$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4e7c99a-e718-340e-93c4-81ddf55955e5.roa File: b4e7c99a-e718-340e-93c4-81ddf55955e5.roa (raw, json) Hash identifier: ntJnIM/BzYBu3D5d9QuD1cBDo4tMb1h2QiAo1CsswBg= Subject key identifier: AF:FB:44:20:B6:9C:68:BE:1B:55:11:01:B9:96:1C:2B:1D:2D:74:FC Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584F4F0806268C4648047A2B93EA Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4e7c99a-e718-340e-93c4-81ddf55955e5.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 54994 IP address blocks: 153.43.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:06:26:8c:46:48:04:7a:2b:93:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=9eaa7af9-70e7-4d89-9fdf-712475d8198d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:45:70:95:41:75:d0:6c:94:4b:7f:15:11: 58:f0:99:9e:b9:c3:fa:c5:f4:71:21:6d:42:a2:3a: c6:3f:97:1c:ba:65:6f:4a:b5:c8:ce:71:16:9d:4e: e8:9d:0f:8f:51:33:21:de:f3:cd:4e:2c:db:67:b9: 84:ea:01:43:4f:7f:c2:37:ab:79:5b:f9:3d:93:fe: 58:c0:6f:31:a2:9f:cb:da:70:e1:45:02:1c:ff:97: 33:e4:4c:44:0d:08:1e:87:fa:8e:77:68:32:63:1a: 0f:6d:ce:d0:d2:84:56:b0:c5:d1:f4:8e:ca:00:b9: 46:6e:4e:95:0d:63:03:f2:3e:b5:24:3e:b3:76:01: bb:59:e9:13:41:51:19:9e:d8:83:94:2a:7c:ba:00: 7b:f6:76:27:ff:ce:13:a8:42:de:b1:b0:68:6a:2d: f2:60:d8:ab:8f:c1:68:4b:31:51:d0:2e:79:ef:b4: fd:26:f6:73:95:bd:59:14:31:d2:27:9d:0f:e0:63: 35:51:d0:70:7f:a4:78:0e:d3:0c:a9:72:07:04:52: b9:f5:78:04:2d:7a:3c:0d:4e:f3:0b:29:d3:03:89: f9:7a:08:d5:85:ce:3a:15:97:f4:06:6e:56:78:88: 75:ae:43:c4:82:25:f2:fa:7b:74:65:10:97:84:a5: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FB:44:20:B6:9C:68:BE:1B:55:11:01:B9:96:1C:2B:1D:2D:74:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4e7c99a-e718-340e-93c4-81ddf55955e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:18:ef:98:d3:93:12:d6:89:43:c6:53:06:00:f0:50:37:9c: 5b:3b:6d:55:d7:0e:da:4a:89:a0:94:23:92:ef:f8:69:ab:c1: 32:08:ac:27:10:6a:ff:f9:ff:dd:4d:e8:4f:a8:8a:fa:f6:d4: 91:55:ca:55:62:c6:ae:71:6f:8e:30:ac:61:b4:da:45:b1:bd: 41:af:54:8f:dc:47:ef:01:b8:3a:a9:8b:83:69:ac:43:eb:c1: 60:ec:db:53:c9:26:69:0d:5b:3e:5a:ef:3c:2b:a9:ad:e5:fc: f5:4e:f7:a4:74:ca:c7:75:04:5b:32:e5:aa:e7:14:4e:f0:50: ec:ea:5d:d2:92:70:a2:10:1d:6c:8b:7e:89:1b:35:99:ac:bb: 2a:cf:07:37:22:f2:f8:6a:35:4c:a1:cb:e1:88:71:cf:9d:56: 71:51:5d:c3:e8:f0:53:e4:12:08:65:c9:df:24:99:4c:3b:9a: 0a:5a:3b:9e:7c:3b:0f:58:84:dc:ca:8c:32:4c:e7:9d:2b:35: 46:cf:31:f5:d7:31:8e:4f:be:73:fe:7c:ff:2d:8e:61:b3:5d: a2:14:50:07:21:d2:4a:5c:d0:d7:a6:39:b5:40:81:20:2a:7e: 06:61:d8:03:27:4e:10:f2:fd:2c:e8:01:df:09:24:7e:9f:8d: cb:f8:ea:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAYmjEZIBHork+owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk OWVhYTdhZjktNzBlNy00ZDg5LTlmZGYtNzEyNDc1ZDgxOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7dFcJVBddBslEt/FRFY8JmeucP6xfRxIW1C ojrGP5ccumVvSrXIznEWnU7onQ+PUTMh3vPNTizbZ7mE6gFDT3/CN6t5W/k9k/5Y wG8xop/L2nDhRQIc/5cz5ExEDQgeh/qOd2gyYxoPbc7Q0oRWsMXR9I7KALlGbk6V DWMD8j61JD6zdgG7WekTQVEZntiDlCp8ugB79nYn/84TqELesbBoai3yYNirj8Fo SzFR0C5577T9JvZzlb1ZFDHSJ50P4GM1UdBwf6R4DtMMqXIHBFK59XgELXo8DU7z CynTA4n5egjVhc46FZf0Bm5WeIh1rkPEgiXy+nt0ZRCXhKUChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/7RCC2nGi+G1URAbmWHCsdLXT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjRlN2M5OWEtZTcxOC0z NDBlLTkzYzQtODFkZGY1NTk1NWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwY75jTkxLWiUPGUwYA8FA3nFs7bVXXDtpKiaCUI5Lv+GmrwTIIrCcQ av/5/91N6E+oivr21JFVylVixq5xb44wrGG02kWxvUGvVI/cR+8BuDqpi4NprEPr wWDs21PJJmkNWz5a7zwrqa3l/PVO96R0ysd1BFsy5arnFE7wUOzqXdKScKIQHWyL fokbNZmsuyrPBzci8vhqNUyhy+GIcc+dVnFRXcPo8FPkEghlyd8kmUw7mgpaO558 Ow9YhNzKjDJM550rNUbPMfXXMY5PvnP+fP8tjmGzXaIUUAch0kpc0NemObVAgSAq fgZh2AMnThDy/SzoAd8JJH6fjcv46qY= -----END CERTIFICATE-----Generated at Tue Oct 20 09:12:44 2026 by rpki-client