$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa File: a655e053-8445-36ca-bd9a-65d680860a66.roa (raw, json) Hash identifier: qDmnyAi87XH7DPgNjaSof/tIwBpJ3ye1Yvka20hek9g= Subject key identifier: BD:A1:F3:BD:2F:BF:4E:56:D9:84:B9:7E:1E:16:6D:17:36:20:1E:CA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E736A3DE2B6D162D5357D1980 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 54994 IP address blocks: 153.43.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:3d:e2:b6:d1:62:d5:35:7d:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=ab8cbb36-ae73-4adb-a046-9e2d7acb68d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e5:d0:26:2f:91:10:9a:04:1b:96:b5:c3:1e: c3:46:57:d7:33:ff:23:03:67:06:b2:25:be:23:34: 5a:d4:ed:c2:92:9a:26:6e:77:4e:31:70:4e:98:eb: 6f:6c:cc:12:fb:82:6b:90:22:90:90:f5:24:45:27: 75:36:a1:dd:62:1a:82:a0:fc:c5:c3:9b:00:01:ee: 4e:9f:cd:22:3c:1b:98:74:45:56:83:b0:7e:52:06: f2:b1:a4:de:4d:b4:55:66:07:32:0e:84:78:65:eb: 0b:80:6b:25:a9:e2:29:03:00:a9:78:c1:e3:74:c2: e0:2f:bf:5a:62:82:d0:8a:3e:26:bc:05:8c:7b:c9: d5:05:21:01:a5:37:fa:65:b8:ae:d8:b1:db:8a:ae: 32:6d:79:90:1e:2c:3f:50:da:7c:fe:a4:fd:ae:56: ca:b5:1e:a3:ac:e2:72:cd:fc:02:fc:e9:4f:a1:41: 15:b4:61:fa:80:b0:d5:ef:28:ec:b6:35:e9:20:51: cb:67:20:65:ec:83:b2:ba:3a:c5:ae:05:41:0b:da: 2c:8e:c7:61:1c:f1:8b:3b:fa:2c:11:4f:84:cc:19: 8c:02:3b:2c:8a:ae:a0:d2:ca:cb:2b:1a:8a:d7:61: cd:63:54:92:20:d5:4b:c4:6f:0d:80:8f:5b:62:af: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A1:F3:BD:2F:BF:4E:56:D9:84:B9:7E:1E:16:6D:17:36:20:1E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:12:78:be:dc:95:6c:56:4b:51:34:de:97:95:ff:8e:fd:69: 9f:f6:31:26:41:c4:05:47:b1:4f:9b:f6:c7:1e:60:7b:da:11: e1:1b:a3:b3:a5:55:a3:21:11:28:cd:81:3b:f2:d1:8f:a0:55: 93:7a:ad:6f:2e:4f:72:16:f8:ba:9d:e3:6e:e8:9f:e9:46:6c: d4:3c:43:d8:90:9b:c1:9f:22:50:6b:32:92:44:1a:d1:7b:6a: f0:0a:e3:b4:47:93:b2:87:b0:45:1d:64:64:5d:3c:3f:f2:87: 5f:6f:32:0d:f8:70:2f:45:41:82:ae:69:a9:98:26:67:37:2a: 38:bf:fa:70:96:84:c4:5a:a4:17:7e:07:47:3a:d7:c4:a9:68: b2:89:a0:f8:99:8a:c3:16:5c:77:9e:62:b9:14:4f:66:aa:93: df:7d:ad:fc:65:c8:4c:ed:b8:be:81:e0:b1:d7:9d:75:b0:aa: c1:f0:0e:b2:67:a0:c0:bf:1a:e4:59:07:3d:b1:82:c1:66:12: 7d:e2:99:05:ed:1e:80:e2:0f:ae:22:06:6b:ae:66:6a:7f:82: c1:a2:13:e4:27:7c:e6:8b:40:6a:bf:b5:91:5e:f6:63:b1:b0: aa:e4:44:07:01:4b:fe:b8:f4:14:68:a1:d9:62:af:e9:da:b6: f9:89:fc:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaj3ittFi1TV9GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk YWI4Y2JiMzYtYWU3My00YWRiLWEwNDYtOWUyZDdhY2I2OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOXQJi+REJoEG5a1wx7DRlfXM/8jA2cGsiW+ IzRa1O3CkpombndOMXBOmOtvbMwS+4JrkCKQkPUkRSd1NqHdYhqCoPzFw5sAAe5O n80iPBuYdEVWg7B+UgbysaTeTbRVZgcyDoR4ZesLgGslqeIpAwCpeMHjdMLgL79a YoLQij4mvAWMe8nVBSEBpTf6Zbiu2LHbiq4ybXmQHiw/UNp8/qT9rlbKtR6jrOJy zfwC/OlPoUEVtGH6gLDV7yjstjXpIFHLZyBl7IOyujrFrgVBC9osjsdhHPGLO/os EU+EzBmMAjssiq6g0srLKxqK12HNY1SSINVLxG8NgI9bYq9BVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2h870vv05W2YS5fh4WbRc2IB7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYTY1NWUwNTMtODQ0NS0z NmNhLWJkOWEtNjVkNjgwODYwYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkSeL7clWxWS1E03peV/479aZ/2MSZBxAVHsU+b9sceYHvaEeEbo7Ol VaMhESjNgTvy0Y+gVZN6rW8uT3IW+Lqd427on+lGbNQ8Q9iQm8GfIlBrMpJEGtF7 avAK47RHk7KHsEUdZGRdPD/yh19vMg34cC9FQYKuaamYJmc3Kji/+nCWhMRapBd+ B0c618SpaLKJoPiZisMWXHeeYrkUT2aqk999rfxlyEztuL6B4LHXnXWwqsHwDrJn oMC/GuRZBz2xgsFmEn3imQXtHoDiD64iBmuuZmp/gsGiE+QnfOaLQGq/tZFe9mOx sKrkRAcBS/649BRoodlir+natvmJ/OY= -----END CERTIFICATE-----Generated at Tue Jul 21 19:44:54 2026 by rpki-client