$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa File: 39953f1b-77cc-3f24-ac5e-a313835b8627.roa (raw, json) Hash identifier: IKBpJIgBDfwIx0Ku91Ouy3J304SHODELo5FQOk3AFY8= Subject key identifier: 5A:E1:67:B1:19:79:83:42:38:AB:27:A2:74:54:A4:E6:F3:38:DD:54 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584CEFF2272AFC2A29E0F4C790C0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 54994 IP address blocks: 153.43.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:27:2a:fc:2a:29:e0:f4:c7:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=32ef721d-26e8-46e7-9038-d4177f680e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:fd:56:26:70:1f:a9:76:89:30:10:90:8c: 52:11:92:70:05:a7:41:26:25:ab:03:2b:4c:71:ed: e5:f2:83:ad:51:34:76:df:a7:b9:87:f4:4c:b5:af: 63:c4:00:cb:98:74:cb:b5:0f:03:0c:a8:71:35:d4: 6a:e6:98:4a:38:be:f3:a7:4a:a8:db:1f:d5:4c:f9: 25:43:3e:6d:49:6a:f8:ac:ac:7f:fe:2e:93:40:c8: db:ec:6c:39:ad:cd:6b:51:98:58:09:12:f7:db:1b: 4d:14:37:80:85:b4:8b:3a:5f:1d:ee:ee:ba:7a:dc: f7:e2:a5:ff:40:31:94:02:57:ae:54:ad:4e:e1:73: 91:01:8c:bc:c7:5e:57:27:8f:d3:14:66:de:94:94: f9:9e:40:1c:67:9b:cb:2d:bf:c7:9e:62:5c:3a:a5: 7f:55:d3:7e:7a:5f:6e:36:c5:82:df:af:3c:8c:8d: 33:18:0a:b6:50:c6:cc:dc:77:a3:8d:de:5d:08:65: 33:c9:cc:da:a4:80:85:76:2c:15:2a:9d:f1:f3:1e: 3a:5a:78:d3:8f:6f:2e:2b:96:87:e4:3c:de:6f:61: 78:50:b8:81:fa:d1:a9:be:42:2f:22:b7:59:eb:55: 69:38:a2:fc:d9:3b:73:b4:17:4c:c7:2f:b9:19:ff: cd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E1:67:B1:19:79:83:42:38:AB:27:A2:74:54:A4:E6:F3:38:DD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b8:4b:4d:c5:89:ec:8d:94:a5:a8:db:0a:31:e7:31:48:d9: 99:0f:79:cb:b1:c2:7b:f1:6a:c4:36:6e:64:be:e0:0d:35:88: c0:09:c7:ec:3e:96:15:b4:74:d8:f1:6f:5e:09:47:f8:13:b6: 1f:65:3a:db:66:c6:dd:d5:f8:00:27:8e:77:66:ee:c1:62:c7: 8c:6c:f5:27:b4:80:27:32:c7:c9:6c:76:7d:28:ba:d0:c8:d9: 96:84:0b:99:50:80:35:10:3e:dc:f0:5a:34:38:65:71:e5:23: 6c:d7:7b:38:f4:97:ec:19:c0:99:ec:62:6f:16:72:b3:7a:8c: b0:e8:21:22:84:e0:a7:0b:cf:2a:11:a4:13:25:5f:dd:39:50: d9:a2:ad:f5:07:07:08:43:31:f7:0b:04:c2:de:96:9b:14:dd: a3:d6:64:0a:72:50:da:28:1f:9a:95:a8:f6:d8:57:0f:e2:fc: b7:6d:4b:82:b2:67:24:76:bf:70:44:04:0a:c7:96:25:4d:ff: 63:0c:a2:81:b3:84:6c:01:ff:f7:1b:d1:a3:30:a4:19:19:c0: 86:37:90:04:fc:18:3b:74:3a:1d:e4:7d:d7:a5:6a:66:49:e6: f6:7a:9f:4e:49:60:f6:53:78:39:2c:e6:6b:70:32:ed:53:d4: d3:7d:86:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8icq/Cop4PTHkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk MzJlZjcyMWQtMjZlOC00NmU3LTkwMzgtZDQxNzdmNjgwZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFT9ViZwH6l2iTAQkIxSEZJwBadBJiWrAytM ce3l8oOtUTR236e5h/RMta9jxADLmHTLtQ8DDKhxNdRq5phKOL7zp0qo2x/VTPkl Qz5tSWr4rKx//i6TQMjb7Gw5rc1rUZhYCRL32xtNFDeAhbSLOl8d7u66etz34qX/ QDGUAleuVK1O4XORAYy8x15XJ4/TFGbelJT5nkAcZ5vLLb/HnmJcOqV/VdN+el9u NsWC3688jI0zGAq2UMbM3Hejjd5dCGUzyczapICFdiwVKp3x8x46WnjTj28uK5aH 5Dzeb2F4ULiB+tGpvkIvIrdZ61VpOKL82TtztBdMxy+5Gf/N9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrhZ7EZeYNCOKsnonRUpObzON1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzk5NTNmMWItNzdjYy0z ZjI0LWFjNWUtYTMxMzgzNWI4NjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH64S03FieyNlKWo2wox5zFI2ZkPecuxwnvxasQ2bmS+4A01iMAJx+w+ lhW0dNjxb14JR/gTth9lOttmxt3V+AAnjndm7sFix4xs9Se0gCcyx8lsdn0outDI 2ZaEC5lQgDUQPtzwWjQ4ZXHlI2zXezj0l+wZwJnsYm8WcrN6jLDoISKE4KcLzyoR pBMlX905UNmirfUHBwhDMfcLBMLelpsU3aPWZApyUNooH5qVqPbYVw/i/LdtS4Ky ZyR2v3BEBArHliVN/2MMooGzhGwB//cb0aMwpBkZwIY3kAT8GDt0Oh3kfdelamZJ 5vZ6n05JYPZTeDks5mtwMu1T1NN9hjg= -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:23 2026 by rpki-client