$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa File: 2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa (raw, json) Hash identifier: tZFwxQH6ycwvbwuqMY50fnXG3BF1oOk6Tj0f4ouTX5A= Subject key identifier: 79:08:55:32:04:49:63:F2:94:E3:D6:0D:38:CB:FB:36:7B:4C:69:83 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F49889367A32E7CAF6A192A80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.160.0/23 maxlen: 24 153.43.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:93:67:a3:2e:7c:af:6a:19:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a21ef767-8549-4d90-a864-00e33733e301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:dc:81:4e:e8:e1:79:b4:95:78:e4:e4:23: a0:62:2b:ae:b0:bb:5a:c2:24:ce:b0:c8:be:9e:a6: 15:90:65:1c:a3:a4:e5:0e:35:c6:27:2b:78:d0:3a: 63:90:29:6c:17:eb:96:40:0a:6c:53:19:3a:d0:de: f3:20:88:5f:a7:36:10:b8:e1:fd:ce:1d:e4:11:31: 8f:75:05:2d:b3:7f:05:a6:20:dc:80:80:cd:6d:4f: 45:9e:eb:c2:08:a9:5f:0b:e2:c1:f8:86:68:09:75: ae:a3:5b:bd:74:7a:30:6c:92:3c:fe:f4:0f:c2:18: f3:a7:2c:5d:67:f8:a1:7d:f1:3b:5e:94:c0:ec:fb: 2d:85:6d:cc:90:35:09:34:77:48:a0:fd:14:8b:d8: 64:07:2a:12:51:df:f3:80:e3:be:8e:c5:1b:fb:51: fd:89:c2:6c:21:2d:f4:61:00:3d:13:b3:c1:c2:e0: 2e:c1:d4:2a:4d:2f:af:a0:d0:e0:5b:a8:e4:d6:cb: 0c:5f:0c:f2:fb:2c:fc:46:64:23:0a:50:36:3f:e9: e7:15:e7:ab:1f:e3:51:5e:f5:76:80:d9:e2:88:a0: f2:49:b6:80:2c:f6:49:2c:eb:19:49:c4:2b:d0:3b: 56:10:4d:1c:f2:d5:67:08:90:4f:ab:ef:58:74:de: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:08:55:32:04:49:63:F2:94:E3:D6:0D:38:CB:FB:36:7B:4C:69:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:40:56:62:9d:b8:0f:af:8c:8a:ca:af:e3:38:86:8e:54:e8: 33:c8:97:09:2d:5a:49:73:93:5d:61:64:75:43:7c:68:ba:a4: 62:01:14:cd:6a:a7:ac:03:13:ce:a0:53:2e:21:24:f2:83:b1: 43:f8:d5:48:73:fa:c5:fb:40:69:38:40:9c:4e:a1:c1:c6:59: a9:89:f1:56:fd:2a:ae:03:3b:e7:69:54:13:cc:b7:ac:5d:30: 52:bd:04:90:2f:09:27:05:28:cd:f1:05:84:bb:e5:a4:ba:59: 72:62:0e:fb:6d:2e:e5:73:ca:10:be:34:2d:4e:1b:48:5a:42: fc:3b:a9:43:0c:b8:f7:e1:a1:d5:de:67:7d:d2:54:c0:cf:84: be:54:c8:a4:50:48:f1:87:72:a7:35:7e:9e:ca:9b:70:c6:9c: ff:e8:00:4f:bc:db:50:74:99:5e:cf:5a:10:d8:a6:dd:56:e8: 55:51:40:2d:2c:b8:31:ac:86:d3:68:39:db:2b:8e:1a:6d:78: 9e:99:5d:7e:4a:0f:f8:96:66:f7:46:77:d8:d6:e6:df:01:04: 81:bd:03:e0:67:51:ba:bc:e2:c0:e7:00:5e:3f:a3:82:7a:38: 8e:d4:80:75:4e:91:b3:4d:fe:9e:b0:a5:f0:3b:f1:72:a4:45: ea:80:3c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiJNnoy58r2oZKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTIxZWY3NjctODU0OS00ZDkwLWE4NjQtMDBlMzM3MzNlMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghjcgU7o4Xm0lXjk5COgYiuusLtawiTOsMi+ nqYVkGUco6TlDjXGJyt40DpjkClsF+uWQApsUxk60N7zIIhfpzYQuOH9zh3kETGP dQUts38FpiDcgIDNbU9FnuvCCKlfC+LB+IZoCXWuo1u9dHowbJI8/vQPwhjzpyxd Z/ihffE7XpTA7PsthW3MkDUJNHdIoP0Ui9hkByoSUd/zgOO+jsUb+1H9icJsIS30 YQA9E7PBwuAuwdQqTS+voNDgW6jk1ssMXwzy+yz8RmQjClA2P+nnFeerH+NRXvV2 gNniiKDySbaALPZJLOsZScQr0DtWEE0c8tVnCJBPq+9YdN4eBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkIVTIESWPylOPWDTjL+zZ7TGmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMmNmNmNhNzUtMzZiOS0z NjI0LWI2ZjItZTIxZWIwYWI2OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmSugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVAVmKduA+vjIrKr+M4ho5U6DPIlwktWklzk11hZHVDfGi6pGIBFM1q p6wDE86gUy4hJPKDsUP41Uhz+sX7QGk4QJxOocHGWamJ8Vb9Kq4DO+dpVBPMt6xd MFK9BJAvCScFKM3xBYS75aS6WXJiDvttLuVzyhC+NC1OG0haQvw7qUMMuPfhodXe Z33SVMDPhL5UyKRQSPGHcqc1fp7Km3DGnP/oAE+821B0mV7PWhDYpt1W6FVRQC0s uDGshtNoOdsrjhpteJ6ZXX5KD/iWZvdGd9jW5t8BBIG9A+BnUbq84sDnAF4/o4J6 OI7UgHVOkbNN/p6wpfA78XKkReqAPI0= -----END CERTIFICATE-----Generated at Mon Oct 19 02:16:33 2026 by rpki-client