$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eec6d885-d0aa-301d-b7eb-9b8e26259e12.roa File: eec6d885-d0aa-301d-b7eb-9b8e26259e12.roa (raw, json) Hash identifier: Lx0WZPHMGao6D0EBMGqnUpRdEf/TqVURSK/FHs4WO6M= Subject key identifier: 70:20:1E:EA:C5:36:9E:6A:BD:2B:6B:13:EF:8E:22:02:E5:97:66:F0 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E736A3B875CF431993CE38B80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eec6d885-d0aa-301d-b7eb-9b8e26259e12.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 54994 IP address blocks: 153.43.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:3b:87:5c:f4:31:99:3c:e3:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=d2c791e1-dba8-484c-addb-0b115abe7508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:60:78:72:53:bf:b7:d6:bc:dc:df:7c:c9: 17:a3:1e:73:a0:f2:7a:0c:03:e7:cc:3e:62:39:01: ba:c8:1a:76:a7:60:43:fe:06:d9:4d:99:73:34:ec: 88:1d:1a:04:bb:cb:63:21:f0:34:85:55:e9:16:22: f5:a6:e6:66:a7:36:fa:f9:32:dc:fd:84:18:bf:9e: 20:51:93:75:55:8f:30:d1:2c:ad:68:82:82:f5:4c: 1c:e4:95:75:7c:05:be:82:2e:2b:cf:d1:6c:04:36: 77:7f:b1:39:78:c1:71:e3:19:75:d6:0c:e8:cc:b8: 28:11:ed:0f:a1:58:52:23:ed:9d:79:7c:08:1e:b8: cd:7b:a9:a2:3c:ee:32:c7:8b:45:54:b3:9c:7b:c4: a3:82:69:88:74:8d:1d:e7:e7:2e:82:14:72:c4:1d: d5:8e:68:b0:92:06:d9:4b:5f:7a:9c:16:d3:07:ab: 8c:0a:f5:82:b7:4e:83:75:f7:47:7f:23:db:49:3a: 1c:f2:b1:14:9b:4e:d0:35:01:12:0a:8d:ed:74:74: 71:70:50:a8:ad:41:f0:7e:9a:75:ff:5d:cf:7d:4e: e3:64:d6:16:5e:da:b0:6f:32:c1:39:be:4f:33:92: 73:05:e9:c3:57:ca:11:50:75:90:1f:ad:d8:6d:dd: 44:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:1E:EA:C5:36:9E:6A:BD:2B:6B:13:EF:8E:22:02:E5:97:66:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eec6d885-d0aa-301d-b7eb-9b8e26259e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:12:f5:6f:a3:be:39:16:36:77:c0:ad:d6:23:ee:e5:41:d7: 0f:c8:ff:b6:2d:b5:35:a9:2c:ed:51:1a:89:8c:c1:f7:02:04: 26:c1:5c:62:3f:d8:e5:8f:6a:f0:1d:89:5c:71:6c:a6:15:1f: fd:4c:ac:67:1b:f4:9d:37:4b:a2:53:c2:1b:e8:26:a7:ee:8c: 3c:23:42:ee:99:4b:66:f4:26:79:d7:61:a4:22:14:dd:b6:c6: f2:cc:20:45:de:0f:8c:49:8a:20:86:8b:4c:23:18:98:63:72: d0:fb:f5:be:82:3f:04:5c:58:b2:5e:49:72:d4:a5:88:81:07: 44:e8:b2:cb:3e:7d:b8:00:cc:5c:f2:c2:a3:e2:49:5a:24:07: 52:b5:5d:32:5c:99:78:a8:dd:78:75:a7:22:91:53:45:f8:d7: b8:27:da:4c:d1:e2:8d:6d:32:78:61:1f:2e:5e:ed:13:a9:a8: 41:b6:ff:3e:92:bb:4a:75:34:0b:13:9e:7b:fc:e8:1a:13:72: 5f:66:98:62:17:32:e4:21:3e:5f:26:55:e1:ca:89:83:a2:a8: a4:75:73:c3:55:d3:00:79:bf:09:22:33:46:fc:53:7a:3c:73: 2e:34:23:ff:30:c7:92:d4:4f:30:8b:a0:54:5e:90:e6:5c:d7: da:6a:cb:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajuHXPQxmTzji4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk ZDJjNzkxZTEtZGJhOC00ODRjLWFkZGItMGIxMTVhYmU3NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC1geHJTv7fWvNzffMkXox5zoPJ6DAPnzD5i OQG6yBp2p2BD/gbZTZlzNOyIHRoEu8tjIfA0hVXpFiL1puZmpzb6+TLc/YQYv54g UZN1VY8w0SytaIKC9Uwc5JV1fAW+gi4rz9FsBDZ3f7E5eMFx4xl11gzozLgoEe0P oVhSI+2deXwIHrjNe6miPO4yx4tFVLOce8SjgmmIdI0d5+cughRyxB3VjmiwkgbZ S196nBbTB6uMCvWCt06DdfdHfyPbSToc8rEUm07QNQESCo3tdHRxcFCorUHwfpp1 /13PfU7jZNYWXtqwbzLBOb5PM5JzBenDV8oRUHWQH63Ybd1EuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAgHurFNp5qvStrE++OIgLll2bwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZWVjNmQ4ODUtZDBhYS0z MDFkLWI3ZWItOWI4ZTI2MjU5ZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4S9W+jvjkWNnfArdYj7uVB1w/I/7YttTWpLO1RGomMwfcCBCbBXGI/ 2OWPavAdiVxxbKYVH/1MrGcb9J03S6JTwhvoJqfujDwjQu6ZS2b0JnnXYaQiFN22 xvLMIEXeD4xJiiCGi0wjGJhjctD79b6CPwRcWLJeSXLUpYiBB0Tosss+fbgAzFzy wqPiSVokB1K1XTJcmXio3Xh1pyKRU0X417gn2kzR4o1tMnhhHy5e7ROpqEG2/z6S u0p1NAsTnnv86BoTcl9mmGIXMuQhPl8mVeHKiYOiqKR1c8NV0wB5vwkiM0b8U3o8 cy40I/8wx5LUTzCLoFRekOZc19pqyyQ= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:29 2026 by rpki-client