$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/86623041-b8c6-367a-9a28-4936157de7e8.roa File: 86623041-b8c6-367a-9a28-4936157de7e8.roa (raw, json) Hash identifier: +Z70o6DoELy/3qbJxVQ+t/jOHhAV9f0+Fn6wFpvMs0M= Subject key identifier: 55:6F:BA:B1:86:F2:E8:7F:54:26:A6:8F:5B:E6:C1:BA:BB:C4:FF:69 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F42780D4B6ADA87193D629A80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/86623041-b8c6-367a-9a28-4936157de7e8.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:0d:4b:6a:da:87:19:3d:62:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=0fff4b04-d5e3-432f-8dc1-dfcb007a328c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:ad:4b:e1:50:82:53:b7:8a:19:36:2f:70: 19:e5:fe:2c:34:1e:8b:12:00:f1:c7:94:87:28:b3: 21:eb:bb:1d:58:ff:37:6c:31:a0:b3:de:37:4e:26: 3c:87:66:d4:7b:26:20:01:af:5a:7b:97:67:0c:53: a9:5f:b6:99:ae:f0:21:89:cb:a5:26:55:45:45:c2: e3:35:87:60:c0:0d:e7:f4:b6:ee:3e:bf:58:f0:ef: 05:22:ba:30:5d:9d:39:64:ab:8f:bd:d2:ab:55:61: 2d:ee:2e:aa:29:d9:97:a0:9b:36:e7:00:aa:82:66: ee:24:ae:fd:7b:d7:9f:2e:ed:78:e5:95:27:d6:8e: e8:4c:45:52:01:a9:ab:6f:35:b2:fe:8a:c2:56:19: 71:f9:99:0f:b2:bc:0c:ad:e6:f2:d5:c3:9b:08:ae: c2:ed:12:80:0a:05:17:4b:55:60:42:7a:e6:5b:18: be:60:5c:19:0e:b2:35:8a:8f:c1:31:50:d8:38:32: 1c:b1:a9:ea:be:36:45:ee:45:ab:63:45:12:99:41: 15:90:e3:5d:48:cd:f8:bd:6d:35:cf:c6:53:96:47: d6:ec:64:97:7a:11:cc:54:ff:49:de:e3:71:3b:ad: cf:91:b2:c9:a1:a4:67:6a:be:89:37:5e:7d:f3:92: 2b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6F:BA:B1:86:F2:E8:7F:54:26:A6:8F:5B:E6:C1:BA:BB:C4:FF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/86623041-b8c6-367a-9a28-4936157de7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0c:8d:a2:88:f5:fb:ea:09:e6:4d:f4:51:fe:56:56:15:6c: f3:d7:11:f3:5d:78:95:e3:71:c5:ab:86:a7:ba:1c:28:51:83: f6:26:1a:f8:f3:13:29:2b:3c:7f:ce:f0:05:4f:0e:39:f5:30: 9f:07:6d:71:13:e2:78:0e:28:57:e3:ea:b1:a3:e4:5c:e3:76: 9f:2b:75:36:47:e3:ae:01:d0:42:82:66:60:0c:a1:8a:a3:94: 05:6c:de:a5:c2:a3:cc:11:dc:0b:c4:42:92:61:cc:4d:bb:3b: 21:a6:c6:c9:ec:0c:f6:75:d1:1f:06:7e:30:bb:7f:74:a4:fd: 34:3d:4e:4a:cb:14:57:00:17:8b:00:3c:de:a3:b5:e2:ff:be: e1:8b:04:fd:76:a7:a3:40:10:02:6f:42:68:42:e4:36:ed:16: 91:e5:24:22:9d:db:ef:58:70:cd:78:76:08:86:c2:98:5d:c5: 7b:ed:a1:65:c7:99:0a:32:3d:c7:d1:e4:88:18:09:84:a9:72: 3b:66:df:d1:13:0f:44:1d:c6:7b:f2:2f:b7:62:7b:32:b1:75: d9:43:0d:36:82:dd:92:26:59:d6:fc:f9:74:8a:f8:13:c4:7f: 1e:34:0f:66:2a:69:1d:94:cd:e0:6a:d9:ef:44:10:f5:88:f8: 54:0b:f1:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeA1LatqHGT1imoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MGZmZjRiMDQtZDVlMy00MzJmLThkYzEtZGZjYjAwN2EzMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIutS+FQglO3ihk2L3AZ5f4sNB6LEgDxx5SH KLMh67sdWP83bDGgs943TiY8h2bUeyYgAa9ae5dnDFOpX7aZrvAhiculJlVFRcLj NYdgwA3n9LbuPr9Y8O8FIrowXZ05ZKuPvdKrVWEt7i6qKdmXoJs25wCqgmbuJK79 e9efLu145ZUn1o7oTEVSAamrbzWy/orCVhlx+ZkPsrwMreby1cObCK7C7RKACgUX S1VgQnrmWxi+YFwZDrI1io/BMVDYODIcsanqvjZF7kWrY0USmUEVkONdSM34vW01 z8ZTlkfW7GSXehHMVP9J3uNxO63PkbLJoaRnar6JN15985Ir7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVvurGG8uh/VCamj1vmwbq7xP9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvODY2MjMwNDEtYjhjNi0z NjdhLTlhMjgtNDkzNjE1N2RlN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIMjaKI9fvqCeZN9FH+VlYVbPPXEfNdeJXjccWrhqe6HChRg/YmGvjz EykrPH/O8AVPDjn1MJ8HbXET4ngOKFfj6rGj5Fzjdp8rdTZH464B0EKCZmAMoYqj lAVs3qXCo8wR3AvEQpJhzE27OyGmxsnsDPZ10R8GfjC7f3Sk/TQ9TkrLFFcAF4sA PN6jteL/vuGLBP12p6NAEAJvQmhC5DbtFpHlJCKd2+9YcM14dgiGwphdxXvtoWXH mQoyPcfR5IgYCYSpcjtm39ETD0QdxnvyL7diezKxddlDDTaC3ZImWdb8+XSK+BPE fx40D2YqaR2UzeBq2e9EEPWI+FQL8SU= -----END CERTIFICATE-----Generated at Sun Sep 27 02:13:26 2026 by rpki-client