$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/df33903b-ff49-33ff-a048-c2d4f6347955.roa File: df33903b-ff49-33ff-a048-c2d4f6347955.roa (raw, json) Hash identifier: ualGfiwfdfwHVwv6tOdi0ylNYEyCWJtCofb20M6XRfw= Subject key identifier: 32:9B:99:CE:B8:C5:5E:5D:38:4B:B0:B1:11:F7:92:83:D7:9F:59:DD Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F1F924A15A69A49BDB375B380 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/df33903b-ff49-33ff-a048-c2d4f6347955.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:4a:15:a6:9a:49:bd:b3:75:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=75851b7a-f951-40fd-b8fc-fec419d99ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:51:5a:05:4d:40:ae:ff:3a:42:73:07:29:01: b1:e6:d0:60:76:dd:8a:28:b2:3d:8a:5e:55:e7:45: b8:09:4d:37:9a:94:73:61:ba:5e:a6:57:6c:43:e7: 5a:16:17:68:6e:31:53:8a:3a:d1:3f:c1:1d:fa:04: 8b:c5:50:5e:df:7e:16:d0:2e:07:6d:9c:33:f6:37: 43:13:1b:ea:d9:0f:0a:e2:b8:b5:c2:ba:7f:74:3a: e4:9d:ee:14:66:96:b6:9b:0f:15:38:cd:6f:b1:cc: 0c:83:af:46:c4:20:f9:ab:0e:23:70:f4:d4:b2:02: 94:4e:c3:6e:2d:09:7f:b9:7c:b2:d0:d3:1c:df:f6: e4:bb:ba:0d:e6:3a:c9:09:2d:c5:8f:c9:85:9c:82: b7:cc:42:fa:5f:ce:50:c0:43:52:1e:99:25:11:2f: ce:4b:f2:5d:cd:1b:c7:26:12:a9:e5:cb:a7:79:e2: 5d:d0:0c:d6:73:10:7d:4c:27:de:f9:eb:82:aa:9b: 4d:a7:b6:57:81:64:08:b4:36:65:d6:35:fd:e2:79: 9f:16:4c:79:e8:b9:d8:2a:25:7e:60:27:42:e7:4e: 51:9d:c2:0c:d8:08:38:aa:78:b0:08:4b:2a:df:7c: 92:f5:b9:85:fd:98:81:95:b8:21:e2:e3:d4:cd:76: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:99:CE:B8:C5:5E:5D:38:4B:B0:B1:11:F7:92:83:D7:9F:59:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/df33903b-ff49-33ff-a048-c2d4f6347955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:dc:0b:a7:d2:71:2b:ad:56:55:5c:9a:f3:32:8e:e1:e1:5a: 83:27:9f:97:cf:f9:aa:cc:41:7f:b3:9d:3a:28:72:13:3f:64: 8f:fb:66:2a:01:63:34:ec:dd:85:30:7a:75:e9:6f:56:a5:43: f5:d5:35:11:b6:61:ec:6b:c7:fe:a8:96:29:de:7f:73:8f:42: 46:9c:24:5e:f2:33:ed:ec:9a:31:01:eb:db:f8:e4:4e:84:e1: f3:c2:ac:e6:23:a2:95:01:c2:a4:07:71:3d:b4:a2:91:99:bf: 79:af:f1:c1:63:fa:a0:64:db:cf:43:53:d6:98:88:06:c1:68: 0e:f5:53:76:8c:da:34:24:a9:37:48:d8:c6:dc:f7:e6:48:f6: 6e:27:ce:19:95:d9:fb:49:9b:e1:af:1c:9b:69:fb:81:8e:ae: ab:9c:a9:84:15:bb:14:7c:b6:cc:47:ff:5c:e4:cd:bf:bf:13: 60:1c:ce:f4:af:5d:d8:e8:02:7a:50:99:6a:31:94:4e:2b:3e: 24:8e:cb:66:90:74:60:8a:28:62:38:a0:33:72:5d:08:24:da: 8e:d3:b0:1a:41:03:bb:78:8a:36:d3:85:57:8f:d5:1a:2b:c0: 3f:c7:55:e6:10:89:63:84:35:ae:8d:e7:8c:40:69:82:30:23: d3:78:2e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkoVpppJvbN1s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk NzU4NTFiN2EtZjk1MS00MGZkLWI4ZmMtZmVjNDE5ZDk5ZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1FaBU1Arv86QnMHKQGx5tBgdt2KKLI9il5V 50W4CU03mpRzYbpepldsQ+daFhdobjFTijrRP8Ed+gSLxVBe334W0C4HbZwz9jdD Exvq2Q8K4ri1wrp/dDrkne4UZpa2mw8VOM1vscwMg69GxCD5qw4jcPTUsgKUTsNu LQl/uXyy0NMc3/bku7oN5jrJCS3Fj8mFnIK3zEL6X85QwENSHpklES/OS/JdzRvH JhKp5cuneeJd0AzWcxB9TCfe+euCqptNp7ZXgWQItDZl1jX94nmfFkx56LnYKiV+ YCdC505RncIM2Ag4qniwCEsq33yS9bmF/ZiBlbgh4uPUzXZPxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKbmc64xV5dOEuwsRH3koPXn1ndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZGYzMzkwM2ItZmY0OS0z M2ZmLWEwNDgtYzJkNGY2MzQ3OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3cC6fScSutVlVcmvMyjuHhWoMnn5fP+arMQX+znToochM/ZI/7ZioB YzTs3YUwenXpb1alQ/XVNRG2Yexrx/6olinef3OPQkacJF7yM+3smjEB69v45E6E 4fPCrOYjopUBwqQHcT20opGZv3mv8cFj+qBk289DU9aYiAbBaA71U3aM2jQkqTdI 2Mbc9+ZI9m4nzhmV2ftJm+GvHJtp+4GOrqucqYQVuxR8tsxH/1zkzb+/E2AczvSv XdjoAnpQmWoxlE4rPiSOy2aQdGCKKGI4oDNyXQgk2o7TsBpBA7t4ijbThVeP1Ror wD/HVeYQiWOENa6N54xAaYIwI9N4LjM= -----END CERTIFICATE-----Generated at Tue Sep 22 19:04:23 2026 by rpki-client