$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa File: 603dfc99-3ee4-36ed-8a9a-a311835734b1.roa (raw, json) Hash identifier: 3SrurQ57BnBPjNfE9R14rVvmaS7IWlq/1wb7r5MfZMY= Subject key identifier: 61:36:09:6E:FF:AA:18:4C:53:54:18:E2:C0:F2:BD:69:73:04:A4:02 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F2EED091B739A972A23919E00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:09:1b:73:9a:97:2a:23:91:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=88c65168-2d73-448d-80cc-e5a152ed8d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:36:30:26:60:14:0e:73:87:b1:59:27:0d: c8:f5:a3:88:de:7e:04:b9:65:20:9f:ff:fb:9e:5d: 49:fc:9f:53:f0:91:d1:c5:a8:36:b5:57:c0:05:6f: 16:08:4e:42:6f:a4:e0:4d:83:b5:05:8b:ea:cb:60: d5:b5:6f:da:d4:a0:89:10:86:8a:18:70:7b:e1:d4: e4:c1:ff:11:04:56:0b:8f:42:50:16:94:ff:32:e2: b0:62:7c:f6:94:17:14:cf:aa:4f:73:3b:e3:37:a3: 53:82:a6:c1:ce:02:69:8a:9d:ef:96:b0:b0:a1:c0: 88:87:11:b2:5e:66:4e:d8:32:e2:1a:5f:3c:49:16: 52:6c:72:7b:c7:07:90:6a:e1:3a:50:73:7c:5e:07: ee:81:74:66:47:8a:9a:c1:be:3d:02:1b:a2:4b:2b: 3e:7b:25:db:99:f2:b7:3d:56:26:e6:80:b7:6d:41: 34:a9:51:37:a6:93:9f:45:66:39:07:6a:01:e8:c3: d5:3f:20:74:cd:0d:7d:a4:ba:fb:f9:8e:d2:a5:9c: 18:87:93:9a:51:a4:f8:61:17:f8:f3:15:c9:61:8e: 3e:0c:2a:00:d4:87:5c:6f:d1:33:a0:44:07:04:02: fa:cc:ed:47:51:75:14:d0:d8:8c:40:02:59:55:e6: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:09:6E:FF:AA:18:4C:53:54:18:E2:C0:F2:BD:69:73:04:A4:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/603dfc99-3ee4-36ed-8a9a-a311835734b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:75:53:a4:4d:8c:5e:04:1c:4f:b2:b9:65:dc:6e:21:bc:ba: 95:92:68:91:73:18:b2:b5:b0:7b:85:aa:2a:12:9e:98:77:d7: de:63:0b:6d:f6:58:bd:2c:49:ab:41:38:4b:8a:8a:09:41:26: ae:56:85:df:ed:e4:36:a0:7b:10:86:e5:0f:f8:3e:df:04:6a: 74:a2:67:11:44:ca:73:12:93:2d:83:22:b9:f5:c8:a6:39:b5: 4b:9d:45:56:d2:c8:33:25:8e:92:56:a6:44:57:6d:f8:2f:3f: c6:ad:e7:9c:00:1d:36:15:7b:5f:62:cb:48:83:fb:85:48:cf: 88:ef:1a:7c:01:88:05:18:aa:72:84:49:d9:57:fc:d7:cc:2e: 22:bc:d6:01:51:db:dd:bc:d8:31:1b:50:a5:83:c3:1c:0b:e6: 21:37:bd:0c:b2:ba:c3:d0:5b:ab:21:18:03:16:f7:28:27:6c: ed:52:46:8f:73:e4:c4:bf:66:bc:94:80:cd:53:2f:20:0a:a7: ea:2f:71:aa:26:51:ad:7e:01:a4:2e:2d:49:48:75:ef:ef:43: 37:e1:d4:63:e3:29:97:82:8e:39:19:8b:f4:e9:0b:22:24:1a: 86:27:81:94:53:c8:b4:c8:8a:e4:9a:d9:be:53:8e:d7:c4:4a: 60:2a:e3:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Qkbc5qXKiORngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ODhjNjUxNjgtMmQ3My00NDhkLTgwY2MtZTVhMTUyZWQ4ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQw2MCZgFA5zh7FZJw3I9aOI3n4EuWUgn//7 nl1J/J9T8JHRxag2tVfABW8WCE5Cb6TgTYO1BYvqy2DVtW/a1KCJEIaKGHB74dTk wf8RBFYLj0JQFpT/MuKwYnz2lBcUz6pPczvjN6NTgqbBzgJpip3vlrCwocCIhxGy XmZO2DLiGl88SRZSbHJ7xweQauE6UHN8XgfugXRmR4qawb49AhuiSys+eyXbmfK3 PVYm5oC3bUE0qVE3ppOfRWY5B2oB6MPVPyB0zQ19pLr7+Y7SpZwYh5OaUaT4YRf4 8xXJYY4+DCoA1Idcb9EzoEQHBAL6zO1HUXUU0NiMQAJZVeb7qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE2CW7/qhhMU1QY4sDyvWlzBKQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjAzZGZjOTktM2VlNC0z NmVkLThhOWEtYTMxMTgzNTczNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF1U6RNjF4EHE+yuWXcbiG8upWSaJFzGLK1sHuFqioSnph3195jC232 WL0sSatBOEuKiglBJq5Whd/t5DagexCG5Q/4Pt8EanSiZxFEynMSky2DIrn1yKY5 tUudRVbSyDMljpJWpkRXbfgvP8at55wAHTYVe19iy0iD+4VIz4jvGnwBiAUYqnKE SdlX/NfMLiK81gFR29282DEbUKWDwxwL5iE3vQyyusPQW6shGAMW9ygnbO1SRo9z 5MS/ZryUgM1TLyAKp+ovcaomUa1+AaQuLUlIde/vQzfh1GPjKZeCjjkZi/TpCyIk GoYngZRTyLTIiuSa2b5TjtfESmAq44w= -----END CERTIFICATE-----Generated at Fri Sep 25 22:53:04 2026 by rpki-client