$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5a108711-de89-3d62-8795-ddfaf143f655.roa File: 5a108711-de89-3d62-8795-ddfaf143f655.roa (raw, json) Hash identifier: 4/bDVZa/99Ym66xh0bHyMg/CMQsfn+nWA1oAjDQrdZg= Subject key identifier: 4A:7A:90:33:03:9F:B2:18:10:ED:75:F7:7B:74:A0:F1:53:82:5C:14 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EF7275679C0663C47D94E4FC0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5a108711-de89-3d62-8795-ddfaf143f655.roa Signing time: Wed 26 Aug 2026 13:32:26 +0000 ROA not before: Wed 26 Aug 2026 13:32:26 +0000 ROA not after: Tue 24 Nov 2026 14:32:26 +0000 asID: 54994 IP address blocks: 153.43.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:27:56:79:c0:66:3c:47:d9:4e:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 26 13:32:26 2026 GMT Not After : Nov 24 14:32:26 2026 GMT Subject: CN=c401b435-0197-44cb-bf87-6d146bb4485b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:5a:de:6e:d0:53:54:a0:27:b2:fc:db:76: 31:15:9e:f6:1e:5f:a2:96:51:5b:4b:c6:95:0d:1a: 95:b6:fa:9f:92:27:73:ed:d4:6e:9e:97:02:b6:fb: b1:40:d6:fe:b7:d7:79:ac:a2:65:4f:32:d6:ad:97: bc:70:15:d2:b6:bd:6d:1b:36:b4:db:0e:b4:e1:98: 23:5a:ad:c6:c4:25:e3:a4:db:64:a9:11:36:a8:7f: 2a:80:d3:cb:03:69:40:34:27:44:04:47:2a:fe:18: 0b:e4:6a:64:33:53:3f:3a:c7:dc:e0:0f:f9:4a:34: b3:7f:5e:3d:f6:88:ee:f1:20:e7:73:cf:3b:e7:03: 4a:36:40:96:5b:8d:6a:b3:da:1c:63:c1:74:7e:ff: 16:9c:00:42:6f:4c:51:9e:70:af:68:4d:89:05:76: 49:8a:92:30:3b:d3:40:a7:b2:de:0f:c3:d7:7e:81: 9f:33:1c:dc:ef:71:4d:9f:07:6c:a3:9e:31:22:df: 2a:9c:42:60:27:46:54:fb:79:9c:5e:0b:7a:7f:27: a6:48:89:f6:c4:7e:65:81:73:63:31:cd:7e:3a:19: 4f:e9:be:3b:0a:45:9a:78:20:d1:7d:33:63:a4:99: 2a:14:3e:c1:cc:16:51:8d:f1:65:6c:e9:29:bc:14: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:90:33:03:9F:B2:18:10:ED:75:F7:7B:74:A0:F1:53:82:5C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5a108711-de89-3d62-8795-ddfaf143f655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d2:78:80:63:17:b3:9c:44:19:f2:da:9b:91:4d:bc:7d:6d: 2f:cb:ce:e3:23:44:7a:8f:ac:e8:de:e6:fc:1d:0e:2a:8c:1a: 47:86:65:ad:40:9c:29:e0:d3:d0:61:df:a9:ef:05:19:15:33: 7d:6e:20:e4:1b:6e:ae:c3:a1:85:c7:92:fc:bc:09:e6:5d:95: da:4a:e4:e6:8b:f8:b7:3f:0c:ec:a8:22:9e:4a:3f:f4:7d:a3: 6d:77:13:95:3e:72:5b:a9:9c:b0:cc:ab:f5:bd:21:5f:26:1c: 24:df:22:49:8e:31:e9:41:c7:26:41:91:32:95:69:38:af:e8: 75:4b:62:b3:f0:47:cc:da:a6:4a:09:bd:f4:fc:12:e5:9b:97: 1f:ec:e9:5d:1c:2c:33:b2:e3:0c:cd:e8:33:be:d6:ec:5b:da: aa:95:ab:78:72:71:c5:c6:2e:44:fa:ab:1f:09:1c:61:e8:3a: 90:a8:b3:41:64:28:99:b8:a2:31:ee:aa:64:f9:4d:10:9b:55: 9a:e1:e7:ec:c7:b0:76:38:29:56:e1:58:ea:3d:d9:3d:d0:78: 03:b1:f5:57:e3:d9:2b:27:7a:55:3f:37:54:2f:03:a9:77:5b: 7d:0f:33:8d:8b:e1:d3:76:15:91:84:61:f4:a1:d0:85:cd:3f: 27:4e:f9:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73J1Z5wGY8R9lOT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyNjEzMzIyNloXDTI2MTEyNDE0MzIyNlowLzEtMCsGA1UEAxMk YzQwMWI0MzUtMDE5Ny00NGNiLWJmODctNmQxNDZiYjQ0ODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU5a3m7QU1SgJ7L823YxFZ72Hl+illFbS8aV DRqVtvqfkidz7dRunpcCtvuxQNb+t9d5rKJlTzLWrZe8cBXStr1tGza02w604Zgj Wq3GxCXjpNtkqRE2qH8qgNPLA2lANCdEBEcq/hgL5GpkM1M/Osfc4A/5SjSzf149 9oju8SDnc8875wNKNkCWW41qs9ocY8F0fv8WnABCb0xRnnCvaE2JBXZJipIwO9NA p7LeD8PXfoGfMxzc73FNnwdso54xIt8qnEJgJ0ZU+3mcXgt6fyemSIn2xH5lgXNj Mc1+OhlP6b47CkWaeCDRfTNjpJkqFD7BzBZRjfFlbOkpvBQLGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp6kDMDn7IYEO1193t0oPFTglwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWExMDg3MTEtZGU4OS0z ZDYyLTg3OTUtZGRmYWYxNDNmNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrSeIBjF7OcRBny2puRTbx9bS/LzuMjRHqPrOje5vwdDiqMGkeGZa1A nCng09Bh36nvBRkVM31uIOQbbq7DoYXHkvy8CeZdldpK5OaL+Lc/DOyoIp5KP/R9 o213E5U+clupnLDMq/W9IV8mHCTfIkmOMelBxyZBkTKVaTiv6HVLYrPwR8zapkoJ vfT8EuWblx/s6V0cLDOy4wzN6DO+1uxb2qqVq3hyccXGLkT6qx8JHGHoOpCos0Fk KJm4ojHuqmT5TRCbVZrh5+zHsHY4KVbhWOo92T3QeAOx9Vfj2SsnelU/N1QvA6l3 W30PM42L4dN2FZGEYfSh0IXNPydO+Ug= -----END CERTIFICATE-----Generated at Sat Sep 5 06:43:36 2026 by rpki-client