$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa File: 2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa (raw, json) Hash identifier: gLPj3WBw6TE/H3UT4pesrGe3birPqr7CdA1umM/LK4A= Subject key identifier: 86:9C:9F:73:58:49:F7:82:31:0F:2F:B1:CA:BA:35:84:39:75:41:86 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EA79BA49B241D0089D8887DC0 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54994 IP address blocks: 153.43.160.0/23 maxlen: 24 153.43.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:a4:9b:24:1d:00:89:d8:88:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=10d3c2ca-d7df-4ee7-b6fd-765bbd357bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5b:8e:c4:57:a5:e7:60:55:08:1c:e2:f6:f6: 73:6a:5c:5d:84:82:76:2e:c1:88:db:fc:58:60:7b: 4a:8b:98:4c:d0:86:eb:13:34:39:ad:80:ac:f6:4e: e3:7e:3f:7a:21:34:c5:ad:b8:3e:c8:14:c3:0d:08: 98:8e:62:36:23:54:be:79:70:01:b3:fa:43:f3:b5: 07:81:22:bc:da:a8:89:05:38:39:ff:c5:e9:cd:de: ee:2f:b5:b0:42:28:f0:fa:b9:76:b1:37:33:8e:4f: ba:d0:2a:4c:f2:66:b0:3c:4d:9d:7d:f5:f7:c5:fb: 9c:e1:64:15:71:ee:25:07:4c:67:f3:97:7e:3f:08: 38:11:d6:a5:ae:ce:c9:6d:98:d2:5e:28:88:35:3d: 5c:6f:01:4d:1c:cc:86:66:dc:3c:dd:a2:03:77:21: 4a:ca:6e:8d:bb:13:82:6d:e6:29:9f:9f:52:ac:18: 42:d7:c3:91:b7:ee:a5:7c:77:1c:1c:73:42:94:0f: b8:84:f9:8d:6d:a2:6c:60:3a:1c:a6:8d:6e:f7:c9: 36:e4:82:db:e9:52:0f:0a:ed:f6:28:25:32:8d:a2: 02:5f:e6:2f:33:3b:6f:2b:77:01:aa:d4:69:64:8a: 32:d8:9f:43:5b:a3:00:04:ea:01:09:6a:b0:98:3f: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9C:9F:73:58:49:F7:82:31:0F:2F:B1:CA:BA:35:84:39:75:41:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2cf6ca75-36b9-3624-b6f2-e21eb0ab6922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d5:dc:2c:9d:81:87:e0:af:59:30:de:70:66:d9:51:5f:8a: 4b:6d:66:b3:ee:4f:e0:92:fd:d8:b2:9c:9e:c2:62:d6:70:fd: 9b:ac:a5:db:7b:bc:0e:cc:83:76:72:6f:ea:04:10:44:94:37: 16:52:37:3b:ff:9f:d5:bb:3a:bf:bd:8f:bd:8e:47:10:b7:ef: bb:aa:59:47:87:69:4e:a6:6b:fa:db:76:90:00:b9:6c:ca:c0: 93:b9:a1:1d:46:29:ff:a8:83:9b:19:5e:f1:c7:df:fd:99:91: 00:b3:25:bd:3a:c9:89:1d:8c:42:1a:ef:b7:b4:c9:3d:d8:13: c4:a4:33:2d:03:bf:f7:a8:5d:fe:bf:85:2a:f2:a5:08:2f:6a: c1:ce:fa:99:1a:b4:87:38:16:4f:a3:c2:0b:82:02:45:2e:95: 55:b1:6c:a5:79:6d:5b:ad:1a:41:19:a3:20:ce:b5:8f:0d:51: 48:c3:90:32:f7:6c:db:54:c2:92:7b:cc:b3:b1:82:e2:2a:75: 55:63:72:c0:30:8d:94:f7:53:a6:53:e2:c3:37:d7:7a:2e:4a: 1b:29:de:b4:fd:b5:7a:e6:7f:54:27:23:a0:a0:9b:5f:02:f6: 2b:db:63:83:4f:8a:5f:be:9a:77:88:b5:d6:a4:c9:f2:71:2d: c1:37:bf:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm6SbJB0AidiIfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTBkM2MyY2EtZDdkZi00ZWU3LWI2ZmQtNzY1YmJkMzU3YmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFuOxFel52BVCBzi9vZzalxdhIJ2LsGI2/xY YHtKi5hM0IbrEzQ5rYCs9k7jfj96ITTFrbg+yBTDDQiYjmI2I1S+eXABs/pD87UH gSK82qiJBTg5/8Xpzd7uL7WwQijw+rl2sTczjk+60CpM8mawPE2dffX3xfuc4WQV ce4lB0xn85d+Pwg4Edalrs7JbZjSXiiINT1cbwFNHMyGZtw83aIDdyFKym6NuxOC beYpn59SrBhC18ORt+6lfHccHHNClA+4hPmNbaJsYDocpo1u98k25ILb6VIPCu32 KCUyjaICX+YvMztvK3cBqtRpZIoy2J9DW6MABOoBCWqwmD9p4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIacn3NYSfeCMQ8vscq6NYQ5dUGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMmNmNmNhNzUtMzZiOS0z NjI0LWI2ZjItZTIxZWIwYWI2OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmSugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/V3CydgYfgr1kw3nBm2VFfikttZrPuT+CS/diynJ7CYtZw/Zuspdt7 vA7Mg3Zyb+oEEESUNxZSNzv/n9W7Or+9j72ORxC377uqWUeHaU6ma/rbdpAAuWzK wJO5oR1GKf+og5sZXvHH3/2ZkQCzJb06yYkdjEIa77e0yT3YE8SkMy0Dv/eoXf6/ hSrypQgvasHO+pkatIc4Fk+jwguCAkUulVWxbKV5bVutGkEZoyDOtY8NUUjDkDL3 bNtUwpJ7zLOxguIqdVVjcsAwjZT3U6ZT4sM313ouShsp3rT9tXrmf1QnI6Cgm18C 9ivbY4NPil++mneItdakyfJxLcE3v9o= -----END CERTIFICATE-----Generated at Sun Aug 23 11:55:30 2026 by rpki-client