$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c3edb524-a79f-38e7-8d09-05ad1c6e580b.roa File: c3edb524-a79f-38e7-8d09-05ad1c6e580b.roa (raw, json) Hash identifier: WLKymY2nJ7u4D9s5Uo/YQxBUXig2hHp2j3f6aGG1uxk= Subject key identifier: 95:3F:35:A8:16:75:D5:C0:F8:3B:99:99:83:79:89:79:A7:B9:AC:CA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584CB81C7451A42F07FC20B14AC0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c3edb524-a79f-38e7-8d09-05ad1c6e580b.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 54994 IP address blocks: 153.43.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:74:51:a4:2f:07:fc:20:b1:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=0a3f9187-c33b-49b2-b784-90d756ab0d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:56:bb:0f:06:7b:41:d6:81:2f:b0:6c:45:1f: 74:9e:90:8c:1a:af:90:3b:fd:8e:88:af:79:d7:50: 4f:a2:c9:52:33:31:bc:ab:54:e8:41:5d:34:88:87: f4:d7:ca:34:eb:16:f7:cc:38:51:f4:42:0c:23:a1: e9:fe:37:9f:65:6f:1c:5d:0c:b3:3d:f1:45:aa:6d: ea:03:b3:5a:b1:1a:a1:95:3a:66:f4:f9:9b:77:56: 58:5f:7a:9e:f7:8f:ab:0f:4e:41:63:66:60:89:19: c3:9c:5e:e9:08:42:bb:77:7a:fe:3d:de:36:07:91: 4f:a5:19:10:38:56:8a:c4:8c:6b:cb:e6:91:a3:92: 62:b8:9e:cd:0a:a4:63:1f:f9:5e:10:0b:3e:94:b0: bd:6b:d3:c8:ca:77:3e:48:a3:9b:e3:39:7f:2d:b8: 26:47:72:09:52:4c:b4:c4:91:6c:7d:85:02:42:5d: fd:82:b7:ee:bd:5a:26:e9:64:99:75:bc:f3:be:61: 5e:99:35:49:0c:91:1d:13:23:da:02:21:e4:e5:28: 94:1b:ac:b1:8a:1f:5c:9a:6f:45:78:a9:a4:44:a9: 19:02:48:45:65:1f:4e:98:a2:2e:ab:c8:3b:48:69: b0:b5:d9:5a:22:3d:72:6e:bf:38:c7:3c:0e:fa:65: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3F:35:A8:16:75:D5:C0:F8:3B:99:99:83:79:89:79:A7:B9:AC:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/c3edb524-a79f-38e7-8d09-05ad1c6e580b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f6:98:85:7e:34:5a:d7:d7:42:34:19:ba:f0:96:84:f7:25: 03:25:c8:4a:eb:1f:98:16:83:ec:04:18:9a:a0:46:84:fd:04: cf:9e:2b:83:0a:87:e1:d5:ac:29:63:d6:ab:1c:8d:4d:66:72: 1c:64:8d:2a:fc:da:74:20:04:30:a9:2a:5a:d1:0a:2e:fe:e8: ee:f0:96:f9:58:22:56:c6:c5:d4:2f:25:66:f5:28:22:4c:3d: c1:db:cd:52:00:7f:eb:25:9d:94:5b:c5:dc:f5:d4:3d:12:0e: d9:19:45:05:49:4e:84:3c:be:65:ba:20:81:6e:84:ec:41:54: a4:c3:41:19:8a:7d:b1:a6:69:6c:e6:6e:d1:a6:e1:86:df:58: 70:e5:c9:0c:ce:0e:af:2e:4c:38:5f:48:4e:03:28:64:31:c0: aa:63:3a:63:22:91:10:8a:8d:8e:b1:ca:eb:28:fa:89:ec:e4: 07:b9:a0:f2:f4:40:e3:70:d2:14:64:b4:13:94:5d:c8:11:39: 0f:70:d7:c9:53:2c:8e:dd:93:20:d1:0f:fc:4e:90:73:43:37: 20:61:c9:db:39:98:c1:3f:72:de:21:da:a6:a3:8f:7d:1b:e3: e5:25:6f:e5:ef:b3:a4:e7:72:1f:90:52:76:a4:41:cf:56:68: 9d:49:d1:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HHRRpC8H/CCxSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MGEzZjkxODctYzMzYi00OWIyLWI3ODQtOTBkNzU2YWIwZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81a7DwZ7QdaBL7BsRR90npCMGq+QO/2OiK95 11BPoslSMzG8q1ToQV00iIf018o06xb3zDhR9EIMI6Hp/jefZW8cXQyzPfFFqm3q A7NasRqhlTpm9Pmbd1ZYX3qe94+rD05BY2ZgiRnDnF7pCEK7d3r+Pd42B5FPpRkQ OFaKxIxry+aRo5JiuJ7NCqRjH/leEAs+lLC9a9PIync+SKOb4zl/LbgmR3IJUky0 xJFsfYUCQl39grfuvVom6WSZdbzzvmFemTVJDJEdEyPaAiHk5SiUG6yxih9cmm9F eKmkRKkZAkhFZR9OmKIuq8g7SGmwtdlaIj1ybr84xzwO+mUMjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU/NagWddXA+DuZmYN5iXmnuazKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYzNlZGI1MjQtYTc5Zi0z OGU3LThkMDktMDVhZDFjNmU1ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP2mIV+NFrX10I0GbrwloT3JQMlyErrH5gWg+wEGJqgRoT9BM+eK4MK h+HVrClj1qscjU1mchxkjSr82nQgBDCpKlrRCi7+6O7wlvlYIlbGxdQvJWb1KCJM PcHbzVIAf+slnZRbxdz11D0SDtkZRQVJToQ8vmW6IIFuhOxBVKTDQRmKfbGmaWzm btGm4YbfWHDlyQzODq8uTDhfSE4DKGQxwKpjOmMikRCKjY6xyuso+ons5Ae5oPL0 QONw0hRktBOUXcgROQ9w18lTLI7dkyDRD/xOkHNDNyBhyds5mME/ct4h2qajj30b 4+Ulb+Xvs6Tnch+QUnakQc9WaJ1J0VY= -----END CERTIFICATE-----Generated at Mon Mar 2 06:26:02 2026 by rpki-client