$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa File: a655e053-8445-36ca-bd9a-65d680860a66.roa (raw, json) Hash identifier: 82qHvMcOMWPZ7BbuNTan3Y637de+FGLYLXlTNcMKJlo= Subject key identifier: B4:07:6D:52:AD:6F:76:13:9B:5E:7C:FC:64:20:41:F3:5D:56:0E:82 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584CB28714AB48788F297D264BE0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 54994 IP address blocks: 153.43.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:14:ab:48:78:8f:29:7d:26:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=d2d1af8c-9ee2-4937-8035-c09f05bc5797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cf:a3:e8:28:b6:07:4a:e3:cc:fe:29:d7:06: 5e:75:12:33:ef:ab:31:c0:b5:81:68:a0:3d:6d:87: 3b:04:7c:c8:d8:00:ac:a5:1c:01:ed:26:06:a6:ce: 70:bd:43:8d:3a:20:78:75:da:17:30:6a:f6:4f:2b: 36:56:30:8c:88:8b:9b:77:d8:8f:7b:89:3d:59:b3: 78:34:b1:57:fc:55:9c:6e:48:30:69:32:18:98:5a: 35:77:3f:84:74:71:ce:cf:0c:5b:12:38:6f:24:c4: dd:9c:d9:ac:f0:81:ab:a1:79:84:37:ca:49:53:59: 34:71:b8:ce:1f:10:9d:8e:35:e8:b0:21:97:82:0f: 1c:e2:bc:2d:fe:29:b8:90:74:22:f2:fb:f7:e2:a2: 7e:1e:26:3f:1b:bd:91:58:0d:1a:59:c7:e0:ef:aa: 0c:5e:05:8b:a7:00:5e:83:1f:98:dc:9b:64:d2:cf: 65:b4:93:fe:fc:19:a2:8d:04:13:c2:44:87:86:ca: 88:82:bd:ad:7b:2c:fa:db:c5:bc:13:4c:87:20:91: df:11:86:76:ab:47:37:dd:56:c9:f8:a0:f0:dc:0f: 75:16:b2:a0:87:fb:e9:75:d4:a3:81:c7:5e:bf:6f: 14:ed:68:0a:82:b2:d5:da:55:be:90:d8:87:a5:2e: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:07:6D:52:AD:6F:76:13:9B:5E:7C:FC:64:20:41:F3:5D:56:0E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ee:c9:1f:28:31:7e:cb:9b:eb:37:c2:c9:b1:0f:f7:24:30: 61:2b:7e:2c:4d:59:49:1c:62:03:0c:b1:b2:66:ac:38:02:0a: 25:e3:91:7c:0f:67:d7:f9:47:7f:4e:d3:ec:a3:97:29:fb:ca: b8:24:f1:26:89:3e:69:62:96:29:44:1f:e5:56:3a:25:f8:62: a8:07:6c:32:95:63:a7:dc:18:7a:eb:8d:3a:b1:fb:83:e3:12: 4c:bd:b4:40:b9:f0:06:e1:8c:91:7d:0d:4e:85:0e:2f:64:74: 95:84:66:83:e8:79:8a:57:e7:f4:67:b8:38:17:36:8c:9a:79: 52:cb:a5:79:d3:69:7e:4e:2f:d3:6c:0d:23:f9:7c:aa:31:68: b8:4a:f8:52:29:2c:d8:a9:6d:4c:3d:e4:68:9e:cf:ec:b1:8e: 6b:a1:a3:1a:84:50:9a:0c:09:41:8b:ed:84:1a:82:b0:26:07: 29:63:1c:39:50:dd:8e:28:75:b7:55:e6:11:27:5d:d7:0a:56: ba:a0:5f:45:1d:53:b0:74:b9:be:ac:49:a3:49:93:30:0f:b3: 49:0e:45:6d:7d:e2:eb:83:75:4f:30:aa:e7:9c:0a:96:43:04: 32:a4:af:e3:da:b2:50:31:82:e0:24:15:85:61:a7:0f:0f:b9: ce:50:6b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhxSrSHiPKX0mS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDJkMWFmOGMtOWVlMi00OTM3LTgwMzUtYzA5ZjA1YmM1Nzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM+j6Ci2B0rjzP4p1wZedRIz76sxwLWBaKA9 bYc7BHzI2ACspRwB7SYGps5wvUONOiB4ddoXMGr2Tys2VjCMiIubd9iPe4k9WbN4 NLFX/FWcbkgwaTIYmFo1dz+EdHHOzwxbEjhvJMTdnNms8IGroXmEN8pJU1k0cbjO HxCdjjXosCGXgg8c4rwt/im4kHQi8vv34qJ+HiY/G72RWA0aWcfg76oMXgWLpwBe gx+Y3Jtk0s9ltJP+/BmijQQTwkSHhsqIgr2teyz628W8E0yHIJHfEYZ2q0c33VbJ +KDw3A91FrKgh/vpddSjgcdev28U7WgKgrLV2lW+kNiHpS7/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQHbVKtb3YTm158/GQgQfNdVg6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYTY1NWUwNTMtODQ0NS0z NmNhLWJkOWEtNjVkNjgwODYwYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbuyR8oMX7Lm+s3wsmxD/ckMGErfixNWUkcYgMMsbJmrDgCCiXjkXwP Z9f5R39O0+yjlyn7yrgk8SaJPmlililEH+VWOiX4YqgHbDKVY6fcGHrrjTqx+4Pj Eky9tEC58AbhjJF9DU6FDi9kdJWEZoPoeYpX5/RnuDgXNoyaeVLLpXnTaX5OL9Ns DSP5fKoxaLhK+FIpLNipbUw95Giez+yxjmuhoxqEUJoMCUGL7YQagrAmByljHDlQ 3Y4odbdV5hEnXdcKVrqgX0UdU7B0ub6sSaNJkzAPs0kORW194uuDdU8wquecCpZD BDKkr+PaslAxguAkFYVhpw8Puc5QaxI= -----END CERTIFICATE-----Generated at Mon Mar 2 01:15:09 2026 by rpki-client