$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa File: 68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa (raw, json) Hash identifier: dqEtUbDR4GtpQS1mbimT/zDz9tjqS71TL6VmjLxrAlg= Subject key identifier: B1:16:FB:1F:E0:FB:8F:67:02:C3:6E:1C:68:3B:C2:D0:EE:F4:89:DD Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F497336824E9E84D012771154 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:36:82:4e:9e:84:d0:12:77:11:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a6ac126-8dda-41df-9723-83cc436166e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:52:2a:9f:53:fc:2d:80:1f:f8:0e:db:35: ed:c0:50:71:86:db:7b:84:30:43:b3:01:ed:45:10: 5c:d1:dc:92:2f:95:8a:af:23:4e:72:fb:a9:57:c2: 05:1a:c5:fa:59:d9:0d:a4:14:3b:dc:c8:b4:14:83: e1:bd:dd:ad:f9:3f:69:67:81:a3:b6:2f:32:7f:fb: 4f:c5:89:dc:0c:53:28:2e:33:a9:b9:ab:83:47:9b: 3f:ac:dd:d4:d4:19:67:81:e1:f9:7e:d6:7f:98:1a: cb:7e:d4:8e:83:f8:14:9c:14:df:41:bf:9c:4e:c8: b6:90:3e:51:39:d1:5f:12:d1:de:45:db:7e:fb:8f: 72:92:fe:6c:30:e5:e1:86:dc:8c:cf:d9:e8:4f:08: fd:11:78:f9:a8:1b:28:e7:e1:ab:64:ac:fe:45:bc: 9e:35:d9:4b:14:b7:18:9a:c4:3f:e0:d0:2b:ee:40: ef:7e:e4:14:1a:9f:a4:8b:aa:41:92:a2:99:56:6e: 4c:4a:f7:f6:de:c7:83:be:be:06:58:66:04:e4:39: 3b:59:f7:fa:db:28:f1:86:c5:d6:a1:9e:3e:b8:70: b0:dd:89:5e:69:19:c7:80:74:c5:07:8c:5f:b6:02: 59:9a:92:d6:b0:12:9d:db:b9:19:66:e1:34:9c:95: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:16:FB:1F:E0:FB:8F:67:02:C3:6E:1C:68:3B:C2:D0:EE:F4:89:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b2:5e:d9:87:42:5c:7d:2d:06:ff:a1:86:da:7a:32:02:d6: 90:7a:c3:37:11:15:eb:91:d4:77:9c:1b:8f:eb:52:9b:5a:1f: 95:3d:f8:7b:39:58:68:95:87:f4:06:c2:3c:bb:5d:31:d7:e5: f4:b7:4c:02:0d:34:1c:29:27:5e:1b:d6:15:25:d5:29:72:25: 52:b1:be:28:8e:28:29:83:39:68:64:de:c1:a1:1c:58:16:7e: e1:4c:13:d5:7d:6c:07:95:5a:46:ae:f5:97:54:8b:9d:22:b0: bc:d6:06:1a:c2:1b:d9:bd:c5:9e:89:c4:c6:8b:06:91:1e:4c: f0:6b:23:4d:f6:29:28:c8:17:21:13:a8:5f:e4:df:9c:bc:0a: 08:cb:33:82:e2:49:00:88:a7:64:10:03:25:04:79:d7:45:ec: b0:e2:ae:01:2a:a9:b1:61:12:0b:86:23:6c:1f:66:5f:e2:46: c5:b5:8e:74:14:58:5d:fc:09:23:b3:c8:8b:57:84:de:8d:59: 39:ae:e1:25:80:06:b2:34:0d:0d:3f:ea:13:80:32:38:10:84: 9f:84:04:30:2b:6e:42:27:ba:63:05:8d:25:bf:ea:e0:30:eb: e1:0c:b7:c7:bc:bb:07:67:1d:1f:32:f9:33:d6:20:6f:ba:6c: e7:ea:fc:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczaCTp6E0BJ3EVQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGE2YWMxMjYtOGRkYS00MWRmLTk3MjMtODNjYzQzNjE2NmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArghSKp9T/C2AH/gO2zXtwFBxhtt7hDBDswHt RRBc0dySL5WKryNOcvupV8IFGsX6WdkNpBQ73Mi0FIPhvd2t+T9pZ4Gjti8yf/tP xYncDFMoLjOpuauDR5s/rN3U1BlngeH5ftZ/mBrLftSOg/gUnBTfQb+cTsi2kD5R OdFfEtHeRdt++49ykv5sMOXhhtyMz9noTwj9EXj5qBso5+GrZKz+RbyeNdlLFLcY msQ/4NAr7kDvfuQUGp+ki6pBkqKZVm5MSvf23seDvr4GWGYE5Dk7Wff62yjxhsXW oZ4+uHCw3YleaRnHgHTFB4xftgJZmpLWsBKd27kZZuE0nJUm5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEW+x/g+49nAsNuHGg7wtDu9IndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjhjYjY5ZTEtYTdlNi0z M2IzLWE5ZTItMzZiNGIzZmJhNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2yXtmHQlx9LQb/oYbaejIC1pB6wzcRFeuR1HecG4/rUptaH5U9+Hs5 WGiVh/QGwjy7XTHX5fS3TAINNBwpJ14b1hUl1SlyJVKxviiOKCmDOWhk3sGhHFgW fuFME9V9bAeVWkau9ZdUi50isLzWBhrCG9m9xZ6JxMaLBpEeTPBrI032KSjIFyET qF/k35y8CgjLM4LiSQCIp2QQAyUEeddF7LDirgEqqbFhEguGI2wfZl/iRsW1jnQU WF38CSOzyItXhN6NWTmu4SWABrI0DQ0/6hOAMjgQhJ+EBDArbkInumMFjSW/6uAw 6+EMt8e8uwdnHR8y+TPWIG+6bOfq/KI= -----END CERTIFICATE-----Generated at Sat Sep 26 14:45:18 2026 by rpki-client