$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f430a50d-2a0d-3ed4-9dd9-db47607552b8.roa File: f430a50d-2a0d-3ed4-9dd9-db47607552b8.roa (raw, json) Hash identifier: 9D5aH9TTVwrCN24bIb+BbdSHqgSb/nxec8MjMmAW3IY= Subject key identifier: DA:06:28:8C:05:01:0D:79:52:69:AB:65:C6:B1:F3:58:83:E1:23:CA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E8C8A5F8AC13AABF5BD466900 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f430a50d-2a0d-3ed4-9dd9-db47607552b8.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 54994 IP address blocks: 153.43.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:5f:8a:c1:3a:ab:f5:bd:46:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=17d1cdad-2bb1-4415-928e-39500d32a377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:c9:0a:93:62:48:a9:84:29:1b:71:0e:cb: 45:ca:07:80:16:a5:a2:55:f2:d9:00:51:b3:f9:db: b0:33:fa:88:a5:e5:45:3f:09:7d:0e:d4:25:92:3f: 64:b2:75:f7:6c:18:eb:a7:d8:9c:2f:92:37:1c:e5: d0:c7:5d:78:2f:03:7d:db:91:32:3f:05:80:b7:db: 18:46:3d:28:f6:06:4d:29:69:ba:8c:8e:fa:2d:30: e5:03:75:43:e7:45:80:21:78:1e:0a:86:ac:c9:d8: ad:6a:8d:ee:2c:ed:aa:a2:0b:f4:89:c8:d2:a2:2d: c1:ad:00:30:c9:4d:51:71:a3:0f:56:c8:62:a4:f9: 32:34:4b:b8:89:82:af:37:68:cc:a9:c4:34:a8:e5: e9:56:86:9f:2a:33:f9:bf:66:3a:13:f1:95:7e:04: c0:f3:d7:e5:dc:1b:be:ff:6c:75:38:42:92:28:3e: e2:de:61:54:df:6d:4f:0e:9a:58:75:30:f7:23:b0: 26:64:fb:48:b4:0d:73:a9:65:b3:2a:3b:36:80:35: fa:14:fb:fe:3f:c7:fc:8b:65:e6:e8:e8:2b:be:16: b4:8b:16:5c:77:73:02:56:ac:2e:f9:d4:ff:50:df: ae:63:57:89:42:91:39:52:b7:6d:75:4b:78:9b:bc: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:06:28:8C:05:01:0D:79:52:69:AB:65:C6:B1:F3:58:83:E1:23:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f430a50d-2a0d-3ed4-9dd9-db47607552b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:18:83:ff:f5:f2:56:db:df:60:97:85:25:c0:6b:a3:45:d4: bc:dc:4a:ac:c2:8c:74:c5:db:53:73:d7:be:98:d6:1a:d8:3a: 7c:ac:5f:fe:be:1f:d4:98:83:0d:7a:a3:7f:44:cd:73:75:09: 67:a4:f3:80:4c:04:09:e5:d4:a6:57:bb:df:39:49:32:fb:1f: 78:e5:a4:4b:cf:01:3e:eb:09:6b:6f:b2:76:30:4d:94:fc:8b: be:d2:91:88:27:6a:07:a1:ca:a5:30:1e:2d:b6:ac:48:da:88: 26:d1:31:1e:3a:d0:cc:bb:af:47:2e:ff:a5:e5:cc:e6:e3:c8: 72:ad:67:26:3b:cc:f2:4e:89:ea:ea:ad:2a:2f:9e:78:23:90: 2a:61:2b:32:04:b5:33:45:fa:aa:53:58:ec:da:ae:98:a2:af: 22:a4:3d:c3:f4:5c:51:78:eb:f9:9b:49:73:93:2d:69:2d:26: 81:04:40:04:9f:c5:62:43:70:02:85:73:9f:28:ff:fd:93:25: 8a:7b:49:60:64:64:d6:0e:f2:2f:3c:db:40:db:f6:09:aa:f4: 26:6c:7d:fb:11:a9:22:e0:9c:d9:14:b5:c4:e2:8d:6e:2f:7b: ae:a7:c9:e6:bc:3e:15:90:45:e4:3e:ce:4e:9e:9e:02:8f:71: 24:e4:cd:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mil+KwTqr9b1GaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk MTdkMWNkYWQtMmJiMS00NDE1LTkyOGUtMzk1MDBkMzJhMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvrJCpNiSKmEKRtxDstFygeAFqWiVfLZAFGz +duwM/qIpeVFPwl9DtQlkj9ksnX3bBjrp9icL5I3HOXQx114LwN925EyPwWAt9sY Rj0o9gZNKWm6jI76LTDlA3VD50WAIXgeCoasyditao3uLO2qogv0icjSoi3BrQAw yU1RcaMPVshipPkyNEu4iYKvN2jMqcQ0qOXpVoafKjP5v2Y6E/GVfgTA89fl3Bu+ /2x1OEKSKD7i3mFU321PDppYdTD3I7AmZPtItA1zqWWzKjs2gDX6FPv+P8f8i2Xm 6Ogrvha0ixZcd3MCVqwu+dT/UN+uY1eJQpE5UrdtdUt4m7wblwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoGKIwFAQ15UmmrZcax81iD4SPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjQzMGE1MGQtMmEwZC0z ZWQ0LTlkZDktZGI0NzYwNzU1MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcYg//18lbb32CXhSXAa6NF1LzcSqzCjHTF21Nz176Y1hrYOnysX/6+ H9SYgw16o39EzXN1CWek84BMBAnl1KZXu985STL7H3jlpEvPAT7rCWtvsnYwTZT8 i77SkYgnagehyqUwHi22rEjaiCbRMR460My7r0cu/6XlzObjyHKtZyY7zPJOierq rSovnngjkCphKzIEtTNF+qpTWOzarpiiryKkPcP0XFF46/mbSXOTLWktJoEEQASf xWJDcAKFc58o//2TJYp7SWBkZNYO8i8820Db9gmq9CZsffsRqSLgnNkUtcTijW4v e66nyea8PhWQReQ+zk6engKPcSTkzaU= -----END CERTIFICATE-----Generated at Tue Jul 21 19:44:39 2026 by rpki-client