$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa File: 68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa (raw, json) Hash identifier: P0TMT8zaGQ+vdXTlp5ldM4M+YTysWTCbE2inun8N3jQ= Subject key identifier: 0D:CA:4D:5D:31:0C:FC:E4:85:50:EA:5C:F6:CD:64:57:8D:D7:BE:36 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EA788A4812691516CF80D2420 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54994 IP address blocks: 153.43.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a4:81:26:91:51:6c:f8:0d:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1b8c8bf9-aac1-452d-94ad-be2d74224304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:b6:9c:e3:4d:ac:63:e7:39:b2:bc:dc:57: 54:d7:0b:4d:0a:7e:08:64:d6:3f:c6:8d:65:81:73: a0:8c:f2:87:88:12:4e:b1:00:82:e3:15:90:0c:4a: 1c:51:e0:7b:65:a9:6a:dd:d0:98:ca:84:84:06:8d: 97:4f:a2:92:3d:b2:84:f8:b9:3b:23:f0:0c:39:7a: 2c:f8:d4:9d:95:e9:0c:7a:e6:c3:05:ff:2d:5c:70: a4:12:a4:47:5e:7f:c0:2d:3b:c1:62:94:4d:53:ce: b2:80:1d:45:80:9d:25:85:6a:0d:16:be:c5:32:ad: 2f:75:e0:c5:bd:10:90:31:cf:7a:61:31:86:cf:9e: cd:a4:f0:b8:80:b0:15:54:12:45:9b:7f:fc:1a:63: 2e:9a:ad:4d:2d:1b:1f:ec:98:64:b9:4f:03:38:52: a4:f2:44:35:54:3c:5b:aa:e4:89:f9:1f:2a:e0:99: 0d:a9:3c:a6:29:8d:33:d2:6c:fa:ac:ee:d5:79:8f: 10:18:c2:c5:5a:62:36:e8:39:e9:da:52:f5:41:23: 4c:e2:ac:e1:df:d6:7d:02:28:a3:3b:69:97:ac:7f: f9:9e:89:a6:fc:7d:47:57:90:21:ac:f3:1f:bb:dc: 24:54:2f:de:20:14:1c:d6:bd:36:f5:15:68:73:80: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CA:4D:5D:31:0C:FC:E4:85:50:EA:5C:F6:CD:64:57:8D:D7:BE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/68cb69e1-a7e6-33b3-a9e2-36b4b3fba70c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b9:c9:b5:b0:cc:b2:eb:b3:07:6c:b3:61:1c:77:41:d2:d1: e6:84:38:eb:a8:01:a1:a6:14:72:df:60:82:6c:7a:6c:e9:4a: ad:82:2c:af:0e:43:4f:40:e7:d0:91:0c:56:68:c3:af:eb:a8: 3d:22:7c:21:ad:33:75:ea:5e:43:29:10:1e:b1:2b:cc:e5:fe: 15:f3:26:06:84:be:4a:db:3c:2b:07:f4:87:b7:4d:e3:b0:75: f6:29:fe:30:fc:dc:43:e2:07:c9:89:e8:3c:d7:5c:58:38:fe: e4:ae:90:a0:56:10:e8:cd:e8:d2:a5:01:7a:a5:86:76:4b:db: 84:65:09:64:a5:2a:e5:f3:73:fe:a3:71:fd:0c:6b:c3:0e:fe: 4f:e0:71:62:d4:34:b4:d2:eb:bf:1e:65:09:52:c1:d4:ab:2b: 1b:2f:11:9d:ef:7d:f3:36:c2:87:44:a1:25:be:a0:9e:7d:1f: d0:43:51:c7:76:78:af:d7:d2:df:08:b6:47:4f:5c:1d:6d:41: 08:c4:bd:9d:e6:07:60:37:c0:46:e0:95:aa:ba:9a:72:cf:56: 3a:18:9b:40:67:a5:46:0c:a5:d6:1f:e9:43:2b:1f:27:fc:f6: 24:5b:55:c6:c9:7b:dc:12:bf:e4:2e:9a:ab:0a:02:e4:45:ec: b9:6a:63:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKSBJpFRbPgNJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWI4YzhiZjktYWFjMS00NTJkLTk0YWQtYmUyZDc0MjI0MzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj562nONNrGPnObK83FdU1wtNCn4IZNY/xo1l gXOgjPKHiBJOsQCC4xWQDEocUeB7Zalq3dCYyoSEBo2XT6KSPbKE+Lk7I/AMOXos +NSdlekMeubDBf8tXHCkEqRHXn/ALTvBYpRNU86ygB1FgJ0lhWoNFr7FMq0vdeDF vRCQMc96YTGGz57NpPC4gLAVVBJFm3/8GmMumq1NLRsf7JhkuU8DOFKk8kQ1VDxb quSJ+R8q4JkNqTymKY0z0mz6rO7VeY8QGMLFWmI26Dnp2lL1QSNM4qzh39Z9Aiij O2mXrH/5nomm/H1HV5AhrPMfu9wkVC/eIBQc1r029RVoc4C4YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3KTV0xDPzkhVDqXPbNZFeN1742MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjhjYjY5ZTEtYTdlNi0z M2IzLWE5ZTItMzZiNGIzZmJhNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS5ybWwzLLrswdss2Ecd0HS0eaEOOuoAaGmFHLfYIJsemzpSq2CLK8O Q09A59CRDFZow6/rqD0ifCGtM3XqXkMpEB6xK8zl/hXzJgaEvkrbPCsH9Ie3TeOw dfYp/jD83EPiB8mJ6DzXXFg4/uSukKBWEOjN6NKlAXqlhnZL24RlCWSlKuXzc/6j cf0Ma8MO/k/gcWLUNLTS678eZQlSwdSrKxsvEZ3vffM2wodEoSW+oJ59H9BDUcd2 eK/X0t8ItkdPXB1tQQjEvZ3mB2A3wEbglaq6mnLPVjoYm0BnpUYMpdYf6UMrHyf8 9iRbVcbJe9wSv+QumqsKAuRF7LlqY1g= -----END CERTIFICATE-----Generated at Wed Jul 29 05:45:49 2026 by rpki-client