$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa File: 39953f1b-77cc-3f24-ac5e-a313835b8627.roa (raw, json) Hash identifier: m0v7iG2VSHzNI901LNi6E+UshTopAcbNb3cjqhb3BuQ= Subject key identifier: 22:33:7A:1D:99:11:12:D2:96:F1:E4:9B:C4:1B:0A:6B:1D:B0:41:EE Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EA787E872C9B18B9C7134ABC0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54994 IP address blocks: 153.43.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:e8:72:c9:b1:8b:9c:71:34:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ca8d659e-4eab-4621-a124-70272f02d78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:c4:61:3e:9b:c7:92:9d:34:b0:0d:61:fd: 4b:48:66:0e:c0:3b:c6:9e:bf:e1:31:0b:ed:3a:b7: 8d:28:84:83:37:59:de:c1:10:48:c6:4b:20:7d:7c: d6:b0:54:3d:fb:fc:f2:26:9d:29:22:64:95:d7:76: e8:c6:c3:03:47:fe:8b:19:5c:9a:79:38:85:c7:dd: bc:5e:02:a3:1d:a8:45:ea:c6:60:0e:2c:a8:b5:5b: a1:4f:f9:6c:69:79:ba:79:a1:58:f2:42:8c:00:4d: d0:71:fa:66:14:bc:9c:24:71:1d:cc:fe:cc:d6:29: 72:03:d8:20:d0:6d:3d:74:18:b2:dd:d4:28:3e:18: 42:69:29:7d:98:fb:f8:9a:0f:f9:e3:a8:d7:79:ea: 20:e8:17:52:e5:d3:8f:ea:d7:f1:e8:a8:05:f5:da: 79:0f:05:d0:74:4f:ed:17:52:a3:90:57:fb:03:5f: a5:8c:1f:02:b4:14:1e:58:41:e7:8b:d0:0c:b7:80: c6:3e:8d:5c:1e:cd:a1:b9:1b:1c:ca:dd:1a:41:3b: d9:b1:29:f7:7a:0c:be:9f:cc:91:92:52:49:3c:ec: 9c:ef:d7:ab:dc:90:c0:b4:eb:c4:e6:ca:95:22:10: dc:53:4a:b6:89:fa:71:17:f6:ca:da:bb:2a:8f:2f: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:7A:1D:99:11:12:D2:96:F1:E4:9B:C4:1B:0A:6B:1D:B0:41:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/39953f1b-77cc-3f24-ac5e-a313835b8627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d9:a0:98:46:c3:4d:70:0a:2a:fa:3d:ce:b7:9d:84:b1:3a: 42:db:69:f5:28:6a:07:83:1d:f0:73:4e:22:e4:df:42:f7:6d: a4:0e:ac:d7:7c:0e:ab:d5:a9:1c:49:13:4f:18:22:39:21:52: 36:77:58:c1:2b:26:6f:6d:f3:75:de:0c:87:af:9b:cf:8b:6b: ea:1b:fa:8c:6d:82:75:c2:bc:4f:ad:54:fa:38:95:29:76:69: 9b:ac:6b:e1:8d:31:39:a6:61:ac:fd:fc:54:75:b6:bb:44:ba: ff:04:b9:90:06:61:86:80:04:61:71:93:dc:8d:d4:9f:04:dd: bf:37:d0:0b:34:75:7b:77:5e:94:df:a1:e0:d6:48:ce:8a:ae: 55:eb:bb:8b:84:97:97:16:b4:99:22:6b:1b:cf:9b:2a:de:fc: 01:c6:30:7f:8a:31:30:dc:3f:97:ed:5e:fd:1f:2e:37:c8:06: fb:c9:fb:35:15:ee:20:9c:52:35:42:55:5a:80:7a:63:89:e7: 9f:95:26:1f:e3:b7:66:79:e1:6e:74:e7:8e:54:10:3e:d6:4c: 9e:02:95:75:4e:14:c2:ca:c1:1b:74:a5:2b:75:3b:fe:06:e4: 15:e2:25:e5:5c:69:58:59:bd:61:1e:33:a7:24:d4:b4:85:e4: 99:29:c8:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh+hyybGLnHE0q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2E4ZDY1OWUtNGVhYi00NjIxLWExMjQtNzAyNzJmMDJkNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk7EYT6bx5KdNLANYf1LSGYOwDvGnr/hMQvt OreNKISDN1newRBIxksgfXzWsFQ9+/zyJp0pImSV13boxsMDR/6LGVyaeTiFx928 XgKjHahF6sZgDiyotVuhT/lsaXm6eaFY8kKMAE3QcfpmFLycJHEdzP7M1ilyA9gg 0G09dBiy3dQoPhhCaSl9mPv4mg/546jXeeog6BdS5dOP6tfx6KgF9dp5DwXQdE/t F1KjkFf7A1+ljB8CtBQeWEHni9AMt4DGPo1cHs2huRscyt0aQTvZsSn3egy+n8yR klJJPOyc79er3JDAtOvE5sqVIhDcU0q2ifpxF/bK2rsqjy+pVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIzeh2ZERLSlvHkm8QbCmsdsEHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzk5NTNmMWItNzdjYy0z ZjI0LWFjNWUtYTMxMzgzNWI4NjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPZoJhGw01wCir6Pc63nYSxOkLbafUoageDHfBzTiLk30L3baQOrNd8 DqvVqRxJE08YIjkhUjZ3WMErJm9t83XeDIevm8+La+ob+oxtgnXCvE+tVPo4lSl2 aZusa+GNMTmmYaz9/FR1trtEuv8EuZAGYYaABGFxk9yN1J8E3b830As0dXt3XpTf oeDWSM6KrlXru4uEl5cWtJkiaxvPmyre/AHGMH+KMTDcP5ftXv0fLjfIBvvJ+zUV 7iCcUjVCVVqAemOJ55+VJh/jt2Z54W50545UED7WTJ4ClXVOFMLKwRt0pSt1O/4G 5BXiJeVcaVhZvWEeM6ck1LSF5JkpyHs= -----END CERTIFICATE-----Generated at Sat Sep 5 04:39:19 2026 by rpki-client