$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7181ff77-9833-3e3b-b903-646e92ec7de9.roa File: 7181ff77-9833-3e3b-b903-646e92ec7de9.roa (raw, json) Hash identifier: nl3dvsIC7J3QJbpXa7Nn9dVSJR7fmINA/fJOUAX1JX4= Subject key identifier: 18:4A:49:91:66:2A:02:BE:1C:7F:EE:AD:A9:DF:80:48:67:44:7D:AF Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EA794F58D00617CD13D9379E0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7181ff77-9833-3e3b-b903-646e92ec7de9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54994 IP address blocks: 153.43.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:f5:8d:00:61:7c:d1:3d:93:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7f244b69-31e1-4976-9056-21a0b3c5317a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:7b:1f:7d:92:d1:2d:df:c2:ec:b2:69:cc: 22:ae:94:05:e1:eb:1a:11:57:34:fc:5b:95:1a:68: c7:3c:c8:db:37:a6:cd:33:11:a2:1c:2f:5a:bc:4b: cb:ae:a8:e0:c5:ab:b9:7e:99:88:8d:02:c5:99:f4: c2:b4:c3:62:35:d5:73:7c:bd:7a:2b:0e:68:c7:53: 11:27:9e:3a:b3:4a:ed:fe:0c:31:98:02:51:c3:1e: 0d:30:95:35:07:ec:4c:f6:83:9d:3c:54:3c:39:6d: 94:44:2d:54:3d:e0:ed:0e:32:90:b1:31:bc:95:a7: 0d:ac:43:93:3f:7b:64:0d:6d:45:37:82:23:76:7e: a3:3c:23:80:1e:da:0e:d2:5e:c1:49:75:8c:bc:14: 57:4a:b3:19:4c:2b:d8:c3:11:3b:74:92:98:1c:dc: b0:aa:d6:de:37:38:ac:a8:b5:a0:3a:c7:09:18:14: e4:96:27:c4:de:81:d4:85:9c:2b:6f:d9:3b:11:68: 46:a1:be:07:3b:f0:ba:29:41:6e:2d:b5:f6:ae:d5: 15:76:2d:c3:aa:50:9b:30:e7:b9:c7:d6:85:8a:a4: ea:f3:3b:00:7b:f0:ca:85:a2:29:3a:db:ef:75:61: 9c:e4:1c:cb:cd:8b:a3:70:8b:fd:03:50:70:fb:5c: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4A:49:91:66:2A:02:BE:1C:7F:EE:AD:A9:DF:80:48:67:44:7D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/7181ff77-9833-3e3b-b903-646e92ec7de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fd:1a:16:3f:00:42:f4:0a:31:a9:1e:cd:ea:38:1e:1c:5e: 93:bb:5c:55:df:fe:6f:49:7d:66:4e:0d:00:e7:6f:a1:fe:7e: 81:4a:b1:b9:db:41:8e:f5:98:22:87:2a:c8:95:bb:84:fa:c9: 31:48:c0:29:9b:80:37:a2:63:4b:22:50:56:b2:90:79:9f:aa: a2:41:aa:52:19:7d:d0:30:80:93:b7:26:e4:f4:48:ba:dd:94: e1:a4:05:e8:af:7d:48:42:64:1c:6e:f8:cc:a4:f0:70:a4:de: a8:c2:0a:f0:3d:06:cb:68:3a:86:06:b7:15:ae:a4:fc:3d:59: 15:87:31:53:f3:57:ff:52:c7:ef:82:62:2e:5d:0b:5c:42:d5: 65:64:b0:90:21:e8:56:32:4b:2e:11:99:98:58:3e:63:24:70: f5:ed:12:1d:95:bf:f0:40:86:e1:c8:c2:d2:c4:74:d4:3e:b6: 5d:8f:43:bc:7c:0f:f0:9f:99:ac:ee:31:56:42:ea:43:0a:fb: 69:49:48:70:2d:d5:65:2a:07:83:d4:42:e3:b5:0b:1c:3d:e3: e6:17:7e:17:14:87:a9:22:91:ca:ec:3b:1b:b3:54:4e:26:41: 36:33:c6:cf:71:0f:da:4c:22:a9:8a:16:1d:a5:b6:57:74:27: 4b:c9:8a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlPWNAGF80T2TeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2YyNDRiNjktMzFlMS00OTc2LTkwNTYtMjFhMGIzYzUzMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9h7H32S0S3fwuyyacwirpQF4esaEVc0/FuV GmjHPMjbN6bNMxGiHC9avEvLrqjgxau5fpmIjQLFmfTCtMNiNdVzfL16Kw5ox1MR J546s0rt/gwxmAJRwx4NMJU1B+xM9oOdPFQ8OW2URC1UPeDtDjKQsTG8lacNrEOT P3tkDW1FN4Ijdn6jPCOAHtoO0l7BSXWMvBRXSrMZTCvYwxE7dJKYHNywqtbeNzis qLWgOscJGBTklifE3oHUhZwrb9k7EWhGob4HO/C6KUFuLbX2rtUVdi3DqlCbMOe5 x9aFiqTq8zsAe/DKhaIpOtvvdWGc5BzLzYujcIv9A1Bw+1x4FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhKSZFmKgK+HH/uranfgEhnRH2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzE4MWZmNzctOTgzMy0z ZTNiLWI5MDMtNjQ2ZTkyZWM3ZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSteMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB39GhY/AEL0CjGpHs3qOB4cXpO7XFXf/m9JfWZODQDnb6H+foFKsbnb QY71mCKHKsiVu4T6yTFIwCmbgDeiY0siUFaykHmfqqJBqlIZfdAwgJO3JuT0SLrd lOGkBeivfUhCZBxu+Myk8HCk3qjCCvA9BstoOoYGtxWupPw9WRWHMVPzV/9Sx++C Yi5dC1xC1WVksJAh6FYySy4RmZhYPmMkcPXtEh2Vv/BAhuHIwtLEdNQ+tl2PQ7x8 D/CfmazuMVZC6kMK+2lJSHAt1WUqB4PUQuO1Cxw94+YXfhcUh6kikcrsOxuzVE4m QTYzxs9xD9pMIqmKFh2ltld0J0vJils= -----END CERTIFICATE-----Generated at Sat Sep 5 06:12:11 2026 by rpki-client