$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b933a3e2-5c50-30fb-9c3f-a845b379305e.roa File: b933a3e2-5c50-30fb-9c3f-a845b379305e.roa (raw, json) Hash identifier: wplo0q40+c+CkfT9VLv8L99pzmH4wbhRWOPNtgf/lYo= Subject key identifier: 61:84:9F:09:0C:1F:31:98:F5:C8:F8:B4:B7:21:96:0B:CD:31:D4:AD Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584FA16335452236E560194D5D00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b933a3e2-5c50-30fb-9c3f-a845b379305e.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 54994 IP address blocks: 153.43.36.0/24 maxlen: 24 153.43.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:35:45:22:36:e5:60:19:4d:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=08dc0a5c-bd18-499d-ba15-44c58361e1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fd:aa:32:91:69:0d:b9:d1:79:2b:eb:35:ca: 79:a1:6b:10:ce:d0:56:b8:b3:80:52:9f:9c:2e:cd: 2e:a4:90:8d:49:e6:ab:8e:e5:56:da:00:af:12:8c: 69:26:8d:c9:e0:8e:17:f0:41:14:86:23:3c:d4:4f: 15:5d:ac:45:b9:d0:6e:9c:8f:9c:6e:6c:2b:65:37: dc:f4:74:e0:ae:69:15:78:cb:88:22:4a:a9:11:2b: 88:a4:d8:bc:f8:85:f7:19:cb:ae:8d:fa:b7:ce:a9: 1f:59:8a:6a:e8:84:0b:0b:34:d9:29:b3:2b:b9:f6: 2e:4b:66:15:e1:c8:05:28:2e:d8:9f:e4:8e:cc:4f: 8f:20:99:2f:de:37:f8:9f:dd:8c:ad:71:b6:6b:64: ae:5f:71:8f:7c:66:63:59:e9:d7:6a:fa:a0:46:46: a0:2a:8a:e5:7b:77:b3:33:2e:43:e6:bb:6c:1e:93: 50:43:65:c0:f4:cb:5c:be:e8:cb:33:1e:46:fc:de: 21:c6:81:b3:4e:ca:b4:9d:84:6b:c6:88:7f:d2:64: 2e:b2:90:0a:85:30:84:0e:82:ee:58:0f:49:f2:de: 26:6a:9e:38:24:af:8f:09:76:0f:a6:cb:f2:ec:a3: a9:e2:a5:18:22:33:e8:03:5a:50:9e:6f:18:c3:f7: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:9F:09:0C:1F:31:98:F5:C8:F8:B4:B7:21:96:0B:CD:31:D4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/b933a3e2-5c50-30fb-9c3f-a845b379305e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:7c:ea:31:de:10:f2:b6:31:e1:6f:5f:e3:ae:f9:e5:e4:6b: 92:bd:ed:2f:6d:e8:a3:ad:55:11:59:c2:2b:3e:56:25:75:73: 82:dc:86:24:50:03:fe:69:49:b8:c5:62:b3:4d:70:fc:bb:da: 21:5d:66:83:e9:74:97:3e:fe:72:b2:34:7c:23:78:4d:78:2d: 2d:dd:6d:15:10:42:0c:c5:96:a5:eb:e9:ae:e9:b6:c5:e2:77: 8f:10:62:70:19:76:45:d5:83:bf:ee:6d:d2:1b:20:39:3e:bc: 49:86:80:2f:a7:7a:bc:76:95:c8:a9:4c:25:36:e8:23:60:fd: 10:96:f8:de:f6:f6:c0:3f:84:10:52:a3:b3:a7:a9:e3:ff:0e: 8f:8d:c9:ca:c9:7b:4d:73:d3:9a:2a:49:a0:58:4f:7d:44:af: aa:6e:31:4a:38:40:c9:53:ad:f2:c0:d7:98:cc:cb:6c:5b:76: a8:c1:1a:79:bb:a9:b6:19:16:ca:76:03:fe:da:65:2d:be:c8: 72:06:8a:7c:f6:70:77:c8:17:cf:4f:e6:f9:e1:c0:21:f3:40: 22:f8:fa:52:20:49:4c:fb:bb:1b:89:50:2d:4d:21:be:c2:cb: a4:f3:54:c9:3f:5e:6a:9a:2a:b7:cb:9a:09:9b:53:d8:92:4e: 20:ea:66:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYzVFIjblYBlNXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk MDhkYzBhNWMtYmQxOC00OTlkLWJhMTUtNDRjNTgzNjFlMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP2qMpFpDbnReSvrNcp5oWsQztBWuLOAUp+c Ls0upJCNSearjuVW2gCvEoxpJo3J4I4X8EEUhiM81E8VXaxFudBunI+cbmwrZTfc 9HTgrmkVeMuIIkqpESuIpNi8+IX3Gcuujfq3zqkfWYpq6IQLCzTZKbMrufYuS2YV 4cgFKC7Yn+SOzE+PIJkv3jf4n92MrXG2a2SuX3GPfGZjWenXavqgRkagKorle3ez My5D5rtsHpNQQ2XA9MtcvujLMx5G/N4hxoGzTsq0nYRrxoh/0mQuspAKhTCEDoLu WA9J8t4map44JK+PCXYPpsvy7KOp4qUYIjPoA1pQnm8Yw/c3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGEnwkMHzGY9cj4tLchlgvNMdStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYjkzM2EzZTItNWM1MC0z MGZiLTljM2YtYTg0NWIzNzkzMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFd86jHeEPK2MeFvX+Ou+eXka5K97S9t6KOtVRFZwis+ViV1c4LchiRQ A/5pSbjFYrNNcPy72iFdZoPpdJc+/nKyNHwjeE14LS3dbRUQQgzFlqXr6a7ptsXi d48QYnAZdkXVg7/ubdIbIDk+vEmGgC+nerx2lcipTCU26CNg/RCW+N729sA/hBBS o7OnqeP/Do+NycrJe01z05oqSaBYT31Er6puMUo4QMlTrfLA15jMy2xbdqjBGnm7 qbYZFsp2A/7aZS2+yHIGinz2cHfIF89P5vnhwCHzQCL4+lIgSUz7uxuJUC1NIb7C y6TzVMk/XmqaKrfLmgmbU9iSTiDqZkQ= -----END CERTIFICATE-----Generated at Wed Oct 28 00:16:05 2026 by rpki-client