$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8cd5a3b1-f453-301e-b84f-697820f27590.roa File: 8cd5a3b1-f453-301e-b84f-697820f27590.roa (raw, json) Hash identifier: 552MTi2wtYsFnhEYhvWknYJmIbdJIi33zZVEkisj9jM= Subject key identifier: D4:B7:2F:52:39:AA:05:C6:1E:9F:A7:F8:93:DA:54:C0:CD:ED:F4:21 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E8C8A3D3BA6F68EE58C59E280 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8cd5a3b1-f453-301e-b84f-697820f27590.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 54994 IP address blocks: 153.43.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:3d:3b:a6:f6:8e:e5:8c:59:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=a1ce5a80-9656-43bd-9908-e5901126a8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:98:ce:74:cd:89:a8:69:57:09:4c:1b:99:47: bd:c9:27:14:bf:aa:e9:5b:12:1d:28:6b:24:72:15: 96:7a:52:0d:90:6a:a2:34:03:af:43:b4:c3:6a:17: a0:fb:8f:25:0d:21:0a:33:1b:7f:e1:4f:2f:4d:7e: 62:38:07:52:b7:96:f2:4b:50:eb:0c:31:d6:a9:f3: 9f:4d:d8:f8:b1:87:4e:2c:17:fd:79:d7:bc:1d:7f: 29:b0:ad:bd:67:3e:15:d6:b1:5b:4d:38:b3:2d:9f: 58:f4:f7:90:45:cd:89:2d:33:4c:f6:1b:2d:e2:02: 98:23:5f:b1:1f:1a:e1:44:a0:74:d1:c5:4b:ee:c9: 35:3e:ae:a8:e9:22:cf:c5:48:de:d7:b3:6e:ce:9b: 88:a6:c2:29:5b:14:f6:9f:32:75:5c:01:32:37:31: 85:55:f0:90:c3:70:4e:0b:4c:4f:b7:77:44:56:da: 58:97:e3:9a:8f:06:ad:26:b9:d9:4e:00:19:a9:27: 00:7b:bf:45:5e:1d:ca:b0:34:b6:e1:04:ae:c8:4f: 32:d5:f2:15:94:b6:81:87:5f:2b:01:38:af:cb:e1: 26:f7:f8:85:e7:91:18:63:56:1d:e7:8b:52:63:9c: 74:8e:4b:39:9d:c2:30:2e:76:47:56:df:58:3e:38: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:2F:52:39:AA:05:C6:1E:9F:A7:F8:93:DA:54:C0:CD:ED:F4:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8cd5a3b1-f453-301e-b84f-697820f27590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:81:c6:9b:97:9c:93:d9:60:d8:6e:b0:29:37:6f:b0:f5:e6: 44:ce:3e:a1:31:ce:0c:3a:0d:0f:4c:99:d5:f4:57:3a:7f:f8: 5c:07:bd:1c:1b:ea:65:81:cb:42:ab:4f:b2:41:73:9c:84:33: 96:6d:70:6c:3a:7f:93:5a:75:69:b4:6f:df:7d:a0:e5:49:41: 61:89:e0:9f:58:7c:73:5d:1a:69:f6:29:95:e9:8a:80:7a:eb: 60:23:3e:ee:66:a9:00:f1:f6:32:97:94:16:46:1d:e4:8a:b1: b5:e8:2e:c8:56:31:b5:a4:b3:d1:09:44:b6:53:75:20:0d:95: 1c:07:06:d1:16:9e:cf:3e:82:02:f9:14:59:1e:d4:9a:77:e2: 42:c3:3e:4f:89:f6:5f:30:08:66:e4:ab:65:82:e9:ad:ee:d4: 92:59:f6:b2:43:e8:00:67:16:0b:fb:d4:fa:8c:8a:4b:e2:d2: a4:a4:cd:1b:84:fe:e9:9f:35:c0:6c:63:96:1f:73:1f:30:1c: 7d:60:4f:53:a1:a4:b6:55:bb:31:67:4e:96:0f:a4:68:1a:e1: 62:07:6d:e8:e5:20:10:7f:73:69:37:1b:4e:e2:80:41:86:b9: 63:e0:1f:a0:83:7f:9a:bc:71:e4:0d:48:1e:9d:c4:be:7c:d2: f5:ca:be:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mij07pvaO5YxZ4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk YTFjZTVhODAtOTY1Ni00M2JkLTk5MDgtZTU5MDExMjZhOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5jOdM2JqGlXCUwbmUe9yScUv6rpWxIdKGsk chWWelINkGqiNAOvQ7TDaheg+48lDSEKMxt/4U8vTX5iOAdSt5byS1DrDDHWqfOf Tdj4sYdOLBf9ede8HX8psK29Zz4V1rFbTTizLZ9Y9PeQRc2JLTNM9hst4gKYI1+x HxrhRKB00cVL7sk1Pq6o6SLPxUje17NuzpuIpsIpWxT2nzJ1XAEyNzGFVfCQw3BO C0xPt3dEVtpYl+OajwatJrnZTgAZqScAe79FXh3KsDS24QSuyE8y1fIVlLaBh18r ATivy+Em9/iF55EYY1Yd54tSY5x0jks5ncIwLnZHVt9YPjhVYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS3L1I5qgXGHp+n+JPaVMDN7fQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGNkNWEzYjEtZjQ1My0z MDFlLWI4NGYtNjk3ODIwZjI3NTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmBxpuXnJPZYNhusCk3b7D15kTOPqExzgw6DQ9MmdX0Vzp/+FwHvRwb 6mWBy0KrT7JBc5yEM5ZtcGw6f5NadWm0b999oOVJQWGJ4J9YfHNdGmn2KZXpioB6 62AjPu5mqQDx9jKXlBZGHeSKsbXoLshWMbWks9EJRLZTdSANlRwHBtEWns8+ggL5 FFke1Jp34kLDPk+J9l8wCGbkq2WC6a3u1JJZ9rJD6ABnFgv71PqMikvi0qSkzRuE /umfNcBsY5Yfcx8wHH1gT1OhpLZVuzFnTpYPpGga4WIHbejlIBB/c2k3G07igEGG uWPgH6CDf5q8ceQNSB6dxL580vXKvgk= -----END CERTIFICATE-----Generated at Tue Jul 21 19:45:35 2026 by rpki-client