$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2df6ef0-6372-3828-b0d3-b8e7bacb3327.roa File: c2df6ef0-6372-3828-b0d3-b8e7bacb3327.roa (raw, json) Hash identifier: pXO3WN6IBfDYzZGkJKy/SOMmQT87QCqV05MQjcXugpQ= Subject key identifier: C9:7E:E7:39:05:E3:FD:3B:8A:2D:CE:F0:53:BA:A5:B2:9D:A3:D3:74 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EEEB77C5464F703A1FF9AF100 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2df6ef0-6372-3828-b0d3-b8e7bacb3327.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:7c:54:64:f7:03:a1:ff:9a:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=3f98eef5-a734-4599-859d-7c80ec2305c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:74:fa:e6:1a:97:6d:97:52:9f:99:a3:49: 84:38:f3:cf:3a:fd:78:70:93:f5:ea:7d:39:61:0d: 00:b2:19:88:a5:12:b3:07:f7:f5:16:0e:b4:6c:9c: b1:b6:8e:0f:ef:66:55:22:4d:e4:d6:94:c8:07:99: 37:50:b8:dc:9f:31:90:12:60:72:2b:4c:e9:6f:b0: c2:90:09:64:c9:e3:e1:bc:7e:35:65:eb:f8:5e:40: 93:fa:59:d6:d8:cd:a0:9c:de:73:5e:a8:7c:a7:16: 0b:75:05:58:57:d0:59:5b:c2:d1:94:ad:3c:b7:47: e7:ac:58:e7:48:fb:54:14:5b:f3:88:de:93:66:7e: d9:2b:84:a2:c5:40:84:46:02:00:9c:3b:23:92:d8: 63:25:e0:4c:55:e6:6a:fd:3b:5c:10:18:51:fb:08: 3a:7c:f4:19:c8:ba:f1:05:77:bd:28:cb:f6:9d:3c: 66:0f:2e:5e:d7:8e:76:67:c9:69:fb:7f:2e:90:9b: 1f:a7:03:4a:4c:8b:8b:f9:61:06:88:01:f1:fd:f3: c5:3f:44:c6:41:d9:57:8e:0e:66:06:3a:f6:33:c2: 02:b8:5f:f8:e0:ed:6e:2a:8a:a7:79:ec:fb:11:4c: b6:4a:8b:e5:41:ed:70:15:8b:ad:09:f0:a8:e0:b2: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7E:E7:39:05:E3:FD:3B:8A:2D:CE:F0:53:BA:A5:B2:9D:A3:D3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c2df6ef0-6372-3828-b0d3-b8e7bacb3327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1b:5e:7c:66:23:17:a8:3c:bd:75:66:0f:50:1c:1e:5a:fe: 9c:6b:f1:5c:f6:8d:4b:42:42:cd:6c:01:f3:8c:6c:93:93:b7: ff:7e:44:8e:40:14:cf:4d:b4:c4:b5:5f:bc:29:69:37:63:92: 70:22:0b:23:79:8e:a7:82:15:1f:96:4e:a4:86:22:56:6a:2e: f3:d1:29:f0:6f:d4:b3:59:5d:46:f8:e4:63:ae:11:99:16:18: e5:29:61:43:66:76:ac:2e:af:13:52:e7:2d:98:33:01:d0:12: d9:26:46:7f:5c:af:2b:0e:e5:b9:a0:c3:ce:bd:dc:87:4e:4b: 25:a7:e4:d2:0b:cb:c7:69:83:8f:60:69:b2:62:68:26:bc:69: d9:db:ba:5c:ef:cc:86:31:4a:fd:d0:4a:0d:b2:cd:8f:93:0e: 91:95:48:36:83:a1:ac:84:f7:78:44:ba:e3:2a:a3:7b:62:69: 52:22:2c:64:4f:3e:e8:3d:eb:18:3f:8c:d6:1a:25:03:28:d3: cc:33:ba:57:91:91:8a:95:f9:d5:81:f1:b4:c5:ed:9f:54:92: 76:94:18:de:18:66:3a:79:ab:ae:a3:63:8f:2f:45:de:96:91: 38:19:56:e4:f4:f3:99:36:be:a2:fc:c3:09:67:e8:f6:4c:63: f6:c1:9e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3xUZPcDof+a8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk M2Y5OGVlZjUtYTczNC00NTk5LTg1OWQtN2M4MGVjMjMwNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy50+uYal22XUp+Zo0mEOPPPOv14cJP16n05 YQ0AshmIpRKzB/f1Fg60bJyxto4P72ZVIk3k1pTIB5k3ULjcnzGQEmByK0zpb7DC kAlkyePhvH41Zev4XkCT+lnW2M2gnN5zXqh8pxYLdQVYV9BZW8LRlK08t0fnrFjn SPtUFFvziN6TZn7ZK4SixUCERgIAnDsjkthjJeBMVeZq/TtcEBhR+wg6fPQZyLrx BXe9KMv2nTxmDy5e1452Z8lp+38ukJsfpwNKTIuL+WEGiAHx/fPFP0TGQdlXjg5m Bjr2M8ICuF/44O1uKoqneez7EUy2SovlQe1wFYutCfCo4LLdEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMl+5zkF4/07ii3O8FO6pbKdo9N0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYzJkZjZlZjAtNjM3Mi0z ODI4LWIwZDMtYjhlN2JhY2IzMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSumMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIbXnxmIxeoPL11Zg9QHB5a/pxr8Vz2jUtCQs1sAfOMbJOTt/9+RI5A FM9NtMS1X7wpaTdjknAiCyN5jqeCFR+WTqSGIlZqLvPRKfBv1LNZXUb45GOuEZkW GOUpYUNmdqwurxNS5y2YMwHQEtkmRn9crysO5bmgw8693IdOSyWn5NILy8dpg49g abJiaCa8adnbulzvzIYxSv3QSg2yzY+TDpGVSDaDoayE93hEuuMqo3tiaVIiLGRP Pug96xg/jNYaJQMo08wzuleRkYqV+dWB8bTF7Z9UknaUGN4YZjp5q66jY48vRd6W kTgZVuT085k2vqL8wwln6PZMY/bBnhg= -----END CERTIFICATE-----Generated at Tue Sep 22 21:57:12 2026 by rpki-client