$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa File: 603dfc99-3ee4-36ed-8a9a-a311835734b1.roa (raw, json) Hash identifier: MXZpaDvbq98Fx31P5oLZtZJX96/ZWKZOV4veIS1enQI= Subject key identifier: D6:9A:1E:B8:F6:AD:E1:6F:A2:45:53:84:91:61:D6:33:02:19:5C:CE Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584CCBA73F76837A7B81701A1300 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 54994 IP address blocks: 153.43.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:3f:76:83:7a:7b:81:70:1a:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=58b1834b-239d-44cb-8cce-8ed765f1714d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:bb:16:8e:17:b1:46:a7:9d:c0:b1:9f:8d: 95:16:19:0c:79:53:df:44:72:b6:e5:a1:16:dc:bf: 6f:fb:0a:b6:fb:0e:a9:fd:d0:5d:29:d9:d3:c1:b1: fb:bf:63:10:2f:53:ec:16:fb:98:f7:27:28:4a:14: 3d:da:79:6a:6f:b0:57:1c:df:9c:8b:a7:73:58:50: 99:6f:7e:bf:32:f1:83:87:76:6a:ae:c3:b5:31:fc: ca:ab:95:49:77:30:d7:a4:f9:a4:4e:24:bd:b9:45: 0e:7d:71:2a:d0:ab:4e:40:9b:04:1a:05:33:a0:b5: dc:6a:c6:e9:d5:7b:14:0c:a4:79:d9:68:21:b3:5f: 25:55:29:4d:59:3a:e1:91:0b:c1:9c:cf:79:a0:19: c7:bf:83:88:1a:8d:be:f5:50:d6:79:41:48:93:e8: 5b:7c:a1:a0:4d:c4:29:5d:2c:e5:10:3a:61:67:2b: 2f:02:0b:b3:2f:79:1a:15:a2:04:68:9c:13:90:61: 23:7e:87:2a:9d:6b:b0:b5:6a:df:f5:a1:a0:f2:a2: 1e:f5:18:69:20:96:b2:35:7d:4c:f6:1e:e6:04:40: 1a:2d:1a:a2:51:1e:74:b9:d3:1c:47:c4:2a:1b:3f: d2:11:73:15:08:a7:b8:b5:06:fb:4a:68:96:65:75: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9A:1E:B8:F6:AD:E1:6F:A2:45:53:84:91:61:D6:33:02:19:5C:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bb:ca:c5:55:4e:f2:3e:65:e2:65:d8:ca:06:1b:7d:02:d4: d8:dc:19:bb:17:9b:9e:a2:1e:f6:02:98:99:cf:08:e1:59:80: 30:65:fb:3c:10:6c:91:15:68:e3:9e:81:4b:df:7d:93:61:8a: 3f:de:36:67:33:7a:ca:21:70:3e:d3:c8:02:b2:ef:6b:83:04: c6:32:45:54:7f:cb:80:14:c9:3a:d1:59:34:9c:d3:35:28:54: 20:2e:32:b1:a7:fc:bf:e5:19:a3:f7:49:21:7e:2b:c6:22:f3: 4c:64:74:7d:a2:9b:8a:23:25:74:7f:33:98:02:d5:49:a5:a1: f9:2b:07:1f:e0:f9:b7:9a:34:7b:71:f1:d8:2b:66:d6:a8:72: c7:5e:ee:21:39:39:7e:16:bd:d7:a4:9a:60:c9:e1:4d:e8:3b: fb:82:79:9b:b8:51:a1:22:53:8c:d3:de:df:e7:d6:f2:c6:03: 7d:97:d5:e1:39:d3:4d:d5:c7:18:30:85:b8:e7:43:f4:00:b8: 18:d7:cf:c6:c3:1e:5d:83:53:e3:50:2a:db:db:be:2d:77:bf: af:11:e0:c7:66:42:1b:e5:37:4a:b6:bc:ba:b0:b2:b9:fe:42: 2f:54:e5:b5:16:c9:46:15:a7:de:88:74:96:58:17:e5:a4:7e: 6b:83:49:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLpz92g3p7gXAaEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk NThiMTgzNGItMjM5ZC00NGNiLThjY2UtOGVkNzY1ZjE3MTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqni7Fo4XsUanncCxn42VFhkMeVPfRHK25aEW 3L9v+wq2+w6p/dBdKdnTwbH7v2MQL1PsFvuY9ycoShQ92nlqb7BXHN+ci6dzWFCZ b36/MvGDh3ZqrsO1MfzKq5VJdzDXpPmkTiS9uUUOfXEq0KtOQJsEGgUzoLXcasbp 1XsUDKR52Wghs18lVSlNWTrhkQvBnM95oBnHv4OIGo2+9VDWeUFIk+hbfKGgTcQp XSzlEDphZysvAguzL3kaFaIEaJwTkGEjfocqnWuwtWrf9aGg8qIe9RhpIJayNX1M 9h7mBEAaLRqiUR50udMcR8QqGz/SEXMVCKe4tQb7SmiWZXXqxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaaHrj2reFvokVThJFh1jMCGVzOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjAzZGZjOTktM2VlNC0z NmVkLThhOWEtYTMxMTgzNTczNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu7ysVVTvI+ZeJl2MoGG30C1NjcGbsXm56iHvYCmJnPCOFZgDBl+zwQ bJEVaOOegUvffZNhij/eNmczesohcD7TyAKy72uDBMYyRVR/y4AUyTrRWTSc0zUo VCAuMrGn/L/lGaP3SSF+K8Yi80xkdH2im4ojJXR/M5gC1UmlofkrBx/g+beaNHtx 8dgrZtaocsde7iE5OX4WvdekmmDJ4U3oO/uCeZu4UaEiU4zT3t/n1vLGA32X1eE5 003VxxgwhbjnQ/QAuBjXz8bDHl2DU+NQKtvbvi13v68R4MdmQhvlN0q2vLqwsrn+ Qi9U5bUWyUYVp96IdJZYF+WkfmuDSa0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:50 2026 by rpki-client