$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8624f24b-34c6-3bd8-8dbe-400336f9c2e8.roa File: 8624f24b-34c6-3bd8-8dbe-400336f9c2e8.roa (raw, json) Hash identifier: 1AEaqsoodQUFZaZIl2Bb4l1MNp3izqJno3ljzYozkUQ= Subject key identifier: EA:A8:D5:CE:2E:6F:B2:04:5C:07:A2:43:18:8D:26:66:1D:8D:8E:75 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F990305627B2AC6A66583FF00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8624f24b-34c6-3bd8-8dbe-400336f9c2e8.roa Signing time: Fri 23 Oct 2026 13:00:12 +0000 ROA not before: Fri 23 Oct 2026 13:00:12 +0000 ROA not after: Thu 21 Jan 2027 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.190.0/24 maxlen: 24 153.43.191.0/24 maxlen: 24 153.43.192.0/24 maxlen: 24 153.43.193.0/24 maxlen: 24 153.43.194.0/24 maxlen: 24 153.43.195.0/24 maxlen: 24 153.43.196.0/24 maxlen: 24 153.43.197.0/24 maxlen: 24 153.43.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:03:05:62:7b:2a:c6:a6:65:83:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 23 13:00:12 2026 GMT Not After : Jan 21 14:00:12 2027 GMT Subject: CN=24e7939a-606b-4e77-b55d-64e215180713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:e8:30:e7:aa:27:ce:29:d3:d5:36:5f:2a: 34:f7:ca:b7:0f:66:af:56:8a:7c:7b:64:fd:de:4e: 04:15:be:35:9a:d4:17:51:2a:81:21:9b:97:8c:2b: 65:c4:78:6b:e4:13:1d:99:17:66:f1:47:45:54:a9: 46:b5:80:84:2b:a9:db:d7:d4:cf:e7:52:b8:26:1d: 47:5c:f2:06:08:c2:b2:81:36:5e:c2:19:39:29:c0: dd:bf:95:79:f0:63:dd:22:54:80:ba:8a:b9:ac:d6: a8:f5:45:6f:86:1f:51:8c:e4:36:60:3a:b1:8b:86: 51:d2:0a:ac:63:22:57:3c:7a:9f:ab:19:88:5d:91: b4:c3:06:9c:75:4a:5c:ac:12:5b:08:f7:1f:e7:e0: 96:a8:37:f9:79:42:a9:73:9c:57:23:55:68:1b:36: 0d:34:fe:48:2c:ef:2d:66:23:11:96:bf:08:90:99: cf:e3:50:5a:6c:22:90:22:d9:1f:f4:8d:73:13:41: e0:5b:27:22:8e:9d:cd:e8:34:84:f7:16:b3:dc:cd: 7f:24:42:9c:ef:37:ab:59:f4:de:d8:f6:e1:8c:06: 20:f7:ae:57:80:e8:35:58:e6:14:93:7e:d6:ca:20: 9f:08:d9:5a:9d:82:1c:81:2b:9f:00:97:78:f5:27: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A8:D5:CE:2E:6F:B2:04:5C:07:A2:43:18:8D:26:66:1D:8D:8E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8624f24b-34c6-3bd8-8dbe-400336f9c2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.190.0-153.43.198.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d2:e3:5c:68:d0:0f:49:e2:56:1a:fa:69:a7:61:fa:09:ce: 9f:c5:b5:f9:97:31:fd:1a:cf:04:84:6f:df:92:4f:c5:61:9f: 0e:4b:ea:72:b9:d6:3b:19:bd:7c:d4:4c:bc:c6:da:85:c7:21: f7:e2:6e:20:f7:49:5a:46:72:38:2c:ba:80:8f:f5:58:e9:2c: b7:50:87:7d:60:92:e9:5f:44:fa:ea:80:d4:61:78:9c:4f:6c: d4:34:1e:c8:df:dd:f8:d5:73:1d:fe:c3:b3:da:56:fb:83:fe: 0a:3d:10:1c:d2:36:99:3e:7c:01:52:37:6f:6e:5c:18:b4:1f: 91:1e:08:53:86:72:1e:ad:bd:b7:e6:cb:69:f8:20:79:8c:4d: dc:eb:48:6d:b3:d5:88:f8:2b:55:3c:d4:04:51:f7:a2:19:73: 0a:50:5f:50:fc:12:b5:c6:8c:ed:76:4a:b0:97:80:2b:a6:5d: de:e8:9a:77:92:ce:45:25:6f:8e:a6:61:29:0d:c5:79:2e:5f: 7d:9c:b0:2e:22:42:40:16:f1:2c:66:70:1c:ec:d0:43:7b:8b: 6f:c0:9d:5d:cb:29:05:d7:ac:6f:6b:2c:2e:01:68:28:05:c7: 0c:6b:cf:8f:ca:dd:1f:42:1d:cc:8a:5a:3f:89:1a:d0:8c:cf: 38:91:5d:7a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE+ZAwVieyrGpmWD/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAyMzEzMDAxMloXDTI3MDEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MjRlNzkzOWEtNjA2Yi00ZTc3LWI1NWQtNjRlMjE1MTgwNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmjoMOeqJ84p09U2Xyo098q3D2avVop8e2T9 3k4EFb41mtQXUSqBIZuXjCtlxHhr5BMdmRdm8UdFVKlGtYCEK6nb19TP51K4Jh1H XPIGCMKygTZewhk5KcDdv5V58GPdIlSAuoq5rNao9UVvhh9RjOQ2YDqxi4ZR0gqs YyJXPHqfqxmIXZG0wwacdUpcrBJbCPcf5+CWqDf5eUKpc5xXI1VoGzYNNP5ILO8t ZiMRlr8IkJnP41BabCKQItkf9I1zE0HgWycijp3N6DSE9xaz3M1/JEKc7zerWfTe 2PbhjAYg965XgOg1WOYUk37WyiCfCNlanYIcgSufAJd49Sd4IwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOqo1c4ub7IEXAeiQxiNJmYdjY51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvODYyNGYyNGItMzRjNi0z YmQ4LThkYmUtNDAwMzM2ZjljMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGZK74D BACZK8YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAddLjXGjQD0niVhr6aadh+gnOn8W1+Zcx/RrPBIRv35JP xWGfDkvqcrnWOxm9fNRMvMbahcch9+JuIPdJWkZyOCy6gI/1WOkst1CHfWCS6V9E +uqA1GF4nE9s1DQeyN/d+NVzHf7Ds9pW+4P+Cj0QHNI2mT58AVI3b25cGLQfkR4I U4ZyHq29t+bLafggeYxN3OtIbbPViPgrVTzUBFH3ohlzClBfUPwStcaM7XZKsJeA K6Zd3uiad5LORSVvjqZhKQ3FeS5ffZywLiJCQBbxLGZwHOzQQ3uLb8CdXcspBdes b2ssLgFoKAXHDGvPj8rdH0IdzIpaP4ka0IzPOJFdeg== -----END CERTIFICATE-----Generated at Wed Oct 28 11:51:53 2026 by rpki-client