$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa File: 28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa (raw, json) Hash identifier: fUxTuJt/JsaKlt8xEjhc4cBybJTViTbYEh7THkNnfD0= Subject key identifier: 8E:09:5A:23:2C:8B:DC:AE:B9:2C:A1:E5:A3:24:A3:7D:63:97:E0:E5 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EEBECA1EA37388D1E9CBB6D00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa Signing time: Sat 22 Aug 2026 13:00:12 +0000 ROA not before: Sat 22 Aug 2026 13:00:12 +0000 ROA not after: Fri 20 Nov 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:ec:a1:ea:37:38:8d:1e:9c:bb:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 22 13:00:12 2026 GMT Not After : Nov 20 14:00:12 2026 GMT Subject: CN=d1acb075-f624-4c26-ac8a-29c3b29c5192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:4d:45:53:7e:13:91:2b:5b:77:43:65:3c: 15:70:6e:d9:f3:1a:38:dc:1d:6a:f2:b2:a3:4f:dd: 02:18:15:87:e0:7c:41:d5:66:9b:27:30:c0:d4:39: 6c:e1:c9:71:24:a5:20:f5:9c:d9:ba:37:19:6d:e3: 51:5a:f8:44:dd:a4:65:35:d2:0f:7f:10:7e:05:b0: bd:16:89:91:d0:6c:a8:5b:0d:52:3e:c3:f5:25:b0: cb:5a:b8:6f:79:ef:3e:b0:84:ef:f3:f3:6d:90:db: 69:72:2b:25:23:9d:58:3f:27:04:95:f0:05:51:20: f6:e9:a2:d7:54:df:e4:ce:33:22:56:07:e0:48:40: 61:19:f0:e4:4c:88:11:6b:2c:34:45:d2:c9:72:30: da:22:64:95:2a:6f:2a:05:90:5e:3e:42:94:1f:97: 21:5c:f7:5a:e7:fe:37:ca:5d:d3:ea:fe:98:1b:9c: 18:ab:06:28:dd:f3:8f:fa:ae:ef:89:52:d8:d4:77: 95:8f:de:33:f7:91:51:7c:77:4f:32:50:d1:e4:93: 8f:da:05:6a:72:58:25:5b:28:d9:58:d8:8b:67:1a: 0c:19:a3:ab:b8:e1:f6:13:24:ba:aa:51:05:87:4a: 46:8a:26:35:3e:53:ff:4f:98:b4:a4:d4:9f:da:58: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:09:5A:23:2C:8B:DC:AE:B9:2C:A1:E5:A3:24:A3:7D:63:97:E0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d5:63:5c:fe:3a:9e:dc:ea:05:bb:cd:ac:d1:e3:a2:99:43: 15:1b:61:0b:87:83:2b:e8:ae:7b:ad:29:7f:8c:3b:91:02:0a: 05:cd:3b:95:73:0f:29:ea:48:c4:71:12:b8:3a:98:f8:9c:56: 30:7a:b3:6a:65:ed:d5:18:8f:ef:75:e8:86:9f:e9:1c:f7:c3: 53:b4:94:8f:ee:d6:cc:2b:2e:cd:d1:33:5d:7b:11:41:ea:16: ba:e4:a7:cc:d7:30:4a:d3:0c:77:7a:94:df:6a:aa:5e:6e:45: 5a:c1:fd:b8:6e:74:ad:e2:48:de:51:04:df:36:df:e3:a7:a6: 21:a7:31:61:ce:d2:7f:61:7e:ab:93:26:8e:e1:d9:db:41:7c: 80:21:56:33:8c:99:d6:37:07:00:10:79:0e:15:77:90:52:3d: 0e:00:54:d1:fa:c1:c4:05:f2:ec:0a:41:ee:8a:da:e3:50:4c: c6:10:6f:13:27:9a:2c:5e:16:b2:cd:4a:e4:75:b6:d9:71:41: ee:65:24:23:b4:dd:2b:3b:d8:9a:36:62:15:d4:6a:d0:13:74: 0a:76:e6:ee:eb:1d:c1:ea:0e:38:6b:5a:31:b1:ca:10:3e:a9: d5:e3:52:49:9f:1b:34:83:12:1d:f9:2f:18:5e:87:46:40:c8: 42:28:22:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7r7KHqNziNHpy7bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyMjEzMDAxMloXDTI2MTEyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDFhY2IwNzUtZjYyNC00YzI2LWFjOGEtMjljM2IyOWM1MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fFNRVN+E5ErW3dDZTwVcG7Z8xo43B1q8rKj T90CGBWH4HxB1WabJzDA1Dls4clxJKUg9ZzZujcZbeNRWvhE3aRlNdIPfxB+BbC9 FomR0GyoWw1SPsP1JbDLWrhvee8+sITv8/NtkNtpcislI51YPycElfAFUSD26aLX VN/kzjMiVgfgSEBhGfDkTIgRayw0RdLJcjDaImSVKm8qBZBePkKUH5chXPda5/43 yl3T6v6YG5wYqwYo3fOP+q7viVLY1HeVj94z95FRfHdPMlDR5JOP2gVqclglWyjZ WNiLZxoMGaOruOH2EyS6qlEFh0pGiiY1PlP/T5i0pNSf2lifawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4JWiMsi9yuuSyh5aMko31jl+DlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjhhNGRjNGYtMzhkOS0z ZWEwLWI0MjAtODMwNzk5YTVmYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDVY1z+Op7c6gW7zazR46KZQxUbYQuHgyvornutKX+MO5ECCgXNO5Vz DynqSMRxErg6mPicVjB6s2pl7dUYj+916Iaf6Rz3w1O0lI/u1swrLs3RM117EUHq Frrkp8zXMErTDHd6lN9qql5uRVrB/bhudK3iSN5RBN823+OnpiGnMWHO0n9hfquT Jo7h2dtBfIAhVjOMmdY3BwAQeQ4Vd5BSPQ4AVNH6wcQF8uwKQe6K2uNQTMYQbxMn mixeFrLNSuR1ttlxQe5lJCO03Ss72Jo2YhXUatATdAp25u7rHcHqDjhrWjGxyhA+ qdXjUkmfGzSDEh35Lxheh0ZAyEIoIg8= -----END CERTIFICATE-----Generated at Sat Sep 5 06:54:17 2026 by rpki-client