$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9923c098-4414-3fcc-98d9-910e0df8e727.roa File: 9923c098-4414-3fcc-98d9-910e0df8e727.roa (raw, json) Hash identifier: uw7aoDjqAfnGzkXZfJ9KJ83TATCIzlFDXMeTOVPDZJ4= Subject key identifier: 2C:EC:92:FF:A1:90:CE:15:3C:CF:9E:47:16:1C:95:36:A8:FC:39:8F Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E1E443E9F248E1CE33CA54700 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9923c098-4414-3fcc-98d9-910e0df8e727.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 54994 IP address blocks: 153.43.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:3e:9f:24:8e:1c:e3:3c:a5:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=ba09b09f-fdc9-46df-8072-c61d0ab8883d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:73:7a:0b:8f:5b:dc:c5:cb:bd:7c:54:9f:eb: f6:99:4e:fe:5f:13:e1:4d:45:da:cf:00:19:96:da: f9:65:48:71:4e:c3:fb:c9:c3:cb:ea:ac:c3:8c:0c: 10:6e:29:16:d6:07:1a:c1:6a:84:26:04:40:be:08: 3b:fd:17:6e:71:72:b9:e9:45:fd:ce:1b:fa:fd:b2: 45:74:2d:09:6f:09:d1:1e:cb:59:de:92:8b:54:f6: 44:95:15:de:66:c2:56:38:36:1d:03:a3:7e:25:54: 96:cc:64:12:cc:43:9c:70:12:48:0a:d2:3d:93:78: 95:2b:ad:b5:14:e3:09:7b:25:a9:76:9d:a0:46:c7: 4d:40:d4:70:2f:fe:a7:21:a0:02:ae:2f:75:32:a8: 02:e3:69:a4:d6:90:8d:fc:4d:11:f8:aa:b0:6a:cc: 8f:95:60:7a:db:79:9d:92:e9:91:ec:7a:3b:65:25: 34:a0:63:0c:b6:fd:ea:e7:f7:4e:7d:0d:c4:36:39: 3d:4c:00:f3:ab:9e:0a:5a:ef:1b:3d:de:14:3e:f6: ae:19:f4:4b:52:32:8d:29:b3:9a:9f:18:e7:8c:bf: d2:19:22:5e:be:5a:36:f8:fc:4a:65:3a:7e:17:78: 33:33:d9:b8:84:1b:54:38:50:72:4a:68:54:b4:a1: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EC:92:FF:A1:90:CE:15:3C:CF:9E:47:16:1C:95:36:A8:FC:39:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9923c098-4414-3fcc-98d9-910e0df8e727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:99:4d:f6:e5:79:ae:f5:66:3c:7a:95:59:e8:cc:97:bb:b4: 04:ac:d6:c8:de:29:d5:db:05:74:db:02:95:0b:77:e1:fb:7d: fe:23:38:a2:90:86:96:28:37:5a:27:3b:0d:e9:1f:89:1f:b7: 19:58:83:af:03:47:9d:0b:16:49:ca:0a:e8:89:a9:e0:f7:b7: a9:a1:ec:e2:75:cd:51:68:2f:55:13:a4:9c:93:d4:ec:ff:3f: be:99:d0:bb:cd:ac:46:f6:b4:51:53:23:40:5e:a8:6b:10:50: 80:f8:f0:72:cd:8b:00:62:ba:4a:81:9c:ee:86:e9:52:b5:b7: e4:72:0b:89:67:a8:19:41:01:e6:3c:6e:96:58:15:be:e7:64: c4:1c:78:cc:1b:fa:5a:aa:c3:3e:24:da:e0:09:b6:af:00:b2: fa:d1:6f:20:0a:8b:8c:33:61:bb:e1:0d:50:fe:27:95:ff:b1: 54:be:95:d8:13:64:25:15:43:3e:66:e6:49:1e:7e:a7:9b:3d: 31:85:ee:a1:d0:0a:3d:15:0f:03:0b:df:ae:93:db:1f:0a:d8: 56:10:0b:8d:dc:94:a6:e5:93:86:16:ad:dd:4d:35:6e:a4:d5: 3e:2a:59:53:ce:ef:ef:13:45:78:40:9c:4b:f0:97:aa:74:5b: 84:7d:54:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRD6fJI4c4zylRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YmEwOWIwOWYtZmRjOS00NmRmLTgwNzItYzYxZDBhYjg4ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nN6C49b3MXLvXxUn+v2mU7+XxPhTUXazwAZ ltr5ZUhxTsP7ycPL6qzDjAwQbikW1gcawWqEJgRAvgg7/RducXK56UX9zhv6/bJF dC0JbwnRHstZ3pKLVPZElRXeZsJWODYdA6N+JVSWzGQSzEOccBJICtI9k3iVK621 FOMJeyWpdp2gRsdNQNRwL/6nIaACri91MqgC42mk1pCN/E0R+KqwasyPlWB623md kumR7Ho7ZSU0oGMMtv3q5/dOfQ3ENjk9TADzq54KWu8bPd4UPvauGfRLUjKNKbOa nxjnjL/SGSJevlo2+PxKZTp+F3gzM9m4hBtUOFBySmhUtKEu7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzskv+hkM4VPM+eRxYclTao/DmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTkyM2MwOTgtNDQxNC0z ZmNjLTk4ZDktOTEwZTBkZjhlNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWZTfblea71Zjx6lVnozJe7tASs1sjeKdXbBXTbApULd+H7ff4jOKKQ hpYoN1onOw3pH4kftxlYg68DR50LFknKCuiJqeD3t6mh7OJ1zVFoL1UTpJyT1Oz/ P76Z0LvNrEb2tFFTI0BeqGsQUID48HLNiwBiukqBnO6G6VK1t+RyC4lnqBlBAeY8 bpZYFb7nZMQceMwb+lqqwz4k2uAJtq8AsvrRbyAKi4wzYbvhDVD+J5X/sVS+ldgT ZCUVQz5m5kkefqebPTGF7qHQCj0VDwML366T2x8K2FYQC43clKblk4YWrd1NNW6k 1T4qWVPO7+8TRXhAnEvwl6p0W4R9VNU= -----END CERTIFICATE-----Generated at Sat Jun 13 18:50:40 2026 by rpki-client