$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa File: 28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa (raw, json) Hash identifier: /NTaiFevY+GI4FmSMqJLUR4ABrReB4WY0wbW46sqxn4= Subject key identifier: 83:94:99:AB:A7:F2:F8:54:0E:59:4E:8D:64:61:FB:1D:AE:63:72:84 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E4989D8B3441936F3F2564BC0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa Signing time: Thu 25 Jun 2026 09:00:13 +0000 ROA not before: Thu 25 Jun 2026 09:00:13 +0000 ROA not after: Wed 23 Sep 2026 09:00:13 +0000 asID: 54994 IP address blocks: 153.43.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:49:89:d8:b3:44:19:36:f3:f2:56:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 25 09:00:13 2026 GMT Not After : Sep 23 09:00:13 2026 GMT Subject: CN=2f399b8d-f9c8-4304-87df-0397ef448788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:47:f2:d1:ef:07:b1:4c:f0:6e:8b:a2:b1:3c: cf:21:07:44:28:ec:63:7b:ab:4f:d6:fb:1b:45:30: 29:76:57:c6:2c:18:8c:6c:41:b7:6c:b5:16:cc:74: f7:d9:81:6e:b1:46:f3:6b:eb:7f:2b:e3:fe:72:86: a6:47:c3:08:6a:25:54:5d:be:e3:1d:86:f4:ed:ed: 48:b2:50:2d:b5:2b:4f:11:39:fb:5f:e0:5f:72:c4: 13:bf:15:63:6c:3d:5c:11:ed:9d:f1:f3:4e:08:2f: ad:2c:0e:50:17:68:13:a3:fd:71:2b:44:f4:f8:27: 81:1b:a2:49:49:23:d4:4f:6f:c9:1a:76:9b:fb:3c: fb:3f:e7:62:5f:fa:9d:9a:86:97:d7:01:1a:90:d4: b6:61:a9:28:2b:fc:e4:89:e9:5b:ed:5b:bd:76:fc: c9:d0:74:bb:57:bc:9b:7b:9e:8d:1b:12:65:bc:93: ae:57:fa:44:8a:05:1b:b3:fc:25:c1:78:ee:e7:5c: 93:53:a7:9c:6e:b2:0a:ee:c9:10:e7:01:77:98:b0: 18:f5:5e:2a:a8:7b:e4:20:6d:92:43:b2:fb:d8:05: 91:e2:e8:09:bd:ce:29:73:b1:53:ec:24:88:bb:ae: b8:b0:53:84:6f:a3:44:02:90:e4:03:0b:4a:85:99: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:94:99:AB:A7:F2:F8:54:0E:59:4E:8D:64:61:FB:1D:AE:63:72:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/28a4dc4f-38d9-3ea0-b420-830799a5fc9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b3:f6:b0:d9:5a:e4:d6:f2:07:55:39:e7:93:92:27:89:b7: f2:a4:80:9b:a4:29:03:3b:0a:15:aa:48:75:68:a9:39:97:f6: bb:2b:ac:98:bd:0d:2d:b2:4d:e6:69:80:b7:0e:17:d4:d3:ff: fd:26:03:26:6a:b6:ac:8b:0b:fc:41:08:70:4d:b5:9e:ed:86: a9:e8:43:cf:f9:2f:0c:19:11:d8:55:fb:e3:bd:55:ac:f9:8d: 21:74:32:10:6c:eb:4f:00:62:3c:6c:3b:a1:eb:fb:b0:92:a9: 40:da:d3:08:52:a7:e5:0f:28:c1:12:33:d4:10:20:9f:6b:18: b8:b4:32:20:87:2d:75:17:ce:6f:dd:a9:9e:01:30:39:c3:ea: fe:7b:2e:ed:04:63:75:9b:6a:e7:a6:b1:6c:aa:5d:fd:79:1b: 95:70:3d:d2:c8:3b:4b:8c:70:63:2e:f6:28:79:e8:ec:e2:91: df:37:f3:a8:6d:49:f9:73:21:bd:50:ed:b3:5b:30:a3:75:f9: 8a:ec:38:01:69:d2:39:c4:e6:1d:1e:55:1a:10:52:73:c4:5a: 95:1b:b5:24:54:a2:9e:2d:e6:65:37:1a:da:c5:45:32:58:6b: a2:98:84:4b:58:91:54:7a:04:13:a3:e3:85:78:33:82:d2:7b: 7b:bf:33:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5JidizRBk28/JWS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk MmYzOTliOGQtZjljOC00MzA0LTg3ZGYtMDM5N2VmNDQ4Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEfy0e8HsUzwbouisTzPIQdEKOxje6tP1vsb RTApdlfGLBiMbEG3bLUWzHT32YFusUbza+t/K+P+coamR8MIaiVUXb7jHYb07e1I slAttStPETn7X+BfcsQTvxVjbD1cEe2d8fNOCC+tLA5QF2gTo/1xK0T0+CeBG6JJ SSPUT2/JGnab+zz7P+diX/qdmoaX1wEakNS2YakoK/zkielb7Vu9dvzJ0HS7V7yb e56NGxJlvJOuV/pEigUbs/wlwXju51yTU6ecbrIK7skQ5wF3mLAY9V4qqHvkIG2S Q7L72AWR4ugJvc4pc7FT7CSIu664sFOEb6NEApDkAwtKhZmDAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOUmaun8vhUDllOjWRh+x2uY3KEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjhhNGRjNGYtMzhkOS0z ZWEwLWI0MjAtODMwNzk5YTVmYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuz9rDZWuTW8gdVOeeTkieJt/KkgJukKQM7ChWqSHVoqTmX9rsrrJi9 DS2yTeZpgLcOF9TT//0mAyZqtqyLC/xBCHBNtZ7thqnoQ8/5LwwZEdhV++O9Vaz5 jSF0MhBs608AYjxsO6Hr+7CSqUDa0whSp+UPKMESM9QQIJ9rGLi0MiCHLXUXzm/d qZ4BMDnD6v57Lu0EY3WbauemsWyqXf15G5VwPdLIO0uMcGMu9ih56Ozikd8386ht SflzIb1Q7bNbMKN1+YrsOAFp0jnE5h0eVRoQUnPEWpUbtSRUop4t5mU3GtrFRTJY a6KYhEtYkVR6BBOj44V4M4LSe3u/MwA= -----END CERTIFICATE-----Generated at Tue Jul 21 19:43:43 2026 by rpki-client