$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa File: 0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa (raw, json) Hash identifier: n3wX37cDGF1SAUHOfgyBTdGPldQeaFEOaweoSB6QQsA= Subject key identifier: 3E:0A:BB:38:9D:B8:50:E4:70:A2:11:B7:F3:C9:21:EA:44:87:B7:69 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F5E62F789B7B1B744C7C9E700 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 54994 IP address blocks: 153.43.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f7:89:b7:b1:b7:44:c7:c9:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3c334355-8310-423c-835f-bd213b652bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6d:ba:2f:de:af:6c:0d:f2:d3:4d:8d:ef:a0: 92:f9:58:0c:eb:6f:80:34:f4:bd:82:0d:a4:68:09: 51:36:99:10:28:ec:a9:cc:e1:59:cd:21:2b:e1:64: e1:34:5b:2e:25:5c:3a:50:c9:64:e2:96:59:80:51: d3:9b:55:dd:38:2b:4b:c7:1a:21:1a:62:6d:c4:f6: 80:9e:f3:6d:12:a5:48:6b:d5:d7:89:c1:9a:a7:15: fc:21:11:b3:af:0a:54:58:11:ea:d9:56:48:86:eb: 3e:7e:c9:96:fd:83:a3:d5:83:9d:26:63:47:2b:f6: 3d:d4:32:bc:b3:9a:11:1f:af:14:4a:5a:05:c6:61: 71:28:4f:91:34:6d:85:e7:b0:78:3e:09:81:59:4b: 72:32:2f:3d:e8:ea:eb:8d:2f:12:6f:ac:bb:aa:43: 10:a1:00:27:2f:6e:9d:0e:3b:1a:ce:14:41:ff:44: 91:04:a8:58:2c:0b:d9:22:d9:ee:c0:fc:e1:7b:9e: 5c:6e:0a:b6:3e:d3:b6:b9:3f:e5:e6:7e:26:e1:73: b0:c7:37:67:f5:41:c4:f7:76:c0:66:dc:40:0b:6f: 8d:bd:de:10:86:c7:0d:61:b5:f0:7e:73:2f:73:da: 5e:c6:91:f1:b3:32:b9:e4:80:de:72:8f:95:ee:b0: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0A:BB:38:9D:B8:50:E4:70:A2:11:B7:F3:C9:21:EA:44:87:B7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:65:bc:4a:71:56:ac:cc:42:0b:cd:6f:77:59:14:49:be:c1: 28:d6:ac:df:69:90:30:3d:cb:1e:c1:d8:84:f9:36:f4:b1:8f: b6:81:b0:9d:b0:4c:c1:a1:d8:66:39:29:88:56:b1:cb:fe:87: b0:96:86:6f:d9:41:c4:16:e8:8a:ee:cc:e0:9f:3a:bd:2f:b4: e0:50:72:0c:59:2c:6f:28:7c:11:b8:b6:36:19:5b:5e:a8:07: 2c:37:5b:c1:af:eb:11:b4:02:e6:ee:2f:2b:05:1c:7d:7f:86: 8d:1e:32:ff:26:50:45:12:16:df:63:54:bd:9d:ac:38:98:a4: 6b:53:2d:99:92:61:69:55:9b:53:19:78:9f:bd:41:e1:d9:4e: 68:1b:6b:25:02:1d:8c:43:d9:ad:00:e4:5c:ea:9b:b6:a4:b1: 42:75:97:ab:e5:df:5d:f6:0d:a7:32:98:15:db:d5:88:39:9a: 31:69:12:68:a5:b5:8b:ee:0c:7c:63:b3:9d:8c:ea:db:d9:7d: d4:a1:7c:90:51:12:93:ed:2d:e0:48:aa:0d:a7:2c:a8:11:bc: c0:46:9f:5d:f1:70:bb:30:c9:fd:34:5e:ca:ba:c7:1d:41:7d: 5c:39:07:7e:15:c9:7e:6e:a2:29:8f:41:2e:c8:94:a0:e6:05: 51:3c:f4:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYveJt7G3RMfJ5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk M2MzMzQzNTUtODMxMC00MjNjLTgzNWYtYmQyMTNiNjUyYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m26L96vbA3y002N76CS+VgM62+ANPS9gg2k aAlRNpkQKOypzOFZzSEr4WThNFsuJVw6UMlk4pZZgFHTm1XdOCtLxxohGmJtxPaA nvNtEqVIa9XXicGapxX8IRGzrwpUWBHq2VZIhus+fsmW/YOj1YOdJmNHK/Y91DK8 s5oRH68USloFxmFxKE+RNG2F57B4PgmBWUtyMi896OrrjS8Sb6y7qkMQoQAnL26d DjsazhRB/0SRBKhYLAvZItnuwPzhe55cbgq2PtO2uT/l5n4m4XOwxzdn9UHE93bA ZtxAC2+Nvd4QhscNYbXwfnMvc9pexpHxszK55IDeco+V7rCSIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4KuziduFDkcKIRt/PJIepEh7dpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMGVkOGNmY2MtY2I4ZS0z MWE2LTlhYTktODU5ODE0ZmZiNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExlvEpxVqzMQgvNb3dZFEm+wSjWrN9pkDA9yx7B2IT5NvSxj7aBsJ2w TMGh2GY5KYhWscv+h7CWhm/ZQcQW6IruzOCfOr0vtOBQcgxZLG8ofBG4tjYZW16o Byw3W8Gv6xG0AubuLysFHH1/ho0eMv8mUEUSFt9jVL2drDiYpGtTLZmSYWlVm1MZ eJ+9QeHZTmgbayUCHYxD2a0A5Fzqm7aksUJ1l6vl3132DacymBXb1Yg5mjFpEmil tYvuDHxjs52M6tvZfdShfJBREpPtLeBIqg2nLKgRvMBGn13xcLswyf00Xsq6xx1B fVw5B34VyX5uoimPQS7IlKDmBVE89BM= -----END CERTIFICATE-----Generated at Mon Oct 26 08:44:21 2026 by rpki-client