68:17:ad:e2:2d:dd:f2:59:06:67:11:40:07:93: ee:ee:8f:31:87:1a:af:9c:76:ea:b7:f9:a9:c4:4d:bb:ad:98: 3e:fd:0a:f4:75:ce:51:9b:6a:47:6a:c2:fb:d1:0d:da:64:24: b0:99:34:fd:3a:08:67:b1:41:e1:ee:45:57:53:74:77:4d:e6: a3:de:96:7d:45:09:5d:a2:f8:b1:2f:ea:da:a3:b0:80:ef:59: ee:9d:40:c6:8b:ba:dd:99:04:cb:19:72:60:b9:c4:b8:ba:64: 84:e6:94:c8:fc:b9:d0:b4:b1:60:45:7b:5b:d3:0e:16:ed:8c: cb:be:98:75:50:5a:8b:04:1a:e6:0d:de:d9:a3:57:47:66:e7: c7:a2:9d:ae:8b:8f:7b:8d:e0:20:4f:f9:03:1a:30:6d:d3:d3: 46:73:58:ed:e7:da:4b:c2:bf:55:51:60:da:9c:51:db:a3:64: e8:40:80:45:bc:5b:0a:ab:1c:44:e0:2a:ab:4c:54:f3:51:28: 3f:b6:03:71:13:89:b8:be:70:5c:9b:63:f9:28:32:3a:3d:9b: dd:55:09:3f:14:e8:b2:a2:50:f8:d0:16:53:c9:9b:1c:08:a9: cf:bd:3b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAKhT2DEJ5wmMtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk ZTI1NmJhYmEtZjc1MC00ZmM5LWEwNGUtNmFjNWE4MjVjYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q4GlkoS7+Y0pEvkN8KlAPne9up226YAfHed oyEvixZJEDDtT+HhiIOvQGula5k3ZJ3ll/sAvMK7f0v5duL6/C3gescByYNVQz5y l2K0G1sOq6f7K3nhZlQkhWRwoNZI+EyqXFhALZpimwNEhyB84V55EzwWVW07a0VN RPUPXe9AyQLVF9UICoC1OllPx5tn7JeGUaBi5PBbNgKTzufvxR6kbvrOU9srTiaN zVgMzbSmv8L4V+gFQI96QJQ+OnvdpWihUE8mqsRC7xLAf+gGva+jdPP1Yk4MaLhb BQhgI9wXn6ltsbqG2LxRSwktlIi+AvOtV/AWdgJHBM2zqZDK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0208r4ozuzsJcgrnGnJSKnfAJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMmQ1MjI4NGQtYTZkOC0z N2JkLWEyZjUtMWI3MDZlM2JiOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMh3NdNApixthpoPHEtnW/qkaeW8txoF63iLd3yWQZnEUAHk+7ujzGH Gq+cduq3+anETbutmD79CvR1zlGbakdqwvvRDdpkJLCZNP06CGexQeHuRVdTdHdN 5qPeln1FCV2i+LEv6tqjsIDvWe6dQMaLut2ZBMsZcmC5xLi6ZITmlMj8udC0sWBF e1vTDhbtjMu+mHVQWosEGuYN3tmjV0dm58eina6Lj3uN4CBP+QMaMG3T00ZzWO3n 2kvCv1VRYNqcUdujZOhAgEW8WwqrHETgKqtMVPNRKD+2A3ETibi+cFybY/koMjo9 m91VCT8U6LKiUPjQFlPJmxwIqc+9O6o= -----END CERTIFICATE-----Generated at Sat Jun 13 13:58:33 2026 by rpki-client