$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0de0b6eb-465c-3fd6-bfbf-fa41d4edc51c.roa File: 0de0b6eb-465c-3fd6-bfbf-fa41d4edc51c.roa (raw, json) Hash identifier: OZKqDS8GDJw6d4Fuv3enfXJdUa0jvGJKg77rKyVvquE= Subject key identifier: 64:17:EF:B8:D8:3E:B1:4F:22:52:68:14:A1:C4:06:8F:F5:A2:1B:8F Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F71EDB8EAF3A42B12ED486500 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0de0b6eb-465c-3fd6-bfbf-fa41d4edc51c.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 54994 IP address blocks: 153.43.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b8:ea:f3:a4:2b:12:ed:48:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=c2ccd68d-39a1-443f-8d84-cfecbef12574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:83:81:b6:3d:a5:fb:48:8d:56:7c:e6:84:db: d6:c9:85:f8:f3:49:40:98:22:4d:fa:61:91:6d:a9: c4:dc:cd:60:fb:be:de:f9:7f:84:ac:33:b6:f0:e0: e6:83:ce:e9:4b:95:08:f8:e3:bc:f9:ae:ca:a7:3e: da:67:21:11:ac:1b:2d:e6:89:07:8e:ec:a9:b8:51: db:90:fc:ae:f0:89:06:58:9f:d6:6f:1c:b3:3e:02: e5:d6:da:56:81:de:9d:5e:c8:ce:eb:94:a6:0d:0b: 8b:19:c9:17:88:55:a7:2f:e7:90:67:c9:86:1a:66: e0:a9:b3:3a:76:44:38:b2:1d:e9:93:9b:53:43:17: d6:14:77:3a:f0:81:05:b7:d6:09:05:e9:22:d3:96: 29:33:1f:a5:25:a6:c0:fe:67:d6:ad:84:86:60:0c: 06:24:c0:b1:75:eb:86:f9:ea:e6:18:b3:83:02:e2: b6:b9:e3:2a:18:ef:81:0d:60:9c:f1:12:28:12:05: a0:f4:49:f5:a6:90:26:74:43:91:c1:96:68:3f:33: 88:bc:f5:ab:c1:a4:e2:8e:99:6b:d6:ea:7d:d7:b0: 81:ec:7e:bb:95:e0:f9:b0:a9:d6:26:71:92:67:0a: 3a:38:0f:bf:5a:05:3a:c7:86:bf:42:f7:08:2d:f2: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:17:EF:B8:D8:3E:B1:4F:22:52:68:14:A1:C4:06:8F:F5:A2:1B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0de0b6eb-465c-3fd6-bfbf-fa41d4edc51c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a2:d0:38:0d:ae:53:1c:ba:3d:07:51:51:50:ec:4e:0a:0b: 9a:52:4b:4a:9b:64:d8:b1:56:a7:30:61:6d:90:10:2b:82:08: 58:e3:06:f7:70:98:a9:97:d0:b1:9e:07:0d:fc:92:d5:09:ef: cf:89:51:6c:3c:54:d3:26:fb:8a:66:ea:cf:c8:eb:8e:08:2e: f1:61:2d:ab:1b:62:86:8b:81:ee:f3:a5:84:0d:20:48:f3:06: 3e:22:4b:ce:fe:ed:1b:59:2e:22:fb:1f:f6:ba:d3:d5:ec:50: ab:b3:a3:35:a5:ec:1f:95:c5:1c:45:99:b3:51:8b:9f:1a:c5: 67:c1:d7:29:5a:5a:a7:94:94:15:f3:5c:ad:c1:bc:2f:e0:2b: df:dc:4d:be:a7:ba:74:d6:d7:18:e6:4f:c3:b1:b2:2b:8b:bd: 0e:12:61:da:a7:17:70:da:6d:7a:c3:c9:8c:55:aa:c1:d6:da: 62:fe:9f:2a:b2:73:61:16:79:b8:46:29:74:bd:6c:1f:cd:1d: 8a:74:d0:c8:3e:f1:67:12:82:b3:e3:d5:e2:8c:44:a9:c6:b9: d8:6c:ce:3b:c9:5b:63:62:24:1c:3b:98:c6:c7:23:2c:b9:25: ed:71:0a:12:56:fc:7f:c8:0e:81:ce:a4:ba:8a:ba:72:04:60: 0a:91:1b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bjq86QrEu1IZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YzJjY2Q2OGQtMzlhMS00NDNmLThkODQtY2ZlY2JlZjEyNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoOBtj2l+0iNVnzmhNvWyYX480lAmCJN+mGR banE3M1g+77e+X+ErDO28ODmg87pS5UI+OO8+a7Kpz7aZyERrBst5okHjuypuFHb kPyu8IkGWJ/WbxyzPgLl1tpWgd6dXsjO65SmDQuLGckXiFWnL+eQZ8mGGmbgqbM6 dkQ4sh3pk5tTQxfWFHc68IEFt9YJBeki05YpMx+lJabA/mfWrYSGYAwGJMCxdeuG +ermGLODAuK2ueMqGO+BDWCc8RIoEgWg9En1ppAmdEORwZZoPzOIvPWrwaTijplr 1up917CB7H67leD5sKnWJnGSZwo6OA+/WgU6x4a/QvcILfIlEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQX77jYPrFPIlJoFKHEBo/1ohuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMGRlMGI2ZWItNDY1Yy0z ZmQ2LWJmYmYtZmE0MWQ0ZWRjNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSukMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGi0DgNrlMcuj0HUVFQ7E4KC5pSS0qbZNixVqcwYW2QECuCCFjjBvdw mKmX0LGeBw38ktUJ78+JUWw8VNMm+4pm6s/I644ILvFhLasbYoaLge7zpYQNIEjz Bj4iS87+7RtZLiL7H/a609XsUKuzozWl7B+VxRxFmbNRi58axWfB1ylaWqeUlBXz XK3BvC/gK9/cTb6nunTW1xjmT8OxsiuLvQ4SYdqnF3DabXrDyYxVqsHW2mL+nyqy c2EWebhGKXS9bB/NHYp00Mg+8WcSgrPj1eKMRKnGudhszjvJW2NiJBw7mMbHIyy5 Je1xChJW/H/IDoHOpLqKunIEYAqRG+s= -----END CERTIFICATE-----Generated at Mon Oct 19 23:49:28 2026 by rpki-client