$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/37529c6a-7058-30cf-8edf-0d0388bb787a.roa File: 37529c6a-7058-30cf-8edf-0d0388bb787a.roa (raw, json) Hash identifier: 3+3xjKIUumOuR+xFiMuCLZe3SYwgO7/XkH17BkTUHpQ= Subject key identifier: 4E:16:CF:0D:3A:7F:03:86:A3:08:F2:CE:B1:6D:5E:67:4F:6E:8B:35 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D71A525888E6F6236EAA47840 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/37529c6a-7058-30cf-8edf-0d0388bb787a.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 54994 IP address blocks: 153.43.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:25:88:8e:6f:62:36:ea:a4:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=4b33d286-30dc-4353-bfc0-b670a423ffcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:ff:2c:bb:f4:c1:e1:31:15:2e:51:d1:52: 31:34:ba:8c:6e:5e:2a:e4:21:d9:ef:04:19:9e:03: 33:e5:0c:39:5a:33:0a:e8:89:8e:3e:77:92:d8:3c: be:4b:ed:00:b9:3a:2c:81:90:af:06:ed:7d:6e:c3: b0:ee:02:bd:89:8a:05:81:27:e1:9c:82:49:89:87: 05:95:a9:cb:5b:bf:7b:33:43:42:c4:a1:0f:58:05: fd:e3:0a:96:43:95:f7:68:a7:9c:da:4e:1a:93:f0: 7f:bf:f6:94:36:a8:b0:c2:62:a8:ec:08:94:6e:78: f3:e1:35:49:1f:0e:23:4d:98:fa:97:81:c0:21:40: 69:5a:b3:a0:d5:e4:cd:f1:96:47:f5:f6:71:7b:1f: 27:d5:11:12:02:b9:02:a1:a4:f1:89:9c:14:b1:38: 05:b5:1d:31:1c:3e:43:eb:74:33:a8:53:50:fe:2a: 9c:5b:14:fb:0f:ef:c6:71:26:b5:06:6a:b8:85:ce: 8d:48:d1:a2:5c:67:7e:60:f6:d7:c3:d2:55:11:da: d1:44:2c:d4:f2:24:32:ff:a4:a3:c7:ba:a9:53:5e: 0c:6d:30:1d:5a:3f:bc:f5:b3:30:6b:15:9a:9a:96: 29:ca:d1:db:c2:e9:0d:ea:ee:90:7a:f9:8e:2e:be: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:16:CF:0D:3A:7F:03:86:A3:08:F2:CE:B1:6D:5E:67:4F:6E:8B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/37529c6a-7058-30cf-8edf-0d0388bb787a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f2:56:7b:8d:d1:83:6d:a4:d6:7e:47:74:2d:02:58:d7:b2: fd:59:16:ad:87:5b:08:87:42:29:83:0a:92:d3:5a:f8:7c:ff: bd:8e:bf:79:11:e7:36:59:85:45:72:32:ef:e3:5e:df:fb:37: 1f:45:44:33:30:47:0d:f1:e8:73:eb:a5:e4:f8:25:f5:93:b9: f4:7d:08:85:6b:10:55:da:cb:e1:0b:0d:06:84:a0:82:90:46: 18:b7:77:77:b0:13:e0:c3:7d:9c:c1:d5:34:d8:b7:a0:8a:11: 8f:d5:68:d2:71:9e:e0:85:48:92:0f:5a:52:8e:bf:a0:03:16: e3:58:d5:5d:31:25:85:80:5e:ec:a5:99:98:cc:d6:77:69:43: 67:1a:7b:ff:8a:31:33:15:84:17:15:04:b8:a7:94:4a:ee:ba: 66:80:e7:e5:ff:91:b8:bd:5c:21:03:90:19:ef:0d:0a:88:a2: 84:0f:be:9d:51:23:3b:4b:49:31:af:b1:b6:15:82:27:ba:d6: 99:d3:82:73:d6:d7:2f:82:83:59:48:22:88:a4:2a:25:d8:e3: 78:60:08:55:e4:20:d6:5b:13:45:bf:a1:5c:cf:ac:16:3e:e2: 6a:99:33:9d:04:0c:c7:ae:62:f2:d4:27:ac:f8:62:6f:81:d5: a5:d4:0b:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpSWIjm9iNuqkeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NGIzM2QyODYtMzBkYy00MzUzLWJmYzAtYjY3MGE0MjNmZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypf/LLv0weExFS5R0VIxNLqMbl4q5CHZ7wQZ ngMz5Qw5WjMK6ImOPneS2Dy+S+0AuTosgZCvBu19bsOw7gK9iYoFgSfhnIJJiYcF lanLW797M0NCxKEPWAX94wqWQ5X3aKec2k4ak/B/v/aUNqiwwmKo7AiUbnjz4TVJ Hw4jTZj6l4HAIUBpWrOg1eTN8ZZH9fZxex8n1RESArkCoaTxiZwUsTgFtR0xHD5D 63QzqFNQ/iqcWxT7D+/GcSa1Bmq4hc6NSNGiXGd+YPbXw9JVEdrRRCzU8iQy/6Sj x7qpU14MbTAdWj+89bMwaxWampYpytHbwukN6u6QevmOLr46YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4Wzw06fwOGowjyzrFtXmdPbos1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzc1MjljNmEtNzA1OC0z MGNmLThlZGYtMGQwMzg4YmI3ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzyVnuN0YNtpNZ+R3QtAljXsv1ZFq2HWwiHQimDCpLTWvh8/72Ov3kR 5zZZhUVyMu/jXt/7Nx9FRDMwRw3x6HPrpeT4JfWTufR9CIVrEFXay+ELDQaEoIKQ Rhi3d3ewE+DDfZzB1TTYt6CKEY/VaNJxnuCFSJIPWlKOv6ADFuNY1V0xJYWAXuyl mZjM1ndpQ2cae/+KMTMVhBcVBLinlEruumaA5+X/kbi9XCEDkBnvDQqIooQPvp1R IztLSTGvsbYVgie61pnTgnPW1y+Cg1lIIoikKiXY43hgCFXkINZbE0W/oVzPrBY+ 4mqZM50EDMeuYvLUJ6z4Ym+B1aXUC44= -----END CERTIFICATE-----Generated at Fri Apr 17 14:48:21 2026 by rpki-client