$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ce816e2-ac21-3fab-80cc-176c71ff6504.roa File: 3ce816e2-ac21-3fab-80cc-176c71ff6504.roa (raw, json) Hash identifier: tCNrmKhXZuz2UZCJfvh7QFEV2mmpMG2xqDibSZ+JFEg= Subject key identifier: 39:B3:02:B5:0B:5F:B0:50:70:B5:F2:0D:35:21:1F:D8:CE:64:E7:D4 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F2EED284C8FD8D78F4814CD80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ce816e2-ac21-3fab-80cc-176c71ff6504.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.148.0/24 maxlen: 24 153.43.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:28:4c:8f:d8:d7:8f:48:14:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=7052f1b4-09e6-4c14-b5fa-c9056d10f496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:dc:8e:e1:70:94:17:62:50:63:ad:47:87: f8:20:7a:26:8e:ef:69:6d:db:c3:19:8d:21:09:fa: 18:97:21:0c:af:7b:9f:17:ef:f2:73:66:45:99:f4: 34:c0:29:9a:19:a5:92:9e:84:bc:37:a1:b3:46:b5: 5c:8f:69:64:97:4c:2d:b0:4f:a3:a0:e2:b2:04:c1: 61:b5:be:72:55:39:c9:68:47:e8:0a:93:9f:05:c7: 7f:46:09:9d:4c:9c:e0:d5:ec:90:0b:d9:c0:a2:32: 24:ce:25:b1:22:f4:50:c2:2c:04:53:60:cf:c4:69: 2d:d1:d0:1d:67:c6:da:6f:1a:86:84:71:e1:48:74: 54:39:a1:92:0a:32:a1:b7:2b:e7:4d:aa:e4:b9:75: 3a:05:89:c1:7e:91:0a:41:df:b9:2b:bf:6b:9d:c1: f8:6b:a1:d5:20:e2:21:ae:fe:db:54:96:68:32:46: 4b:84:8c:7e:c1:26:04:36:d0:cb:f7:b5:d7:2a:d6: 9f:d5:75:01:50:01:35:47:5d:a1:09:83:76:ee:fa: fd:08:b4:38:ee:b9:04:e5:f6:1f:7a:11:35:72:a4: 81:ba:ef:53:ae:0b:ad:8c:e2:97:ce:da:e5:02:70: fb:14:1c:8a:f9:cb:20:49:ba:3c:90:3d:23:a1:13: 2c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B3:02:B5:0B:5F:B0:50:70:B5:F2:0D:35:21:1F:D8:CE:64:E7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3ce816e2-ac21-3fab-80cc-176c71ff6504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6c:92:7a:7a:ac:e8:07:be:3f:87:98:f3:e1:79:15:e0:f7: 7c:73:09:ca:62:30:20:3c:9e:39:6e:aa:a7:3f:83:74:d5:24: b4:c2:b7:bc:f5:2d:b2:b4:10:a9:fd:4c:58:3e:81:02:f9:54: 5c:28:d0:88:2b:ca:cb:de:c2:9b:0b:a2:bd:a3:09:d7:35:05: ff:9c:62:e4:9f:79:8f:14:5d:2c:6d:98:72:17:d4:19:80:66: c5:73:eb:69:ac:d5:d3:1a:db:4b:df:77:da:66:6e:ac:86:1f: b8:17:80:23:b9:77:72:02:3d:af:c0:1f:d4:51:44:57:cd:b9: b6:80:c7:3f:b5:10:3b:3b:26:bd:c1:fb:2a:8c:4f:74:7d:60: af:fa:38:b1:18:69:4c:be:66:bc:ba:8d:1d:31:b1:17:61:e8: 5f:f4:71:0f:1c:43:5b:95:3c:ad:9f:22:a0:9f:9f:80:8c:b1: 01:2e:27:5a:82:bf:91:85:c8:20:59:bd:f2:47:c8:36:f2:f9: a4:5d:c1:b1:90:d3:9d:b9:3a:9f:8c:06:4a:f1:3c:4d:f7:97: e1:e2:7d:a4:2f:55:43:dc:a4:e2:71:b1:9e:a6:98:b6:de:50: a1:81:0e:65:20:61:b0:89:e4:3e:35:21:55:fc:c9:5a:1e:d9: 36:b0:40:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7ShMj9jXj0gUzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NzA1MmYxYjQtMDllNi00YzE0LWI1ZmEtYzkwNTZkMTBmNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv3cjuFwlBdiUGOtR4f4IHomju9pbdvDGY0h CfoYlyEMr3ufF+/yc2ZFmfQ0wCmaGaWSnoS8N6GzRrVcj2lkl0wtsE+joOKyBMFh tb5yVTnJaEfoCpOfBcd/RgmdTJzg1eyQC9nAojIkziWxIvRQwiwEU2DPxGkt0dAd Z8babxqGhHHhSHRUOaGSCjKhtyvnTarkuXU6BYnBfpEKQd+5K79rncH4a6HVIOIh rv7bVJZoMkZLhIx+wSYENtDL97XXKtaf1XUBUAE1R12hCYN27vr9CLQ47rkE5fYf ehE1cqSBuu9TrgutjOKXztrlAnD7FByK+csgSbo8kD0joRMsgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmzArULX7BQcLXyDTUhH9jOZOfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvM2NlODE2ZTItYWMyMS0z ZmFiLTgwY2MtMTc2YzcxZmY2NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVsknp6rOgHvj+HmPPheRXg93xzCcpiMCA8njluqqc/g3TVJLTCt7z1 LbK0EKn9TFg+gQL5VFwo0IgrysvewpsLor2jCdc1Bf+cYuSfeY8UXSxtmHIX1BmA ZsVz62ms1dMa20vfd9pmbqyGH7gXgCO5d3ICPa/AH9RRRFfNubaAxz+1EDs7Jr3B +yqMT3R9YK/6OLEYaUy+Zry6jR0xsRdh6F/0cQ8cQ1uVPK2fIqCfn4CMsQEuJ1qC v5GFyCBZvfJHyDby+aRdwbGQ0525Op+MBkrxPE33l+HifaQvVUPcpOJxsZ6mmLbe UKGBDmUgYbCJ5D41IVX8yVoe2TawQKY= -----END CERTIFICATE-----Generated at Mon Sep 21 18:19:28 2026 by rpki-client