$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/348b2df5-2451-3e9d-bcef-31497c05ba96.roa File: 348b2df5-2451-3e9d-bcef-31497c05ba96.roa (raw, json) Hash identifier: U1yl31dlGgVDvN+57kQ9r7+1L69u+TgogaWb6+r/Z0M= Subject key identifier: F7:7D:69:58:46:50:14:C4:C7:24:88:C8:A5:FB:D1:86:E5:55:39:47 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4987C5F60E7F6DF44A95F288 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/348b2df5-2451-3e9d-bcef-31497c05ba96.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:c5:f6:0e:7f:6d:f4:4a:95:f2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=762d3524-6128-413c-b237-cab8d8adfedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:cd:95:e8:89:be:59:9f:18:ee:d8:e9:86: a8:ac:4e:da:98:3c:3d:ef:d8:11:70:80:11:94:a8: 4a:89:78:0e:cb:3f:1d:52:7e:8a:bf:13:c3:d1:7d: 3c:c8:37:a7:9f:e4:d0:dd:e6:a3:77:01:dc:51:07: 1b:70:43:f6:26:f6:b6:34:d7:98:0a:7c:6e:7d:45: 2e:91:84:79:22:07:1f:81:07:64:2b:07:4d:d6:38: 6a:cf:00:84:93:81:b4:e6:9e:ea:59:5c:a9:94:2a: 64:56:17:90:61:7f:ed:5f:5b:95:f8:c7:eb:83:cb: 99:4a:77:02:51:41:d9:77:25:b8:08:bf:72:d8:ba: 99:5a:41:28:db:20:f1:5d:c2:07:c1:e0:ab:3f:4b: 0a:87:2e:93:3e:53:13:ee:88:bb:87:ee:03:72:b3: f6:c7:7a:95:00:67:6a:96:96:53:10:07:20:75:55: ab:b9:89:36:ee:76:0c:3a:7e:6f:41:22:77:c2:8a: 0e:93:8b:58:8a:f3:c3:15:25:85:2d:5f:83:42:65: 9f:c3:bd:db:e7:51:42:eb:f5:6f:65:cd:d1:4a:8a: ab:04:ad:8f:3a:d8:0e:bf:87:3f:2c:f3:9d:e7:86: bf:ec:84:06:ca:30:0a:12:ca:4b:5c:08:67:67:74: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7D:69:58:46:50:14:C4:C7:24:88:C8:A5:FB:D1:86:E5:55:39:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/348b2df5-2451-3e9d-bcef-31497c05ba96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a6:59:5c:a9:59:f8:17:92:21:44:88:12:cc:a2:22:68:e0: 92:04:98:1d:66:bc:b3:2a:2e:0e:cd:ed:e9:e3:29:99:20:9f: 30:ae:9c:8d:5c:24:d0:54:98:29:b2:50:86:3e:2e:21:ea:cd: 04:be:e4:c2:2c:42:3e:54:62:34:7e:c0:22:ee:b7:0a:63:32: 14:a5:40:b8:bd:15:af:31:4f:2d:52:bf:60:0a:96:1b:67:35: 64:db:01:3d:1a:0b:67:ab:76:22:c9:2b:b9:9d:f7:51:f6:75: 72:a5:db:34:54:dc:6e:26:14:a1:47:f9:1c:7c:5d:3c:b7:71: f0:a6:3d:38:6d:b1:20:1a:23:7e:a0:e1:f4:ff:bc:00:2b:50: 02:db:a0:ef:94:2c:67:ef:dc:d0:45:b5:21:39:85:44:e8:66: 05:23:09:a1:f6:4d:26:cc:06:29:c6:53:4a:11:d8:69:92:53: 29:b7:40:00:2e:60:22:5e:88:28:28:04:85:04:d2:3e:8d:cf: 7a:04:c9:1a:07:ee:09:fb:2f:38:74:bc:71:0c:df:41:31:f3: 31:6a:9f:6d:b2:74:b5:ef:66:12:5a:2e:12:13:55:2b:ed:f9: 6d:f7:3a:24:6e:75:ed:53:02:19:de:e6:77:1e:fa:d1:a4:58: c3:10:5f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh8X2Dn9t9EqV8ogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzYyZDM1MjQtNjEyOC00MTNjLWIyMzctY2FiOGQ4YWRmZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLLNleiJvlmfGO7Y6YaorE7amDw979gRcIAR lKhKiXgOyz8dUn6KvxPD0X08yDenn+TQ3eajdwHcUQcbcEP2Jva2NNeYCnxufUUu kYR5IgcfgQdkKwdN1jhqzwCEk4G05p7qWVyplCpkVheQYX/tX1uV+Mfrg8uZSncC UUHZdyW4CL9y2LqZWkEo2yDxXcIHweCrP0sKhy6TPlMT7oi7h+4DcrP2x3qVAGdq lpZTEAcgdVWruYk27nYMOn5vQSJ3wooOk4tYivPDFSWFLV+DQmWfw73b51FC6/Vv Zc3RSoqrBK2POtgOv4c/LPOd54a/7IQGyjAKEspLXAhnZ3SGmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPd9aVhGUBTExySIyKX70YblVTlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzQ4YjJkZjUtMjQ1MS0z ZTlkLWJjZWYtMzE0OTdjMDViYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmmWVypWfgXkiFEiBLMoiJo4JIEmB1mvLMqLg7N7enjKZkgnzCunI1c JNBUmCmyUIY+LiHqzQS+5MIsQj5UYjR+wCLutwpjMhSlQLi9Fa8xTy1Sv2AKlhtn NWTbAT0aC2erdiLJK7md91H2dXKl2zRU3G4mFKFH+Rx8XTy3cfCmPThtsSAaI36g 4fT/vAArUALboO+ULGfv3NBFtSE5hUToZgUjCaH2TSbMBinGU0oR2GmSUym3QAAu YCJeiCgoBIUE0j6Nz3oEyRoH7gn7Lzh0vHEM30Ex8zFqn22ydLXvZhJaLhITVSvt +W33OiRude1TAhne5nce+tGkWMMQX3Q= -----END CERTIFICATE-----Generated at Sat Sep 26 12:12:01 2026 by rpki-client