$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fa8be58b-ba56-3793-8f17-dd06f3461550.roa File: fa8be58b-ba56-3793-8f17-dd06f3461550.roa (raw, json) Hash identifier: Ng0PJYT4bho4QJ9sqh2bEPxmmMaMFx/yiF9W2u+U8+M= Subject key identifier: 07:1C:FA:A1:98:20:70:36:FC:17:84:20:F1:6B:24:2E:6B:E7:81:D8 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584CB81C74CF6D3B1723EF039100 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fa8be58b-ba56-3793-8f17-dd06f3461550.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 54994 IP address blocks: 153.43.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:74:cf:6d:3b:17:23:ef:03:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=33990c18-1985-4176-bad8-dab8567e5731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:4f:cc:b2:44:7b:0a:c4:99:2c:07:0f:c6: 82:a1:ae:8d:07:d5:65:1a:88:f1:b5:b8:d5:ed:04: 91:03:a7:e7:1f:ed:0f:52:e5:9a:fa:ba:de:80:2a: 22:a7:ca:09:f6:66:55:dd:61:d3:a8:84:a3:23:58: e1:3b:d6:ca:76:9a:06:8f:c9:29:f6:4c:35:18:cf: 31:9c:40:74:8b:3e:46:ac:b2:92:cb:b0:b7:21:bd: 44:d8:bc:72:c0:7a:38:34:e7:32:9e:ad:1c:52:b9: 33:00:2f:00:73:09:49:8a:b4:56:1d:86:6f:2a:58: bb:b9:38:4a:fa:50:1a:9c:9b:75:91:46:e0:88:46: 86:40:85:5f:2e:17:61:27:fc:bf:85:3c:27:1a:77: 91:41:08:7b:cd:d8:3c:0d:c0:7b:26:aa:6b:e6:b4: db:48:ae:c2:27:c4:10:ef:0c:71:85:37:ae:ff:44: 0f:a7:74:28:ff:c0:49:63:13:c8:28:38:9b:7d:3c: 91:e6:ad:f3:1c:46:95:37:78:38:92:9b:d4:c3:0f: 9b:ed:d4:3b:0c:f7:16:25:3e:de:df:c2:82:a1:33: 13:6c:1f:09:e7:8b:01:17:86:ac:d3:21:75:b6:6f: f3:4f:c9:4a:7b:1b:3f:bc:56:24:2f:77:60:f9:60: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1C:FA:A1:98:20:70:36:FC:17:84:20:F1:6B:24:2E:6B:E7:81:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fa8be58b-ba56-3793-8f17-dd06f3461550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:52:b6:b2:45:6e:0f:35:a7:c5:d4:90:c9:14:d4:ec:62:e9: 23:15:75:77:bc:0b:76:89:dd:a4:af:04:f7:09:8f:2d:75:25: 18:5a:aa:61:74:3e:5c:6d:ed:17:e5:f6:0e:dd:60:07:f2:a8: 61:2a:20:57:95:66:a9:72:37:03:c2:36:69:ea:7c:ce:f6:37: 15:56:d6:f6:5a:8c:21:e1:dd:b2:da:97:eb:14:df:5e:2e:3c: 59:a8:06:ec:f1:79:24:51:e8:3e:47:dc:9c:74:ad:62:bb:8a: ef:61:1f:00:27:9e:6d:1b:e2:05:4a:b8:88:b9:b5:23:fa:19: 36:19:0f:0a:ce:19:92:7a:e0:7a:dd:54:8c:ef:8c:3d:28:67: 21:d3:e3:6a:16:da:e8:cc:3a:89:61:39:99:89:6e:0b:7c:00: c1:04:55:24:84:21:6d:b2:a0:ba:e7:c9:5d:47:4e:7a:7b:2b: a9:c6:ed:fc:9a:f8:22:ba:5f:a4:36:4d:f9:ce:91:71:da:46: ef:38:70:03:64:9d:e5:b4:25:52:da:e7:aa:06:53:60:74:dc: 3b:dc:3a:91:8f:1d:e0:3e:a2:92:90:26:a4:7f:6a:f1:8a:f7: 4d:37:64:68:ed:82:29:30:03:d9:17:54:98:21:b3:57:7b:df: bb:fa:d8:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HHTPbTsXI+8DkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk MzM5OTBjMTgtMTk4NS00MTc2LWJhZDgtZGFiODU2N2U1NzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGpPzLJEewrEmSwHD8aCoa6NB9VlGojxtbjV 7QSRA6fnH+0PUuWa+rregCoip8oJ9mZV3WHTqISjI1jhO9bKdpoGj8kp9kw1GM8x nEB0iz5GrLKSy7C3Ib1E2LxywHo4NOcynq0cUrkzAC8AcwlJirRWHYZvKli7uThK +lAanJt1kUbgiEaGQIVfLhdhJ/y/hTwnGneRQQh7zdg8DcB7Jqpr5rTbSK7CJ8QQ 7wxxhTeu/0QPp3Qo/8BJYxPIKDibfTyR5q3zHEaVN3g4kpvUww+b7dQ7DPcWJT7e 38KCoTMTbB8J54sBF4as0yF1tm/zT8lKexs/vFYkL3dg+WBuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcc+qGYIHA2/BeEIPFrJC5r54HYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZmE4YmU1OGItYmE1Ni0z NzkzLThmMTctZGQwNmYzNDYxNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJStrJFbg81p8XUkMkU1Oxi6SMVdXe8C3aJ3aSvBPcJjy11JRhaqmF0 Plxt7Rfl9g7dYAfyqGEqIFeVZqlyNwPCNmnqfM72NxVW1vZajCHh3bLal+sU314u PFmoBuzxeSRR6D5H3Jx0rWK7iu9hHwAnnm0b4gVKuIi5tSP6GTYZDwrOGZJ64Hrd VIzvjD0oZyHT42oW2ujMOolhOZmJbgt8AMEEVSSEIW2yoLrnyV1HTnp7K6nG7fya +CK6X6Q2TfnOkXHaRu84cANkneW0JVLa56oGU2B03DvcOpGPHeA+opKQJqR/avGK 9003ZGjtgikwA9kXVJghs1d737v62FY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:02:43 2026 by rpki-client