$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d62db6fc-1206-304e-8e3c-f2ae1309e96b.roa File: d62db6fc-1206-304e-8e3c-f2ae1309e96b.roa (raw, json) Hash identifier: ElQHOlE9awaRMZREq0nccb2gMxYWnsRy83HquFW6RJo= Subject key identifier: 16:30:8C:0F:9E:D6:B8:26:1E:3B:CD:2A:15:23:C2:01:10:14:1E:27 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584CB81C74A1E283B66C2C0D9640 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d62db6fc-1206-304e-8e3c-f2ae1309e96b.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 54994 IP address blocks: 153.43.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:74:a1:e2:83:b6:6c:2c:0d:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=3d254f84-dc5e-4b5a-aa25-a66a07678418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:b5:88:7b:41:8a:4b:2a:9b:f6:c8:62:14: ad:cb:46:32:72:09:f7:b1:9b:5a:de:77:8d:1a:90: d1:99:b4:e0:a7:be:89:91:78:4e:73:9a:7e:b3:30: 66:7b:6d:9c:a2:4b:bd:f7:de:c4:bf:10:88:ec:47: 7b:9f:e7:33:a0:d5:0c:f6:58:e8:38:2b:e3:14:cf: 15:b4:8f:c5:7c:6c:8a:ef:9d:dc:bb:ae:e1:83:26: 33:ce:23:39:82:43:1c:16:34:41:65:ca:3f:c7:12: e2:ff:16:37:75:d0:ac:1e:c8:4a:90:15:64:fc:86: a7:84:28:a0:52:cd:d4:f5:94:01:60:4b:91:bd:e9: 73:c5:2b:e8:27:d6:f7:0d:79:80:d2:18:ad:53:7e: 43:5c:8f:25:7f:85:c1:a9:bb:49:ec:51:8f:da:bf: 94:50:d7:7d:9e:3e:9e:f9:33:a8:c7:21:be:ed:ae: b2:71:d5:f8:68:23:3d:bb:ef:39:66:4a:75:36:94: ac:ee:f5:95:0a:43:4e:a6:4a:13:07:d0:a8:78:86: 0f:9c:27:21:7f:80:ca:ba:75:e7:ac:b9:f0:e9:a4: 13:ce:5c:fd:46:ea:ca:55:76:5b:88:30:62:8c:e6: e4:17:a6:f6:12:8d:b9:d5:2b:ec:89:22:14:20:d4: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:30:8C:0F:9E:D6:B8:26:1E:3B:CD:2A:15:23:C2:01:10:14:1E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/d62db6fc-1206-304e-8e3c-f2ae1309e96b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:54:8e:43:0b:1d:15:e3:43:b1:ec:35:70:9c:d8:e8:8a:8d: 00:fe:50:90:3e:13:d4:a0:e7:c5:06:98:e0:36:6d:8b:ae:2b: 29:5b:6c:f0:5b:6d:b8:7b:11:a9:47:da:f3:8f:07:37:dc:5c: 8c:db:9c:35:53:e4:51:d0:23:c6:2c:9b:d9:2e:4a:db:67:4b: 13:0f:db:ae:94:5e:33:d0:50:72:07:e8:30:30:26:2d:8d:eb: e7:be:96:91:55:21:7c:62:d1:b1:0c:bd:6e:fb:5f:48:64:de: 7e:5c:9d:6d:2c:8d:2d:a3:43:f9:d6:da:a2:d4:7a:b7:86:f3: 6f:e2:4f:42:59:e7:d8:4d:34:c1:35:6b:e4:90:08:79:86:81: b0:0b:19:e0:39:57:98:59:1b:ef:3e:55:51:d4:8a:9b:83:39: c0:ac:ef:a2:d2:f1:55:3d:99:c5:36:71:d5:de:5c:41:b9:d5: 2f:72:38:61:41:66:d4:ff:ad:c9:ca:cf:02:f6:02:d9:45:e4: ca:73:c8:9d:3a:48:bb:a0:3a:6a:2f:61:8e:e9:2e:d3:3e:d0: a3:c6:ed:40:5c:bc:a2:66:7c:93:8e:8b:13:50:de:88:91:5c: c4:32:d3:ef:ba:76:2e:48:38:fe:b3:cb:50:58:af:05:ae:e3: db:a0:87:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HHSh4oO2bCwNlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk M2QyNTRmODQtZGM1ZS00YjVhLWFhMjUtYTY2YTA3Njc4NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7+1iHtBiksqm/bIYhSty0Yycgn3sZta3neN GpDRmbTgp76JkXhOc5p+szBme22coku9997EvxCI7Ed7n+czoNUM9ljoOCvjFM8V tI/FfGyK753cu67hgyYzziM5gkMcFjRBZco/xxLi/xY3ddCsHshKkBVk/IanhCig Us3U9ZQBYEuRvelzxSvoJ9b3DXmA0hitU35DXI8lf4XBqbtJ7FGP2r+UUNd9nj6e +TOoxyG+7a6ycdX4aCM9u+85Zkp1NpSs7vWVCkNOpkoTB9CoeIYPnCchf4DKunXn rLnw6aQTzlz9RurKVXZbiDBijObkF6b2Eo251SvsiSIUINS7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYwjA+e1rgmHjvNKhUjwgEQFB4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZDYyZGI2ZmMtMTIwNi0z MDRlLThlM2MtZjJhZTEzMDllOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVUjkMLHRXjQ7HsNXCc2OiKjQD+UJA+E9Sg58UGmOA2bYuuKylbbPBb bbh7EalH2vOPBzfcXIzbnDVT5FHQI8Ysm9kuSttnSxMP266UXjPQUHIH6DAwJi2N 6+e+lpFVIXxi0bEMvW77X0hk3n5cnW0sjS2jQ/nW2qLUereG82/iT0JZ59hNNME1 a+SQCHmGgbALGeA5V5hZG+8+VVHUipuDOcCs76LS8VU9mcU2cdXeXEG51S9yOGFB ZtT/rcnKzwL2AtlF5MpzyJ06SLugOmovYY7pLtM+0KPG7UBcvKJmfJOOixNQ3oiR XMQy0++6di5IOP6zy1BYrwWu49ugh1w= -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:57 2026 by rpki-client