$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1f665a4d-9973-32ba-bac7-ae9dd438c88a.roa File: 1f665a4d-9973-32ba-bac7-ae9dd438c88a.roa (raw, json) Hash identifier: X8+qC2/XxtFb8+dt3zPLQBbznXkkf9P6yKrNk7DAA40= Subject key identifier: 65:F7:C9:61:1D:80:C8:D1:56:78:85:A4:9C:A3:98:DF:F7:A2:DD:E7 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E3FC471E96D454CA3F77DDF80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1f665a4d-9973-32ba-bac7-ae9dd438c88a.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 151302 IP address blocks: 153.43.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:71:e9:6d:45:4c:a3:f7:7d:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=af29d987-97e1-4d16-9e39-d0c8300794f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f2:f3:78:cf:9e:8e:d9:0f:12:73:8f:14:e8: 55:1c:0b:b9:c5:51:06:bc:5f:93:a6:26:68:75:2d: d6:bf:51:3f:59:c6:56:cd:9c:b2:a5:73:da:0c:a8: 75:5d:58:7f:28:83:2d:f3:92:0c:1a:96:97:e9:c7: 39:9e:f9:79:84:83:cc:34:6a:c8:69:58:5e:e8:fd: 96:96:7d:8b:06:07:6c:27:23:fe:80:7f:e3:de:93: 63:74:d5:d5:b6:a6:37:64:37:75:49:03:93:29:7b: ed:17:f9:70:74:15:72:2a:f8:23:1a:95:21:e2:36: 4d:0c:82:fe:93:ee:e1:f5:a3:75:68:c6:6d:f9:c6: 5f:8b:0f:4d:da:41:c3:22:35:3d:d5:48:3f:20:e0: 7d:b1:44:21:af:b2:6b:93:ef:ce:59:ce:0b:70:5d: 26:a2:f3:bb:66:87:0c:61:fc:e8:50:bd:ee:fe:67: b0:1f:e2:e7:93:ee:65:4a:da:48:c1:a1:f6:9f:fb: 04:51:77:7d:cc:8e:1f:8a:04:a4:8a:46:8f:46:cc: 63:bf:c1:88:5e:e4:dc:04:b6:1d:88:df:59:7e:ac: 41:4a:5c:7a:e8:58:7b:76:23:db:ba:27:bb:29:b9: a7:69:bc:43:34:27:88:76:96:49:be:64:85:b5:8d: 12:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F7:C9:61:1D:80:C8:D1:56:78:85:A4:9C:A3:98:DF:F7:A2:DD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1f665a4d-9973-32ba-bac7-ae9dd438c88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:75:d3:1d:d5:43:dd:c0:92:54:9a:fd:c3:8b:46:c3:e0:78: 28:f3:88:67:9e:98:9b:19:ea:38:38:59:97:5e:1a:06:07:a2: 32:8b:ba:2c:f4:f1:b4:b0:a3:62:64:ea:cb:24:ab:1d:dd:b9: 54:09:d0:03:5f:62:69:29:8b:ac:1b:ec:19:5a:9b:45:34:73: 92:3b:ca:25:98:e1:e1:91:b0:91:39:fe:8c:99:bd:cb:c7:24: 75:13:b0:02:4d:37:4b:20:18:27:b3:97:36:a1:a3:e6:3b:34: 85:f0:ef:b7:ed:02:33:78:ad:62:3b:58:86:97:0a:27:b0:a4: eb:26:52:18:13:c4:5d:c0:2c:fb:17:e6:00:70:fa:4a:16:d5: 03:fd:87:91:a5:a7:74:d9:8a:0d:78:58:c0:e7:b2:94:ac:f9: 46:0f:ba:8f:15:0a:b5:2f:33:cb:34:53:3a:ee:61:90:26:c3: 88:24:9c:49:e1:82:a8:46:7b:a6:9e:1c:6b:54:49:6e:56:20: 6f:47:40:c5:1e:f2:90:33:af:13:b7:2a:27:a3:79:97:55:1f: 1b:3f:f9:a7:79:ea:4c:47:da:51:35:6f:3a:1d:86:f8:a2:c2: 7b:5d:39:8c:f1:aa:7e:d8:19:6a:16:42:6f:76:c8:48:5b:05: e7:40:93:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xHHpbUVMo/d934AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk YWYyOWQ5ODctOTdlMS00ZDE2LTllMzktZDBjODMwMDc5NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PLzeM+ejtkPEnOPFOhVHAu5xVEGvF+TpiZo dS3Wv1E/WcZWzZyypXPaDKh1XVh/KIMt85IMGpaX6cc5nvl5hIPMNGrIaVhe6P2W ln2LBgdsJyP+gH/j3pNjdNXVtqY3ZDd1SQOTKXvtF/lwdBVyKvgjGpUh4jZNDIL+ k+7h9aN1aMZt+cZfiw9N2kHDIjU91Ug/IOB9sUQhr7Jrk+/OWc4LcF0movO7ZocM YfzoUL3u/mewH+Lnk+5lStpIwaH2n/sEUXd9zI4figSkikaPRsxjv8GIXuTcBLYd iN9ZfqxBSlx66Fh7diPbuie7KbmnabxDNCeIdpZJvmSFtY0SMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX3yWEdgMjRVniFpJyjmN/3ot3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMWY2NjVhNGQtOTk3My0z MmJhLWJhYzctYWU5ZGQ0MzhjODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh10x3VQ93AklSa/cOLRsPgeCjziGeemJsZ6jg4WZdeGgYHojKLuiz0 8bSwo2Jk6sskqx3duVQJ0ANfYmkpi6wb7Blam0U0c5I7yiWY4eGRsJE5/oyZvcvH JHUTsAJNN0sgGCezlzaho+Y7NIXw77ftAjN4rWI7WIaXCiewpOsmUhgTxF3ALPsX 5gBw+koW1QP9h5Glp3TZig14WMDnspSs+UYPuo8VCrUvM8s0UzruYZAmw4gknEnh gqhGe6aeHGtUSW5WIG9HQMUe8pAzrxO3KiejeZdVHxs/+ad56kxH2lE1bzodhvii wntdOYzxqn7YGWoWQm92yEhbBedAkxo= -----END CERTIFICATE-----Generated at Wed Jul 22 05:39:55 2026 by rpki-client