$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/675662e7-eb6c-310d-89bb-744056aabb4a.roa File: 675662e7-eb6c-310d-89bb-744056aabb4a.roa (raw, json) Hash identifier: pMpmv7/85Ook91SAIOJeZ+bw1QWgShWK92Ax8KpS17E= Subject key identifier: 5A:C1:07:74:17:57:1A:93:F4:0F:FE:47:B2:DE:79:A6:51:E8:D5:F3 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E78FF78B81ACB9E73DDCD7000 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/675662e7-eb6c-310d-89bb-744056aabb4a.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 54994 IP address blocks: 153.43.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:78:b8:1a:cb:9e:73:dd:cd:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=220af2ab-8e22-48ea-a8a5-d4de7055744d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:c8:70:66:6f:c5:f2:2d:1a:67:a5:f6:cd: de:7d:4c:b5:cd:b8:6b:66:cc:9b:f4:14:bf:88:6a: 80:f6:b6:a7:e5:17:87:bc:76:bd:39:6a:4d:08:d0: be:0d:4e:69:ee:c5:60:61:c3:18:a5:1c:6f:38:40: 7b:d9:7d:b9:fd:1f:09:ff:e5:ba:49:19:d9:a1:8d: 00:42:2d:a1:cc:7f:1b:46:4c:63:42:c0:6a:e3:43: a5:4d:20:bf:37:be:13:89:f9:44:ba:0c:81:df:dd: 6e:7f:11:b8:8b:76:cc:a7:8c:67:1d:89:94:7e:08: 52:f8:a7:ce:9b:81:cc:ea:38:84:71:0b:24:84:23: b3:db:b4:43:34:ad:24:c2:0e:78:14:57:9c:bd:66: 7a:92:0c:09:bb:27:13:b7:54:5f:7d:54:23:7d:a3: 4f:f1:cd:fa:76:25:83:66:10:36:b3:29:1d:0d:12: a0:83:fe:9d:e9:a8:c1:5f:31:db:f7:ab:ab:5d:be: 0c:00:ca:3e:65:14:21:ce:dc:58:c1:fd:03:f8:1c: a1:45:78:0a:c0:a8:bd:3f:d0:0c:aa:c3:12:2b:43: c3:16:60:d1:6b:80:f5:d1:a6:d8:25:06:ae:f4:5f: fe:cc:ad:86:a3:0a:a4:9e:05:63:53:ca:05:12:b5: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C1:07:74:17:57:1A:93:F4:0F:FE:47:B2:DE:79:A6:51:E8:D5:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/675662e7-eb6c-310d-89bb-744056aabb4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ee:5b:04:51:1a:2c:4a:38:d8:36:4b:ed:05:b6:7a:dd:fb: b5:e7:1a:51:0e:40:b4:4c:a3:79:e3:9d:63:cc:30:52:d5:28: f5:c1:8c:1f:2a:7b:b5:2e:ee:0c:27:25:25:6f:b7:ae:a8:18: 0d:37:b8:21:d6:40:33:36:55:df:72:87:40:cf:fd:1c:6f:7c: 8c:6b:0d:a1:8c:84:21:6a:75:3d:64:a4:5f:19:00:80:39:42: 4d:1e:5e:0c:40:79:a3:42:3a:dd:19:8e:1e:f2:8d:26:45:c4: 12:43:e4:ad:0d:5d:00:82:41:95:bd:2c:99:65:de:7e:ee:e9: 0d:d0:d3:d9:67:99:e9:d2:d4:34:da:a4:03:ba:35:ff:a3:88: 26:13:46:ba:1e:53:49:0f:22:1d:a8:b4:b7:e0:04:b4:fd:ac: 79:c1:6f:99:21:dc:6b:26:a6:2e:f3:7c:df:35:c3:79:5c:78: 6c:35:07:00:a4:65:fd:ac:69:f3:c5:49:a4:f1:1d:53:74:15: 3e:2e:6b:3b:29:4c:b8:a2:7b:b6:c0:b2:92:c7:52:13:ce:25: 05:fe:af:a4:7e:91:05:85:00:85:e3:92:57:99:16:85:1d:6b: 15:07:24:9f:2d:50:9a:29:71:ca:a0:6a:81:e5:d7:5e:65:90: 5d:21:8f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3i4Gsuec93NcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk MjIwYWYyYWItOGUyMi00OGVhLWE4YTUtZDRkZTcwNTU3NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsArIcGZvxfItGmel9s3efUy1zbhrZsyb9BS/ iGqA9ran5ReHvHa9OWpNCNC+DU5p7sVgYcMYpRxvOEB72X25/R8J/+W6SRnZoY0A Qi2hzH8bRkxjQsBq40OlTSC/N74TiflEugyB391ufxG4i3bMp4xnHYmUfghS+KfO m4HM6jiEcQskhCOz27RDNK0kwg54FFecvWZ6kgwJuycTt1RffVQjfaNP8c36diWD ZhA2sykdDRKgg/6d6ajBXzHb96urXb4MAMo+ZRQhztxYwf0D+ByhRXgKwKi9P9AM qsMSK0PDFmDRa4D10abYJQau9F/+zK2GowqkngVjU8oFErWjTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrBB3QXVxqT9A/+R7LeeaZR6NXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjc1NjYyZTctZWI2Yy0z MTBkLTg5YmItNzQ0MDU2YWFiYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmSs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPuWwRRGixKONg2S+0Ftnrd+7XnGlEOQLRMo3njnWPMMFLVKPXBjB8q e7Uu7gwnJSVvt66oGA03uCHWQDM2Vd9yh0DP/RxvfIxrDaGMhCFqdT1kpF8ZAIA5 Qk0eXgxAeaNCOt0Zjh7yjSZFxBJD5K0NXQCCQZW9LJll3n7u6Q3Q09lnmenS1DTa pAO6Nf+jiCYTRroeU0kPIh2otLfgBLT9rHnBb5kh3Gsmpi7zfN81w3lceGw1BwCk Zf2safPFSaTxHVN0FT4uazspTLiie7bAspLHUhPOJQX+r6R+kQWFAIXjkleZFoUd axUHJJ8tUJopccqgaoHl115lkF0hj/c= -----END CERTIFICATE-----Generated at Tue Jul 21 19:44:47 2026 by rpki-client