$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2895eb24-a901-3487-b2e5-093e99bf65ed.roa File: 2895eb24-a901-3487-b2e5-093e99bf65ed.roa (raw, json) Hash identifier: EgEEkzXZ+JkTcFqwr/ecXcE4yrfrb1chcMgZ/6o3YK0= Subject key identifier: 09:18:D8:B3:C3:89:80:51:B0:E0:E5:D2:12:72:66:C3:9E:5E:70:7D Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E80ACB01ECE4FB1D0BB4F1A00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2895eb24-a901-3487-b2e5-093e99bf65ed.roa Signing time: Wed 15 Jul 2026 02:59:56 +0000 ROA not before: Wed 15 Jul 2026 02:59:56 +0000 ROA not after: Tue 13 Oct 2026 02:59:56 +0000 asID: 54994 IP address blocks: 153.43.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:80:ac:b0:1e:ce:4f:b1:d0:bb:4f:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 15 02:59:56 2026 GMT Not After : Oct 13 02:59:56 2026 GMT Subject: CN=1322ae93-731c-4bcd-92e0-6be0124954d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:1e:01:06:7f:3a:9e:8d:b5:fb:ad:ab:4f: c2:4b:57:20:e1:48:c1:31:28:2a:f6:f1:a3:41:db: ba:e5:3c:fc:0b:ed:56:32:45:18:49:26:2a:14:53: 48:81:ac:ab:b9:46:7a:86:40:85:a8:57:1a:c1:55: ba:16:2e:21:11:b4:b0:69:09:21:4d:fa:b0:2c:b0: 40:08:4a:56:1d:50:05:e5:e4:83:fa:df:22:74:a3: ab:5a:b9:06:23:44:c2:22:2d:17:86:6b:9d:14:35: db:b3:23:b7:a7:6b:32:38:f5:f8:c9:1e:44:bc:50: 05:39:88:22:a7:66:e6:11:25:30:6d:f8:54:c3:b9: 19:be:f6:11:ed:81:b5:a8:44:ac:bc:98:ad:b8:9d: e8:dc:21:7f:f2:57:e9:8e:1b:29:a8:b5:e2:07:20: 93:85:0b:40:00:5f:42:19:10:84:c5:c0:a0:67:0c: 5a:fb:44:70:53:06:6d:6a:82:fd:05:ca:c4:fb:66: be:38:c2:28:69:12:97:31:21:30:68:55:50:6f:df: 93:fa:6e:84:11:27:8f:33:a6:55:33:c9:72:f0:73: 9a:c1:f5:f3:53:c0:90:0f:b3:21:77:56:f4:c2:e7: 2b:31:cb:9a:81:ee:ab:18:05:88:bd:ae:cb:fa:5e: 6f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:18:D8:B3:C3:89:80:51:B0:E0:E5:D2:12:72:66:C3:9E:5E:70:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2895eb24-a901-3487-b2e5-093e99bf65ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d0:ea:bc:a6:dc:e5:ce:d0:8e:bf:bc:99:da:44:37:6c:8d: 63:9e:13:23:47:43:87:06:68:1e:6e:58:33:72:4c:8e:88:2a: da:f1:65:f9:aa:f1:83:8e:c2:35:c4:a0:77:9d:26:c8:cc:c1: fe:da:1e:aa:56:5d:ec:f3:4c:8e:58:b4:f4:0a:74:bd:2a:52: 26:f7:ea:16:27:b5:26:68:bc:64:47:61:31:b8:4f:b6:c8:46: 69:60:7a:0c:ed:fb:d2:6a:0d:6a:95:99:e1:f5:6b:8a:6f:56: 20:36:a3:e9:7a:52:36:bd:61:51:9c:a0:60:bf:bf:a4:fe:ce: 3e:14:d2:53:8d:90:50:18:c9:1e:54:38:31:62:57:77:eb:70: 6b:04:c5:c8:03:98:bf:c2:5f:9b:d7:80:08:9e:c2:b9:0c:4e: 08:5c:6f:8f:73:ba:e4:ec:d4:fb:25:92:04:0c:0f:0d:86:6f: dc:4d:4e:f7:f2:99:0d:f6:c2:76:66:c7:fa:cc:95:29:76:43: 34:25:00:65:c3:77:c5:db:4a:a6:d1:5c:45:40:80:1c:0f:f0: 86:69:59:63:10:10:ff:77:aa:5a:13:c2:77:9b:97:c4:cb:78: 65:ec:21:38:71:19:1a:17:4a:98:1a:14:a9:84:89:fe:71:7a: bc:9e:79:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ArLAezk+x0LtPGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcxNTAyNTk1NloXDTI2MTAxMzAyNTk1NlowLzEtMCsGA1UEAxMk MTMyMmFlOTMtNzMxYy00YmNkLTkyZTAtNmJlMDEyNDk1NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms0eAQZ/Op6Ntfutq0/CS1cg4UjBMSgq9vGj Qdu65Tz8C+1WMkUYSSYqFFNIgayruUZ6hkCFqFcawVW6Fi4hEbSwaQkhTfqwLLBA CEpWHVAF5eSD+t8idKOrWrkGI0TCIi0XhmudFDXbsyO3p2syOPX4yR5EvFAFOYgi p2bmESUwbfhUw7kZvvYR7YG1qESsvJituJ3o3CF/8lfpjhspqLXiByCThQtAAF9C GRCExcCgZwxa+0RwUwZtaoL9BcrE+2a+OMIoaRKXMSEwaFVQb9+T+m6EESePM6ZV M8ly8HOawfXzU8CQD7Mhd1b0wucrMcuage6rGAWIva7L+l5vLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkY2LPDiYBRsODl0hJyZsOeXnB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjg5NWViMjQtYTkwMS0z NDg3LWIyZTUtMDkzZTk5YmY2NWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSthMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjQ6rym3OXO0I6/vJnaRDdsjWOeEyNHQ4cGaB5uWDNyTI6IKtrxZfmq 8YOOwjXEoHedJsjMwf7aHqpWXezzTI5YtPQKdL0qUib36hYntSZovGRHYTG4T7bI Rmlgegzt+9JqDWqVmeH1a4pvViA2o+l6Uja9YVGcoGC/v6T+zj4U0lONkFAYyR5U ODFiV3frcGsExcgDmL/CX5vXgAiewrkMTghcb49zuuTs1PslkgQMDw2Gb9xNTvfy mQ32wnZmx/rMlSl2QzQlAGXDd8XbSqbRXEVAgBwP8IZpWWMQEP93qloTwnebl8TL eGXsIThxGRoXSpgaFKmEif5xeryeeV0= -----END CERTIFICATE-----Generated at Tue Jul 21 19:39:35 2026 by rpki-client