$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa File: 28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa (raw, json) Hash identifier: EMo7Rg7202DIg+dyFs/mBLvRNOlbEO/9U5P77BsI0tQ= Subject key identifier: B6:CA:61:D8:AA:4F:B3:6C:92:B3:E7:65:84:16:DD:C2:6A:2D:A0:91 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F8DD89731468831875AD5EE40 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:97:31:46:88:31:87:5a:d5:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=e2f3ee62-e8da-4a36-bbe6-d189a32ec28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:1c:9c:6b:75:64:b1:98:26:ea:0c:d8:57: f6:80:cd:25:18:1f:52:e4:fc:99:98:5b:40:36:ad: ce:f2:ce:9b:0e:00:cc:fe:6a:0a:fc:38:b6:25:70: 70:1a:79:81:10:f5:29:ea:cc:55:9b:76:67:9d:dc: 8a:7e:c5:17:9f:59:8e:05:44:19:2d:16:7d:69:13: cd:b8:00:28:7e:5b:04:d9:e5:fa:00:3f:8a:fd:b3: cb:49:16:e2:ca:d3:2b:49:c7:61:a8:50:c8:b7:77: 1e:e9:22:b0:27:46:c9:98:e1:0b:d5:d2:18:f1:c0: 7c:8c:d1:44:c7:e0:18:7e:41:75:a8:97:ad:99:dc: 18:04:a2:e9:57:47:b2:e4:e9:b7:fa:aa:dd:3f:40: 16:76:2d:b3:9b:f1:69:ee:36:be:e5:23:40:77:c2: a6:82:2c:96:d3:02:49:c1:1d:d4:a2:13:c3:68:41: 11:0d:0d:17:54:96:38:c4:b7:2a:52:91:8d:e5:f7: 0d:85:69:31:ed:df:35:19:5b:39:24:b4:dc:f6:64: ab:f0:ff:df:b3:13:7d:7b:6b:f5:a7:92:98:5f:02: 28:79:db:cd:a6:46:0f:e8:80:f2:64:ba:7e:f9:de: a9:ba:1a:db:79:83:c3:a0:14:67:a8:9b:08:c2:05: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CA:61:D8:AA:4F:B3:6C:92:B3:E7:65:84:16:DD:C2:6A:2D:A0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:89:47:b9:f6:d2:13:97:6c:2d:71:a2:7f:c3:6b:3c:5b:72: 70:92:39:c2:50:d2:18:1e:ce:97:1b:5d:cf:66:bf:e7:0b:3a: 1c:fe:e4:44:d5:90:98:86:db:ed:92:a6:97:e5:bd:eb:0e:18: 71:be:78:5c:07:55:68:2e:e1:c4:f0:b1:66:e9:89:a8:c2:71: 03:2b:27:66:7f:39:34:22:ec:a2:3f:21:a9:56:f8:39:8b:e2: d5:4f:2d:b2:7a:fc:cd:11:2a:0c:4f:eb:95:66:25:23:2a:fa: 2c:a7:28:44:02:a5:14:6c:21:45:55:38:99:0a:15:f5:86:a0: 07:a6:67:c5:b4:d2:76:d7:3c:9d:cb:fd:e8:0b:67:14:7c:f9: 4e:f2:32:1b:74:e9:5c:a7:6e:ed:33:84:1f:89:63:05:f3:67: 9f:3c:50:b7:be:29:6a:34:aa:fa:96:93:45:1a:d0:e5:5e:88: fa:81:fe:22:aa:9a:1a:4e:9f:69:50:16:70:53:4a:ed:fa:0f: b0:0f:e1:18:e3:98:cd:a5:36:76:aa:63:4e:e5:1b:48:25:52: 7e:57:3d:d5:d1:5a:47:d9:9a:7b:e2:be:ba:31:f5:49:d6:40: d4:72:97:d3:bc:10:5e:4a:67:02:1b:03:73:bf:a5:cf:a2:3b: e9:b9:07:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2JcxRogxh1rV7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ZTJmM2VlNjItZThkYS00YTM2LWJiZTYtZDE4OWEzMmVjMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru8cnGt1ZLGYJuoM2Ff2gM0lGB9S5PyZmFtA Nq3O8s6bDgDM/moK/Di2JXBwGnmBEPUp6sxVm3ZnndyKfsUXn1mOBUQZLRZ9aRPN uAAoflsE2eX6AD+K/bPLSRbiytMrScdhqFDIt3ce6SKwJ0bJmOEL1dIY8cB8jNFE x+AYfkF1qJetmdwYBKLpV0ey5Om3+qrdP0AWdi2zm/Fp7ja+5SNAd8KmgiyW0wJJ wR3UohPDaEERDQ0XVJY4xLcqUpGN5fcNhWkx7d81GVs5JLTc9mSr8P/fsxN9e2v1 p5KYXwIoedvNpkYP6IDyZLp++d6puhrbeYPDoBRnqJsIwgUyKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbKYdiqT7NskrPnZYQW3cJqLaCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjhhNGRjNGYtMzhkOS0z ZWEwLWI0MjAtODMwNzk5YTVmYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuJR7n20hOXbC1xon/DazxbcnCSOcJQ0hgezpcbXc9mv+cLOhz+5ETV kJiG2+2SppflvesOGHG+eFwHVWgu4cTwsWbpiajCcQMrJ2Z/OTQi7KI/IalW+DmL 4tVPLbJ6/M0RKgxP65VmJSMq+iynKEQCpRRsIUVVOJkKFfWGoAemZ8W00nbXPJ3L /egLZxR8+U7yMht06Vynbu0zhB+JYwXzZ588ULe+KWo0qvqWk0Ua0OVeiPqB/iKq mhpOn2lQFnBTSu36D7AP4RjjmM2lNnaqY07lG0glUn5XPdXRWkfZmnvivrox9UnW QNRyl9O8EF5KZwIbA3O/pc+iO+m5Bw4= -----END CERTIFICATE-----Generated at Wed Oct 28 00:17:33 2026 by rpki-client