$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0fc04279-e97a-3623-83c8-28cf30bf4900.roa File: 0fc04279-e97a-3623-83c8-28cf30bf4900.roa (raw, json) Hash identifier: Nq+tQdRTPO7jh7w/1ArAqa/K1km2h6Re5mQViPjEN/k= Subject key identifier: 24:4C:2D:59:7E:B4:1A:E0:78:77:95:87:9A:20:70:BF:F5:1A:B4:50 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D932564A676683F48A5009B60 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0fc04279-e97a-3623-83c8-28cf30bf4900.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 54994 IP address blocks: 153.43.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:64:a6:76:68:3f:48:a5:00:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=1e08c06e-4b78-4490-8095-e9b371bfd9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:63:8b:9c:69:23:c9:e1:ca:c9:b9:d3:bb: 91:1d:7d:eb:53:de:4b:64:89:08:76:b9:86:04:67: fd:27:34:84:58:db:f7:1d:94:c6:cb:90:7f:83:2c: d7:e7:7b:03:76:fc:5d:4d:0f:9b:3a:83:83:8e:ac: a7:22:9e:54:2f:8c:84:a5:cd:3f:3a:42:43:d9:4b: ab:65:60:96:d4:a2:b5:01:45:78:d2:8e:09:e9:81: 35:18:d2:0f:a8:62:87:d6:48:04:0a:aa:78:af:e6: ed:27:6d:b2:be:48:9d:1a:e6:b2:4a:ac:b5:dc:b3: 8c:dc:1b:dc:da:5d:fe:31:83:73:70:81:c9:92:9a: ba:c6:2e:51:53:54:b2:1a:ed:fe:0b:c9:7e:05:b7: ac:b5:ff:1f:fd:33:aa:d9:93:f7:ba:7c:7f:fb:b5: c6:2f:cb:d2:ea:04:6c:6f:51:7b:83:3e:1a:a8:12: f5:90:b5:35:9c:dc:69:eb:c0:c6:20:9b:02:4d:29: 6b:b1:da:1d:7e:0b:06:fb:b7:7d:f0:e4:fd:28:25: 89:c9:be:5b:18:ff:33:e8:ba:63:67:40:ba:b1:88: e3:6d:e9:71:ae:7c:fe:60:7c:e5:e0:da:d2:97:cd: 5a:33:cb:9a:f6:21:7e:f3:8c:7b:44:0c:01:22:23: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4C:2D:59:7E:B4:1A:E0:78:77:95:87:9A:20:70:BF:F5:1A:B4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/0fc04279-e97a-3623-83c8-28cf30bf4900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d8:f1:ee:c7:64:5d:a9:8e:d8:53:99:6b:64:7e:9b:45:09: 94:b1:bb:31:00:11:15:86:bf:60:a2:fd:b5:a5:0b:df:73:d9: 5b:c8:60:b6:3c:17:0b:f0:71:e1:41:04:4c:02:3f:fc:1a:f7: f2:2d:f2:fe:d2:ac:bc:00:31:80:43:f4:d6:07:31:d2:15:7d: d2:ea:ff:3f:29:54:0f:d0:1e:b5:56:e5:4f:a7:f0:eb:86:20: 04:d6:9c:49:28:d6:37:31:3b:43:f8:a6:0e:66:93:19:1a:42: ec:b9:9e:1b:09:6a:d6:3e:51:fd:42:10:d0:21:1e:b5:32:b1: e3:5e:39:a3:40:19:ac:cb:0a:3d:ca:d3:cd:7a:75:22:68:2d: b5:17:d0:e9:10:eb:b0:77:02:20:40:dc:90:23:3a:be:2a:89: 2a:7d:3b:ba:b1:c5:23:08:86:92:c2:89:a8:8c:2c:2f:7e:be: a4:b6:ad:e8:b6:e1:91:79:91:ed:02:ff:5a:38:1d:b1:38:2d: c5:6b:82:10:f9:a0:33:0a:ce:01:d5:dd:44:1b:74:db:74:b4: b7:62:61:91:a5:ca:7a:9a:8b:79:18:db:97:48:8c:5b:cf:93: 1e:f4:fe:6e:74:ef:ec:7c:aa:99:54:87:71:f2:9c:91:31:87: c0:cf:25:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWSmdmg/SKUAm2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MWUwOGMwNmUtNGI3OC00NDkwLTgwOTUtZTliMzcxYmZkOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMJji5xpI8nhysm507uRHX3rU95LZIkIdrmG BGf9JzSEWNv3HZTGy5B/gyzX53sDdvxdTQ+bOoODjqynIp5UL4yEpc0/OkJD2Uur ZWCW1KK1AUV40o4J6YE1GNIPqGKH1kgECqp4r+btJ22yvkidGuaySqy13LOM3Bvc 2l3+MYNzcIHJkpq6xi5RU1SyGu3+C8l+Bbestf8f/TOq2ZP3unx/+7XGL8vS6gRs b1F7gz4aqBL1kLU1nNxp68DGIJsCTSlrsdodfgsG+7d98OT9KCWJyb5bGP8z6Lpj Z0C6sYjjbelxrnz+YHzl4NrSl81aM8ua9iF+84x7RAwBIiPktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRMLVl+tBrgeHeVh5ogcL/1GrRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMGZjMDQyNzktZTk3YS0z NjIzLTgzYzgtMjhjZjMwYmY0OTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPY8e7HZF2pjthTmWtkfptFCZSxuzEAERWGv2Ci/bWlC99z2VvIYLY8 FwvwceFBBEwCP/wa9/It8v7SrLwAMYBD9NYHMdIVfdLq/z8pVA/QHrVW5U+n8OuG IATWnEko1jcxO0P4pg5mkxkaQuy5nhsJatY+Uf1CENAhHrUyseNeOaNAGazLCj3K 0816dSJoLbUX0OkQ67B3AiBA3JAjOr4qiSp9O7qxxSMIhpLCiaiMLC9+vqS2rei2 4ZF5ke0C/1o4HbE4LcVrghD5oDMKzgHV3UQbdNt0tLdiYZGlynqai3kY25dIjFvP kx70/m507+x8qplUh3HynJExh8DPJcQ= -----END CERTIFICATE-----Generated at Tue Apr 21 22:55:43 2026 by rpki-client