$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/67d729c1-5585-377a-9389-afde0b766d8b.roa File: 67d729c1-5585-377a-9389-afde0b766d8b.roa (raw, json) Hash identifier: 8SQFRKbQeeL1mn2S6eU+K7U3Z+IRorc2jf/c4Lo+dMc= Subject key identifier: 3E:5C:2F:2D:96:65:CD:35:1A:7E:5B:63:53:86:54:0B:24:29:90:39 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EABB6E2BFD6DFCDA9F01AAA00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/67d729c1-5585-377a-9389-afde0b766d8b.roa Signing time: Thu 30 Jul 2026 13:00:12 +0000 ROA not before: Thu 30 Jul 2026 13:00:12 +0000 ROA not after: Wed 28 Oct 2026 13:00:12 +0000 asID: 54994 IP address blocks: 153.43.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:b6:e2:bf:d6:df:cd:a9:f0:1a:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 30 13:00:12 2026 GMT Not After : Oct 28 13:00:12 2026 GMT Subject: CN=e0893e02-57da-4248-9fa1-e836ed9e7ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:6e:26:80:27:38:91:82:9b:5e:52:54:96: ad:a9:77:3b:9a:28:90:8e:84:99:b3:db:a1:4e:29: b1:c5:f3:f8:b3:5d:a3:51:9d:4a:ef:34:1a:c0:99: 14:b8:e6:95:1f:2d:e3:94:e5:59:09:f1:b4:4a:51: 13:bb:3f:84:cc:70:e8:41:10:cc:87:cd:76:3d:90: ee:2e:09:f2:16:b5:64:c3:a2:19:84:2e:9b:23:30: 1f:7a:b0:05:6d:de:5d:64:99:39:10:7b:1e:c6:22: 9d:14:c1:ca:0b:0e:b4:c0:a6:28:1c:23:18:19:f1: c0:e6:0e:d7:09:7d:2b:d8:93:34:45:6a:38:73:06: a4:a7:18:59:5c:81:f8:9f:d8:69:d1:c9:0d:2a:a7: a7:ab:73:85:49:a9:63:aa:94:67:92:7b:73:df:10: ac:95:f8:e1:89:b1:25:d2:d7:90:5b:af:8f:37:1a: 86:57:41:7f:15:8b:a7:1f:64:1d:35:13:05:6b:3b: ea:28:34:f4:04:74:c6:5e:59:ba:6c:ee:03:cd:bf: 49:8f:ca:6d:9d:cd:3a:e3:77:17:e0:2e:13:bb:fd: 7c:df:6c:9c:1d:7e:dc:b5:04:a2:70:e1:94:3a:f5: 86:8e:3a:f4:63:a6:2f:e0:64:8a:6d:ee:5e:e8:dc: 5b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5C:2F:2D:96:65:CD:35:1A:7E:5B:63:53:86:54:0B:24:29:90:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/67d729c1-5585-377a-9389-afde0b766d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:aa:39:97:57:39:69:7c:1f:69:26:2c:4a:d6:13:c9:2f:d4: 10:5b:5b:94:6f:ba:34:10:16:94:32:1c:5a:14:5c:b7:d1:86: e7:e6:97:6f:80:ef:55:f5:9d:6e:53:a7:93:f3:b0:2d:ee:64: 75:b2:11:d4:70:d0:52:91:4d:30:27:4e:b3:7d:74:4a:cd:fd: d4:72:c7:0d:80:35:54:eb:b6:f7:0f:aa:29:4c:ff:67:21:ba: ae:29:6b:d4:c5:13:be:ac:6e:8d:de:d3:b6:ea:ef:d7:cd:42: 7f:43:8a:ad:27:e1:7b:5c:d5:15:60:7d:3e:57:ca:03:ed:4e: ac:ad:f3:70:38:e6:0f:12:78:af:e6:10:59:e9:b4:f6:81:64: 34:8a:66:eb:f1:bf:96:42:db:a6:62:b0:b1:b5:a7:f6:c9:2c: b3:e4:ad:cc:c1:df:80:f7:b3:cf:80:60:16:bf:3e:4e:df:aa: aa:76:83:27:01:e6:55:f6:a3:1b:8c:82:43:de:36:f4:c6:9c: 04:00:fa:65:50:6b:da:c5:ec:9b:42:d5:26:50:46:fb:a6:79: db:eb:32:60:c8:40:ab:0c:39:d7:df:26:ff:8a:09:13:26:ef: 6b:4f:c1:59:fa:57:9e:ee:2f:d7:83:11:f9:c9:e1:14:f7:3b: c5:c3:b5:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtuK/1t/NqfAaqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk ZTA4OTNlMDItNTdkYS00MjQ4LTlmYTEtZTgzNmVkOWU3Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3duJoAnOJGCm15SVJatqXc7miiQjoSZs9uh TimxxfP4s12jUZ1K7zQawJkUuOaVHy3jlOVZCfG0SlETuz+EzHDoQRDMh812PZDu LgnyFrVkw6IZhC6bIzAferAFbd5dZJk5EHsexiKdFMHKCw60wKYoHCMYGfHA5g7X CX0r2JM0RWo4cwakpxhZXIH4n9hp0ckNKqenq3OFSaljqpRnkntz3xCslfjhibEl 0teQW6+PNxqGV0F/FYunH2QdNRMFazvqKDT0BHTGXlm6bO4Dzb9Jj8ptnc0643cX 4C4Tu/1832ycHX7ctQSicOGUOvWGjjr0Y6Yv4GSKbe5e6NxbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5cLy2WZc01Gn5bY1OGVAskKZA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjdkNzI5YzEtNTU4NS0z NzdhLTkzODktYWZkZTBiNzY2ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGqOZdXOWl8H2kmLErWE8kv1BBbW5RvujQQFpQyHFoUXLfRhufml2+A 71X1nW5Tp5PzsC3uZHWyEdRw0FKRTTAnTrN9dErN/dRyxw2ANVTrtvcPqilM/2ch uq4pa9TFE76sbo3e07bq79fNQn9Diq0n4Xtc1RVgfT5XygPtTqyt83A45g8SeK/m EFnptPaBZDSKZuvxv5ZC26ZisLG1p/bJLLPkrczB34D3s8+AYBa/Pk7fqqp2gycB 5lX2oxuMgkPeNvTGnAQA+mVQa9rF7JtC1SZQRvumedvrMmDIQKsMOdffJv+KCRMm 72tPwVn6V57uL9eDEfnJ4RT3O8XDtfQ= -----END CERTIFICATE-----Generated at Sat Sep 5 04:39:15 2026 by rpki-client