$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa File: 0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa (raw, json) Hash identifier: 7yB7gFlp+sWra0FEDJeCddyMpIpFjp2Sq1kZk6IWKL4= Subject key identifier: 7A:E6:BD:2D:49:7B:08:8A:5D:25:00:AD:BB:6D:DB:88:8B:9B:87:50 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EBC7718D4D8FD577CFF072FE0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:18:d4:d8:fd:57:7c:ff:07:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=878ef827-0389-45ab-9dfa-7ef71ef023ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:c7:93:92:01:19:ba:97:40:1f:50:2f:fe: 65:fd:8f:27:ae:39:d5:29:6b:17:76:3e:1c:92:e1: 7e:07:bc:18:c5:36:93:23:63:ff:40:7e:69:93:21: 45:ef:6d:ec:e0:4f:f9:54:12:10:d4:97:f7:7e:95: 35:ed:75:de:e9:60:f1:48:a2:3b:4e:6e:07:f2:61: f5:1f:4d:f0:4c:c7:b5:b9:9d:02:e9:8a:21:d4:43: 62:ef:ad:b8:0b:9c:a3:e2:6f:72:61:3b:75:1a:e9: 95:b0:46:b8:3b:36:d4:34:2b:3b:7f:6b:8d:98:5b: b5:40:dc:d5:ff:80:f9:50:36:78:d3:e3:86:30:6d: 4c:61:2c:c1:65:59:4f:27:88:00:9a:48:b0:3a:ec: 59:02:03:e0:e9:5e:a6:9d:46:23:6c:7f:12:2c:27: 7e:5f:07:bf:e0:8d:0d:3d:c0:0b:02:39:c3:49:54: e6:c9:f4:f7:62:5d:f6:c5:3e:d9:8c:82:94:3b:19: 04:a1:80:63:7f:10:98:37:76:91:0d:18:d4:bb:f5: df:db:d1:67:5d:26:ea:e7:12:9d:7a:36:bd:c6:5b: 02:12:22:60:a0:0d:a0:89:ea:0a:24:86:3e:ba:c5: dd:e7:9a:af:66:9f:18:04:a7:b2:83:f7:1f:8b:49: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E6:BD:2D:49:7B:08:8A:5D:25:00:AD:BB:6D:DB:88:8B:9B:87:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0ed8cfcc-cb8e-31a6-9aa9-859814ffb66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0b:65:c2:9e:7f:92:9e:3f:d0:85:b5:31:d9:5b:41:04:23: 1d:ee:66:09:86:f3:74:ad:0a:08:77:95:c1:75:c8:86:4b:23: 80:80:4a:0b:c8:c9:cb:63:52:b1:81:14:d2:ca:8c:2f:a3:cb: 98:a6:5b:ad:9b:61:73:89:d2:69:e7:2a:9a:a3:36:c7:c6:d7: 96:bb:c2:55:99:f3:1b:16:3d:86:af:55:60:21:c5:cf:f9:b4: e4:05:3d:ae:df:ed:1d:0c:a2:c3:73:94:90:94:cc:34:48:7c: 41:4b:55:09:f6:21:92:ff:67:3d:f6:e8:fe:9b:b4:71:40:30: 7a:ed:65:f9:cd:09:10:fb:17:4c:6e:93:e2:81:88:de:b1:97: 60:7a:9b:1b:42:fd:fe:05:97:24:ef:f5:1a:23:12:4c:9f:e9: 11:ac:41:f0:62:87:d8:7f:ef:22:1a:10:b3:b4:b5:9c:8f:b9: 2a:fc:cb:e0:1d:a1:29:fa:35:20:a8:db:54:98:63:34:c2:bf: cb:b3:e6:b4:7a:f3:80:db:e0:af:f2:0e:b8:8c:b7:14:f3:9f: bb:de:1b:e7:7a:6e:df:1c:67:f8:aa:bd:ef:0d:26:e8:df:d1: e7:7f:e1:6c:b0:11:ba:1a:76:99:dc:54:6e:65:30:76:c8:ae: 3a:db:2c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dxjU2P1XfP8HL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk ODc4ZWY4MjctMDM4OS00NWFiLTlkZmEtN2VmNzFlZjAyM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT/Hk5IBGbqXQB9QL/5l/Y8nrjnVKWsXdj4c kuF+B7wYxTaTI2P/QH5pkyFF723s4E/5VBIQ1Jf3fpU17XXe6WDxSKI7Tm4H8mH1 H03wTMe1uZ0C6Yoh1ENi7624C5yj4m9yYTt1GumVsEa4OzbUNCs7f2uNmFu1QNzV /4D5UDZ40+OGMG1MYSzBZVlPJ4gAmkiwOuxZAgPg6V6mnUYjbH8SLCd+Xwe/4I0N PcALAjnDSVTmyfT3Yl32xT7ZjIKUOxkEoYBjfxCYN3aRDRjUu/Xf29FnXSbq5xKd eja9xlsCEiJgoA2gieoKJIY+usXd55qvZp8YBKeyg/cfi0mFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrmvS1JewiKXSUArbtt24iLm4dQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMGVkOGNmY2MtY2I4ZS0z MWE2LTlhYTktODU5ODE0ZmZiNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkLZcKef5KeP9CFtTHZW0EEIx3uZgmG83StCgh3lcF1yIZLI4CASgvI yctjUrGBFNLKjC+jy5imW62bYXOJ0mnnKpqjNsfG15a7wlWZ8xsWPYavVWAhxc/5 tOQFPa7f7R0MosNzlJCUzDRIfEFLVQn2IZL/Zz326P6btHFAMHrtZfnNCRD7F0xu k+KBiN6xl2B6mxtC/f4FlyTv9RojEkyf6RGsQfBih9h/7yIaELO0tZyPuSr8y+Ad oSn6NSCo21SYYzTCv8uz5rR684Db4K/yDriMtxTzn7veG+d6bt8cZ/iqve8NJujf 0ed/4WywEboadpncVG5lMHbIrjrbLEk= -----END CERTIFICATE-----Generated at Sun Aug 23 02:43:49 2026 by rpki-client