$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3861691c-e9ba-3b12-a363-eca5eb210fdc.roa File: 3861691c-e9ba-3b12-a363-eca5eb210fdc.roa (raw, json) Hash identifier: rfswpIhuRYz+Zy/5KqgZaU3HV89P3mPFimyy9yCnVxc= Subject key identifier: 9D:2A:24:A1:79:F5:B4:18:9D:AE:A4:8F:7A:E8:B8:F5:08:D9:7B:C7 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F5E62B791E305420218EC5A99 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3861691c-e9ba-3b12-a363-eca5eb210fdc.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 54994 IP address blocks: 153.43.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:b7:91:e3:05:42:02:18:ec:5a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=51f99f24-7991-4a02-9de9-3b49248302fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:e3:ef:c7:4e:ad:cf:81:0f:14:f1:44:e0: fb:4f:01:e3:b3:2c:d5:77:cd:09:45:6c:42:76:06: 91:65:61:e8:c9:ca:cc:16:4f:ba:d7:68:27:ef:47: 3a:6c:d2:c2:15:da:bc:9f:a8:5f:a4:2c:89:94:0c: 91:84:b4:7f:6d:78:c8:c3:a0:61:19:5c:50:fa:62: 06:ef:15:b0:6e:95:37:41:b0:10:8e:43:11:32:7e: b9:88:09:20:a8:f4:82:1a:c4:68:83:a3:25:49:d9: b0:76:0c:6f:18:5f:e2:32:53:f3:26:53:c3:3c:f2: 41:67:8e:9d:14:92:5b:e6:1e:ca:b9:a8:13:41:9a: 7f:a5:63:55:a2:6b:2d:68:58:e4:84:53:69:8e:69: 4f:e9:28:18:06:5e:cb:d3:cb:b4:5b:2e:32:b8:7e: 08:0a:03:f5:42:ac:cd:1c:2a:23:eb:1b:cc:40:8f: 19:1f:21:54:8c:d0:40:09:04:c9:24:1a:47:59:46: 57:4d:70:71:c2:7f:93:15:d1:64:2f:30:fa:84:3e: fe:18:dc:63:be:a9:62:6f:77:3f:3f:e8:70:3f:e7: d8:93:d5:3b:c0:d9:f0:d9:c5:e4:ee:06:58:67:8e: d5:94:5b:8e:8b:a5:88:7a:e0:15:3f:83:81:69:a2: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2A:24:A1:79:F5:B4:18:9D:AE:A4:8F:7A:E8:B8:F5:08:D9:7B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3861691c-e9ba-3b12-a363-eca5eb210fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ac:ab:cd:57:b0:52:b7:90:9e:22:36:c2:ca:55:86:34:7b: bb:dd:af:ef:50:9c:15:7e:10:77:be:8e:eb:0c:1c:58:a3:38: a5:46:fc:de:db:26:ca:79:ff:ad:fa:e1:1e:ba:57:c8:e1:ca: b4:59:5a:c8:e7:18:16:c1:64:da:b6:67:0e:07:0a:5b:ee:81: a2:2a:f7:98:19:70:d8:88:4b:1c:d0:01:08:07:72:b4:d0:9e: 1e:49:ad:09:af:da:64:36:bf:a6:2e:da:f9:2c:67:e1:5c:05: e8:e8:b5:29:14:27:ce:16:f3:ba:e8:b1:2a:4e:45:9c:fd:8d: 84:ab:d9:4e:47:62:09:63:39:1b:3a:ac:5f:8f:29:e1:e6:e3: 57:52:3a:88:97:24:df:49:15:c7:d3:64:1b:c8:a9:1b:d0:e8: c0:39:bf:7f:2e:d8:e8:7e:4c:6c:ae:cb:a4:95:8d:e4:b1:bd: 39:00:93:66:1d:32:62:30:44:8b:28:87:28:49:60:3b:2f:6d: 26:9a:c2:cf:13:25:f0:fb:58:e7:44:5b:28:fb:3c:59:4a:59: 31:1d:d9:76:e9:88:bf:e9:3b:d3:49:41:f9:78:24:3a:9f:c1: 6b:09:b7:e7:88:8c:ee:e4:9b:5c:37:6a:90:e3:ad:98:17:8c: ff:bc:bd:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYreR4wVCAhjsWpkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NTFmOTlmMjQtNzk5MS00YTAyLTlkZTktM2I0OTI0ODMwMmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Grj78dOrc+BDxTxROD7TwHjsyzVd80JRWxC dgaRZWHoycrMFk+612gn70c6bNLCFdq8n6hfpCyJlAyRhLR/bXjIw6BhGVxQ+mIG 7xWwbpU3QbAQjkMRMn65iAkgqPSCGsRog6MlSdmwdgxvGF/iMlPzJlPDPPJBZ46d FJJb5h7KuagTQZp/pWNVomstaFjkhFNpjmlP6SgYBl7L08u0Wy4yuH4ICgP1QqzN HCoj6xvMQI8ZHyFUjNBACQTJJBpHWUZXTXBxwn+TFdFkLzD6hD7+GNxjvqlib3c/ P+hwP+fYk9U7wNnw2cXk7gZYZ47VlFuOi6WIeuAVP4OBaaL15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0qJKF59bQYna6kj3rouPUI2XvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzg2MTY5MWMtZTliYS0z YjEyLWEzNjMtZWNhNWViMjEwZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2sq81XsFK3kJ4iNsLKVYY0e7vdr+9QnBV+EHe+jusMHFijOKVG/N7b Jsp5/6364R66V8jhyrRZWsjnGBbBZNq2Zw4HClvugaIq95gZcNiISxzQAQgHcrTQ nh5JrQmv2mQ2v6Yu2vksZ+FcBejotSkUJ84W87rosSpORZz9jYSr2U5HYgljORs6 rF+PKeHm41dSOoiXJN9JFcfTZBvIqRvQ6MA5v38u2Oh+TGyuy6SVjeSxvTkAk2Yd MmIwRIsohyhJYDsvbSaaws8TJfD7WOdEWyj7PFlKWTEd2XbpiL/pO9NJQfl4JDqf wWsJt+eIjO7km1w3apDjrZgXjP+8vaA= -----END CERTIFICATE-----Generated at Mon Oct 19 01:00:10 2026 by rpki-client