$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa File: 8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa (raw, json) Hash identifier: eE2pTJrIy9z4sl3tNFLl+OnoxxZ/dJ/6mpdfgeF5bf8= Subject key identifier: D8:DB:26:45:DC:8D:C7:50:86:93:62:3E:39:02:01:F0:B6:9B:F4:BD Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DFEA0762AF1E4BF5566C42D00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa Signing time: Fri 29 May 2026 13:00:10 +0000 ROA not before: Fri 29 May 2026 13:00:10 +0000 ROA not after: Thu 27 Aug 2026 13:00:10 +0000 asID: 54994 IP address blocks: 153.43.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fe:a0:76:2a:f1:e4:bf:55:66:c4:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 29 13:00:10 2026 GMT Not After : Aug 27 13:00:10 2026 GMT Subject: CN=0bebdd3c-09a3-46dc-9808-70bb4a24b2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:4c:c8:10:13:35:aa:cc:c9:d7:b9:83:77: 14:9d:73:5a:28:5c:9a:42:24:24:21:b8:f8:b9:db: 37:a3:32:9b:eb:83:66:a9:17:02:77:af:be:1e:78: eb:53:b8:ab:98:c6:b9:80:c2:a5:84:0d:2d:bc:9e: a3:a7:5a:7d:49:64:55:df:bc:8d:6b:a0:dd:28:cc: 9f:ed:72:50:bd:d7:27:34:91:04:c2:44:90:59:85: 31:f0:92:24:e1:d7:c4:bc:9e:a6:39:79:59:ea:81: c9:5d:68:3f:64:47:80:d1:53:6d:88:85:d7:94:c0: 46:62:cd:e5:17:80:f0:45:6d:d9:11:e4:09:25:8e: 72:b9:30:29:1d:3d:7b:91:6f:8b:47:30:25:ca:c7: f8:23:bd:a3:c6:df:27:fe:c7:fd:fd:a6:86:e2:d2: 27:88:69:e7:ce:f7:08:ee:1f:97:c3:17:46:b6:8d: 51:8f:fa:4e:72:63:51:40:dc:05:a4:3c:60:4d:e4: 50:7d:fc:ad:f7:79:cb:7a:0a:b2:ed:4b:14:21:5e: b9:37:c3:41:7a:1d:98:b9:cb:5a:c2:ab:ad:e8:cf: 71:75:04:35:33:c4:51:88:3b:bc:1a:9d:82:84:8f: fb:df:ea:c1:12:14:07:51:d1:61:c3:a7:3f:d6:ad: a5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DB:26:45:DC:8D:C7:50:86:93:62:3E:39:02:01:F0:B6:9B:F4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ca:f0:64:f9:5d:3c:7b:e7:fb:1c:2a:8b:3d:60:a8:94:d3: 80:3a:43:c4:ee:d5:31:09:91:80:58:66:4a:ac:49:f4:a9:e7: 61:7b:2f:8a:1b:49:ee:29:94:c4:ea:b4:76:ec:64:70:35:09: 26:51:50:16:6e:13:d4:b8:03:40:d5:97:40:0c:eb:0a:2e:d8: f4:b8:05:7a:f6:aa:7e:f2:27:17:dc:ff:9d:31:02:ae:9e:94: 78:df:fe:5b:2a:79:7a:c5:06:71:28:f6:52:d5:c4:f7:70:94: 56:d4:a6:d4:27:79:f0:9b:ef:58:4c:58:57:b1:23:9d:60:07: 0e:4e:b9:74:ea:e8:34:55:b1:64:24:e4:3f:ae:04:8b:dd:0d: 10:b5:dc:b5:5c:71:1d:48:38:fa:ef:f4:65:9a:a0:14:59:fc: 55:42:fb:c5:ec:6f:e6:6a:8e:7e:05:c2:12:cf:62:87:78:1a: 1f:45:60:2e:99:2f:9b:47:47:81:e8:ae:9a:9a:91:1a:d3:8a: f9:ee:10:51:4d:b5:c1:6a:d9:b8:7b:c8:46:86:44:da:c2:86: 2d:fe:1a:35:40:8d:0e:be:80:63:1d:40:90:ed:d9:89:54:4b: 0e:f8:5a:52:30:5a:4b:e3:63:11:71:2f:d0:71:0d:2a:c5:1d: ed:1e:aa:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3+oHYq8eS/VWbELQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDUyOTEzMDAxMFoXDTI2MDgyNzEzMDAxMFowLzEtMCsGA1UEAxMk MGJlYmRkM2MtMDlhMy00NmRjLTk4MDgtNzBiYjRhMjRiMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukRMyBATNarMyde5g3cUnXNaKFyaQiQkIbj4 uds3ozKb64NmqRcCd6++HnjrU7irmMa5gMKlhA0tvJ6jp1p9SWRV37yNa6DdKMyf 7XJQvdcnNJEEwkSQWYUx8JIk4dfEvJ6mOXlZ6oHJXWg/ZEeA0VNtiIXXlMBGYs3l F4DwRW3ZEeQJJY5yuTApHT17kW+LRzAlysf4I72jxt8n/sf9/aaG4tIniGnnzvcI 7h+XwxdGto1Rj/pOcmNRQNwFpDxgTeRQffyt93nLegqy7UsUIV65N8NBeh2Yucta wqut6M9xdQQ1M8RRiDu8Gp2ChI/73+rBEhQHUdFhw6c/1q2lTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjbJkXcjcdQhpNiPjkCAfC2m/S9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGFjMDI5ZjMtZDNlYS0z MTZkLWJlOTgtODU2NmE1ZDNiY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHK8GT5XTx75/scKos9YKiU04A6Q8Tu1TEJkYBYZkqsSfSp52F7L4ob Se4plMTqtHbsZHA1CSZRUBZuE9S4A0DVl0AM6wou2PS4BXr2qn7yJxfc/50xAq6e lHjf/lsqeXrFBnEo9lLVxPdwlFbUptQnefCb71hMWFexI51gBw5OuXTq6DRVsWQk 5D+uBIvdDRC13LVccR1IOPrv9GWaoBRZ/FVC+8Xsb+Zqjn4FwhLPYod4Gh9FYC6Z L5tHR4HorpqakRrTivnuEFFNtcFq2bh7yEaGRNrChi3+GjVAjQ6+gGMdQJDt2YlU Sw74WlIwWkvjYxFxL9BxDSrFHe0eqps= -----END CERTIFICATE-----Generated at Sat Jun 13 18:54:42 2026 by rpki-client