$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f430a50d-2a0d-3ed4-9dd9-db47607552b8.roa File: f430a50d-2a0d-3ed4-9dd9-db47607552b8.roa (raw, json) Hash identifier: 3zkTfUXCN9eZ72RgYoBKZSiE2/+XoJ/qv69RHKSoc4Y= Subject key identifier: 52:3F:16:EA:3B:C1:57:51:12:43:A8:2B:06:1D:AA:C2:1B:21:94:ED Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F2EED27A6B1466A4A44C24200 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f430a50d-2a0d-3ed4-9dd9-db47607552b8.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:27:a6:b1:46:6a:4a:44:c2:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=d7ab97ee-870d-44d7-9cc4-effdd1bd6b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:a0:40:cc:76:ff:47:ea:a0:ba:22:2d:ed: 46:1c:61:52:aa:6a:c8:1e:42:f7:61:5d:8e:5b:5a: 62:4e:dd:84:78:9c:68:da:5d:81:51:f6:f5:6b:48: b4:83:39:50:77:80:e7:4f:68:12:1e:9c:66:84:28: a3:57:71:7d:68:68:3c:8b:70:46:23:9c:60:db:b2: 10:13:00:50:48:6e:65:24:63:ac:83:b2:f9:b5:3f: 02:0e:ce:ad:8c:ae:f0:53:cc:a2:b4:1d:03:08:e3: 06:6a:2e:3d:fd:13:63:d1:b0:73:cf:81:e4:b5:b5: ea:76:d6:c5:de:37:17:b7:6b:58:84:38:bd:c2:db: 82:4d:23:4c:01:44:d6:48:7f:db:ad:4c:3b:7c:40: fd:b2:5e:7c:48:b8:77:89:9b:51:94:f4:be:3b:e3: 80:f3:b8:27:d7:4c:9a:70:ec:2c:6d:90:a1:42:49: 57:23:22:eb:1c:86:d9:11:d5:5e:3e:6b:8b:87:70: db:a5:93:d5:85:44:58:4b:c2:a0:5d:18:67:08:04: f1:ca:c9:ef:fd:7b:b6:d3:e1:8f:1b:99:d2:cb:0c: 24:68:f7:1c:1a:33:c2:1b:60:d0:58:7d:99:5d:b7: 45:24:35:f0:bc:ac:45:ad:3f:aa:30:01:38:52:a7: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3F:16:EA:3B:C1:57:51:12:43:A8:2B:06:1D:AA:C2:1B:21:94:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f430a50d-2a0d-3ed4-9dd9-db47607552b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:72:3d:85:e3:ae:2e:c3:03:8a:f1:1e:50:3a:db:d6:34:17: 15:84:15:d5:c8:ed:d0:2a:41:5d:ad:01:9f:6b:22:1e:ad:84: 0f:dc:73:43:90:0d:d7:15:74:22:a0:89:41:b8:1f:00:17:e8: 12:23:06:74:39:4c:71:3d:54:1b:13:96:71:8d:5c:10:8e:c0: 8c:ad:a6:60:01:db:7d:16:be:a5:5a:6f:e8:60:89:98:dd:b9: 3c:57:6b:96:d2:e2:0c:14:49:83:b8:f3:76:07:17:83:77:5d: 6e:5c:01:bc:d6:3d:8f:b9:86:ae:1c:74:12:e3:69:93:bc:44: ea:b4:0b:2a:f3:0a:89:20:7a:bc:ec:19:55:69:2c:5a:3c:98: 62:08:df:0c:49:42:48:4c:77:7d:83:55:61:70:8a:ff:ad:4a: f7:d6:56:e9:d2:84:f9:e9:a8:bb:d6:a9:5d:01:a8:6f:f8:37: 89:db:c2:98:ee:ed:30:17:14:f6:38:0b:3e:a1:ce:49:21:9c: e7:05:d7:6e:a1:0e:86:1a:2d:fe:c0:42:20:25:b9:b1:3d:6f: 7f:1b:6a:34:ba:46:c5:f1:61:ae:d9:cc:1b:0c:9f:44:e7:7c: b5:c2:48:c3:b2:5d:0c:66:a1:a0:c9:8f:16:4b:12:b1:32:4b: a4:a0:fb:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7SemsUZqSkTCQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDdhYjk3ZWUtODcwZC00NGQ3LTljYzQtZWZmZGQxYmQ2Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcWgQMx2/0fqoLoiLe1GHGFSqmrIHkL3YV2O W1piTt2EeJxo2l2BUfb1a0i0gzlQd4DnT2gSHpxmhCijV3F9aGg8i3BGI5xg27IQ EwBQSG5lJGOsg7L5tT8CDs6tjK7wU8yitB0DCOMGai49/RNj0bBzz4HktbXqdtbF 3jcXt2tYhDi9wtuCTSNMAUTWSH/brUw7fED9sl58SLh3iZtRlPS+O+OA87gn10ya cOwsbZChQklXIyLrHIbZEdVePmuLh3DbpZPVhURYS8KgXRhnCATxysnv/Xu20+GP G5nSywwkaPccGjPCG2DQWH2ZXbdFJDXwvKxFrT+qMAE4UqdPuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFI/Fuo7wVdREkOoKwYdqsIbIZTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjQzMGE1MGQtMmEwZC0z ZWQ0LTlkZDktZGI0NzYwNzU1MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZyPYXjri7DA4rxHlA629Y0FxWEFdXI7dAqQV2tAZ9rIh6thA/cc0OQ DdcVdCKgiUG4HwAX6BIjBnQ5THE9VBsTlnGNXBCOwIytpmAB230WvqVab+hgiZjd uTxXa5bS4gwUSYO483YHF4N3XW5cAbzWPY+5hq4cdBLjaZO8ROq0CyrzCokgerzs GVVpLFo8mGII3wxJQkhMd32DVWFwiv+tSvfWVunShPnpqLvWqV0BqG/4N4nbwpju 7TAXFPY4Cz6hzkkhnOcF126hDoYaLf7AQiAlubE9b38bajS6RsXxYa7ZzBsMn0Tn fLXCSMOyXQxmoaDJjxZLErEyS6Sg+3c= -----END CERTIFICATE-----Generated at Sat Sep 26 23:33:37 2026 by rpki-client