$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4e7c99a-e718-340e-93c4-81ddf55955e5.roa File: b4e7c99a-e718-340e-93c4-81ddf55955e5.roa (raw, json) Hash identifier: 5m9mGZ7ZZrdz+lEfccloJyaFUGEVKxoydALIuKGeYuc= Subject key identifier: C2:17:E0:90:9C:A4:EB:46:DB:37:35:6A:A6:99:BD:83:06:5B:89:E6 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EAD1C46896CC7C664229EC900 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4e7c99a-e718-340e-93c4-81ddf55955e5.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 54994 IP address blocks: 153.43.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:46:89:6c:c7:c6:64:22:9e:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=a243de30-787b-4a4a-9f85-3bcba474467a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:ad:c3:35:41:5f:72:a1:18:41:a3:36:da: 4c:f5:46:d6:09:5d:ed:e0:fe:3c:91:5d:4f:90:72: 81:ea:de:fc:83:b6:c1:f9:36:ff:bc:26:e4:d7:5e: ca:27:66:7a:f0:35:4b:8c:bf:41:b1:e1:99:fb:ba: aa:c6:26:38:d1:fc:e5:c7:05:91:fd:33:1a:47:1f: 3a:c5:05:42:2f:33:c8:be:fe:cc:b2:ab:d0:0b:e2: c6:ad:bb:5a:e4:f6:0e:40:ba:a1:df:d4:2a:2c:c1: 15:d8:49:77:43:c6:02:d6:a1:58:2c:6d:ab:c6:42: 58:76:54:6d:34:88:24:c5:1a:6b:25:f9:a1:47:ec: 93:c4:a9:95:b2:3b:8e:3a:74:64:4f:a2:60:4a:cc: 43:48:b3:fa:3d:70:b9:24:55:af:c8:d1:1b:7c:5e: ab:c2:5b:63:3d:f4:ef:20:ed:55:a7:f9:94:aa:a0: d4:b2:0e:b0:aa:57:67:ba:3e:ca:71:30:77:08:ba: 13:f7:b5:cb:12:9b:c2:f7:c3:d9:ea:b2:45:64:53: 6a:28:b5:cb:a0:5c:48:6b:9a:a4:98:5f:25:eb:fa: 31:1e:7b:cb:9a:aa:77:4e:0d:de:05:5f:7f:31:83: 3d:9f:ad:12:e4:a6:1f:b0:59:a0:7f:86:2a:6c:49: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:17:E0:90:9C:A4:EB:46:DB:37:35:6A:A6:99:BD:83:06:5B:89:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b4e7c99a-e718-340e-93c4-81ddf55955e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5b:e2:d7:ad:e3:a1:ee:52:cf:21:17:bd:f4:f3:f0:2e:63: 7f:97:a3:37:79:43:ff:40:02:3f:79:27:53:14:ea:08:16:d5: de:c0:bb:ef:d2:7c:c1:cb:f0:30:bd:fd:b2:06:41:2c:d9:61: fb:fb:e5:d3:53:15:ac:f4:22:2c:96:a8:d8:6a:cd:e8:0e:d7: 02:71:56:6c:28:d5:e0:b0:2a:61:73:52:4c:a7:0c:68:86:03: a2:78:00:c2:37:4d:23:e6:84:10:c7:ba:ef:6a:67:ab:8d:63: 37:5e:be:c1:76:f4:62:48:ea:29:93:eb:75:ba:82:34:04:b8: 5b:f4:26:b1:f5:bc:c2:b4:c3:4b:66:46:96:cc:70:ea:bc:30: b9:a2:1f:36:3d:25:90:39:3f:16:67:89:56:98:f2:d1:dc:ea: 4f:30:16:44:49:d1:d8:8c:5c:24:3b:35:6a:3c:1f:69:f5:6c: 80:49:b7:92:14:f7:8f:49:f4:12:f2:73:28:27:7b:8c:aa:7b: 75:5f:20:11:ec:46:21:db:63:d8:ce:80:65:c9:90:57:42:fa: 9f:a2:42:d7:86:fc:60:5a:0c:b9:cd:c9:07:df:90:4f:03:24: 34:3b:f3:1d:dc:a9:6f:39:cd:a1:38:6b:4c:d8:d3:9e:03:1c: e4:dd:d7:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHEaJbMfGZCKeyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk YTI0M2RlMzAtNzg3Yi00YTRhLTlmODUtM2JjYmE0NzQ0NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgetwzVBX3KhGEGjNtpM9UbWCV3t4P48kV1P kHKB6t78g7bB+Tb/vCbk117KJ2Z68DVLjL9BseGZ+7qqxiY40fzlxwWR/TMaRx86 xQVCLzPIvv7MsqvQC+LGrbta5PYOQLqh39QqLMEV2El3Q8YC1qFYLG2rxkJYdlRt NIgkxRprJfmhR+yTxKmVsjuOOnRkT6JgSsxDSLP6PXC5JFWvyNEbfF6rwltjPfTv IO1Vp/mUqqDUsg6wqldnuj7KcTB3CLoT97XLEpvC98PZ6rJFZFNqKLXLoFxIa5qk mF8l6/oxHnvLmqp3Tg3eBV9/MYM9n60S5KYfsFmgf4YqbEkbfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIX4JCcpOtG2zc1aqaZvYMGW4nmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjRlN2M5OWEtZTcxOC0z NDBlLTkzYzQtODFkZGY1NTk1NWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5b4tet46HuUs8hF7308/AuY3+Xozd5Q/9AAj95J1MU6ggW1d7Au+/S fMHL8DC9/bIGQSzZYfv75dNTFaz0IiyWqNhqzegO1wJxVmwo1eCwKmFzUkynDGiG A6J4AMI3TSPmhBDHuu9qZ6uNYzdevsF29GJI6imT63W6gjQEuFv0JrH1vMK0w0tm RpbMcOq8MLmiHzY9JZA5PxZniVaY8tHc6k8wFkRJ0diMXCQ7NWo8H2n1bIBJt5IU 949J9BLycygne4yqe3VfIBHsRiHbY9jOgGXJkFdC+p+iQteG/GBaDLnNyQffkE8D JDQ78x3cqW85zaE4a0zY054DHOTd13g= -----END CERTIFICATE-----Generated at Sat Sep 5 04:38:31 2026 by rpki-client