$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fa8be58b-ba56-3793-8f17-dd06f3461550.roa File: fa8be58b-ba56-3793-8f17-dd06f3461550.roa (raw, json) Hash identifier: 9iOx46oc7flNpUdtzieuRjHQd5+YDANxZka8cnAwa6g= Subject key identifier: C4:86:AE:3D:CA:AE:A0:AA:24:E5:05:58:FA:5B:D8:73:26:04:8D:3B Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F1B6241278035293418E0AF60 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fa8be58b-ba56-3793-8f17-dd06f3461550.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:41:27:80:35:29:34:18:e0:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=c5e81700-5fb7-480f-821a-f48e6d9f6699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:33:40:4b:b1:f8:a0:94:c9:3c:33:ac:cf: a4:52:9e:3f:a1:15:82:50:63:79:49:65:17:bd:7f: 33:78:c0:2f:08:9b:f4:97:79:46:f3:a0:fa:6b:d3: d5:d1:b0:f4:d6:6f:a1:7f:9e:7a:3a:48:d4:b5:f2: 46:cb:c2:ca:59:71:02:8e:d6:9d:ca:83:d5:54:3e: 70:86:84:90:dd:4c:34:d7:bf:6d:f2:1e:c4:20:0c: 1a:15:7c:fb:01:1f:f4:ee:ec:61:ee:23:c7:17:db: 76:78:ee:69:96:97:9a:4f:c3:46:ed:2a:07:fd:17: 7f:94:d9:15:7f:1d:94:0f:fa:ff:42:3d:f7:6b:45: 33:19:ee:1d:4f:90:e0:b8:7f:bf:cd:f1:cf:13:9e: e4:66:cf:fe:e5:36:0c:5f:de:49:e2:d4:9f:b4:4d: 7a:48:95:55:fe:4d:ba:02:e4:71:77:fd:d2:7f:1d: 87:69:a4:50:c7:e8:4b:d0:f6:84:6d:bf:e9:9e:e3: 62:83:48:27:f9:9d:73:70:59:cd:eb:23:7a:cb:75: 86:e0:38:e1:66:e3:cb:5e:7a:59:6a:6b:cd:d9:db: 1f:5c:d7:fd:bc:ff:9d:e6:57:ad:ed:3c:8d:e5:30: 54:a0:30:8d:61:ad:f3:1f:5e:2d:37:f1:c0:fe:68: 95:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:86:AE:3D:CA:AE:A0:AA:24:E5:05:58:FA:5B:D8:73:26:04:8D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fa8be58b-ba56-3793-8f17-dd06f3461550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:87:44:d8:70:b5:38:fd:aa:54:74:b2:4f:8e:a0:a3:29:4e: a7:2a:e7:09:f8:2a:7c:79:39:9d:d0:ba:58:78:33:30:2e:1e: 2e:36:1a:06:92:42:f3:33:a5:a4:aa:dc:23:39:36:c2:b6:4a: 2c:a4:6b:55:51:e6:de:de:77:19:6e:d4:b2:a9:08:2d:f6:08: 34:1e:72:d1:1e:19:7c:9a:6a:31:64:28:08:59:9b:d5:2a:11: 25:41:52:be:46:e1:32:da:37:74:e9:9a:15:b0:f8:14:36:94: ff:f6:33:d4:bf:54:7d:df:4c:4d:32:ba:83:cf:e8:e8:ec:9e: 1d:dc:b7:d8:c1:ae:99:d0:56:bd:a2:1e:b9:68:d7:7c:1f:39: 22:1a:03:ca:ab:f7:5a:e3:fe:fa:a8:04:bc:da:87:65:63:3d: d3:66:45:61:8e:fe:d6:6e:ee:ba:00:56:53:ef:0f:b8:68:85: 44:04:fe:2d:5e:55:95:d6:78:01:e7:16:11:ca:66:7c:b9:01: ce:33:8d:a7:54:95:7f:c8:0e:aa:7a:24:1a:f9:0f:f7:31:e6: b7:79:b0:93:37:f9:eb:f3:a1:88:10:02:28:4a:a5:bb:18:70: d0:1c:38:b2:2e:e5:8a:e2:d9:68:3b:73:dc:5d:08:3a:81:4c: fb:4c:f3:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYkEngDUpNBjgr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YzVlODE3MDAtNWZiNy00ODBmLTgyMWEtZjQ4ZTZkOWY2Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYozQEux+KCUyTwzrM+kUp4/oRWCUGN5SWUX vX8zeMAvCJv0l3lG86D6a9PV0bD01m+hf556OkjUtfJGy8LKWXECjtadyoPVVD5w hoSQ3Uw0179t8h7EIAwaFXz7AR/07uxh7iPHF9t2eO5plpeaT8NG7SoH/Rd/lNkV fx2UD/r/Qj33a0UzGe4dT5DguH+/zfHPE57kZs/+5TYMX95J4tSftE16SJVV/k26 AuRxd/3Sfx2HaaRQx+hL0PaEbb/pnuNig0gn+Z1zcFnN6yN6y3WG4DjhZuPLXnpZ amvN2dsfXNf9vP+d5let7TyN5TBUoDCNYa3zH14tN/HA/miVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSGrj3KrqCqJOUFWPpb2HMmBI07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZmE4YmU1OGItYmE1Ni0z NzkzLThmMTctZGQwNmYzNDYxNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyHRNhwtTj9qlR0sk+OoKMpTqcq5wn4Knx5OZ3Qulh4MzAuHi42GgaS QvMzpaSq3CM5NsK2Siyka1VR5t7edxlu1LKpCC32CDQectEeGXyaajFkKAhZm9Uq ESVBUr5G4TLaN3TpmhWw+BQ2lP/2M9S/VH3fTE0yuoPP6Ojsnh3ct9jBrpnQVr2i Hrlo13wfOSIaA8qr91rj/vqoBLzah2VjPdNmRWGO/tZu7roAVlPvD7hohUQE/i1e VZXWeAHnFhHKZny5Ac4zjadUlX/IDqp6JBr5D/cx5rd5sJM3+evzoYgQAihKpbsY cNAcOLIu5Yri2Wg7c9xdCDqBTPtM86E= -----END CERTIFICATE-----Generated at Tue Sep 22 10:06:00 2026 by rpki-client