$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa File: 2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa (raw, json) Hash identifier: 2265Sr0VRVo9YIJn0aD2SIJ35dLr2zvo+IS0jyWX22c= Subject key identifier: 24:CA:F5:31:04:0D:96:96:01:17:11:0C:32:81:A9:CC:A2:A5:40:12 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EA8EC40C5C023C09CA4076B80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 54994 IP address blocks: 153.43.120.0/24 maxlen: 24 153.43.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:40:c5:c0:23:c0:9c:a4:07:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=9009db66-652c-42e0-ab76-876ef27e29ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:7b:9c:f4:3a:e8:bf:de:db:32:1f:d0:41: df:37:bb:d9:b3:44:a8:92:16:3a:f0:a8:88:a5:56: 4c:ef:12:59:84:28:e5:1c:57:86:59:32:78:00:27: c2:a2:da:a8:c0:f9:6f:ef:ed:19:79:a7:2c:e6:2b: 66:23:75:96:07:eb:5d:4b:b7:a0:d2:de:15:4e:5d: 9f:67:08:7f:4d:64:b5:08:ef:2e:98:83:39:eb:bf: 28:ca:80:39:4b:8a:5b:18:25:65:f7:2f:79:2c:95: 76:a4:14:84:32:cb:fb:19:c3:21:c2:89:0b:63:bd: df:95:d6:f0:44:b3:65:ed:e5:38:7a:d0:b9:6a:be: d8:db:eb:52:0d:d9:bb:78:a5:7a:48:bd:27:ce:e7: e4:58:3c:74:d8:3b:9f:c0:e5:13:ec:62:57:f5:a1: 43:40:b7:1e:78:d9:4b:fe:cb:42:52:db:3b:e6:d2: 38:67:2b:27:e2:13:4c:76:81:8c:a8:d4:74:dc:8b: 44:25:ef:af:ce:6d:16:78:94:85:9e:35:39:48:31: 82:3a:fa:f6:a4:b3:75:b7:c7:1f:18:37:b2:dc:69: d8:15:98:d2:65:6c:68:3f:ac:af:41:4f:6b:4e:55: 0f:c7:88:2b:fc:94:b1:90:77:d5:23:72:d2:f3:f1: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CA:F5:31:04:0D:96:96:01:17:11:0C:32:81:A9:CC:A2:A5:40:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2d52284d-a6d8-37bd-a2f5-1b706e3bb90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:07:83:38:07:f6:27:4f:6d:81:dd:6c:e9:33:44:33:7d:de: f8:14:ab:87:69:b4:6f:d7:65:23:1f:99:a8:18:6e:41:af:37: 7f:a2:18:24:1e:47:6d:17:03:08:70:0c:ab:67:70:51:00:4f: 5b:88:9b:a6:4c:27:f2:2e:f1:b8:b3:e0:ae:ee:e7:91:bf:02: 59:74:93:e7:77:22:14:08:a5:fa:b2:e3:83:cc:9a:3c:0b:4e: 06:c0:0d:9c:43:b3:81:78:2e:06:0e:21:3d:17:90:ba:b9:43: 68:2f:d4:7d:fd:07:ab:c4:b4:6c:d5:14:0e:81:72:4d:43:2d: 31:d8:b2:7e:6a:d8:5e:25:8d:b4:84:81:47:11:9a:c8:4f:90: f5:cf:30:07:29:7e:c9:fc:bf:2d:9c:f0:3c:6b:db:17:f4:29: 63:46:93:0a:ac:ce:76:60:a1:bf:f0:86:25:e3:84:9f:33:12: e7:04:a1:45:7d:42:64:c4:3b:0d:20:9f:83:03:59:2d:65:33: 63:98:40:c3:e6:32:3a:84:42:a5:9f:1c:68:4a:68:e7:1f:ae: b7:25:6b:b1:af:3f:1b:57:8c:34:a0:9a:4f:dc:7e:81:54:99: 00:50:b1:a5:89:b8:2b:03:6a:f3:85:a1:d4:99:a7:7d:64:bd: 73:b9:9d:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7EDFwCPAnKQHa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk OTAwOWRiNjYtNjUyYy00MmUwLWFiNzYtODc2ZWYyN2UyOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi17nPQ66L/e2zIf0EHfN7vZs0SokhY68KiI pVZM7xJZhCjlHFeGWTJ4ACfCotqowPlv7+0Zeacs5itmI3WWB+tdS7eg0t4VTl2f Zwh/TWS1CO8umIM5678oyoA5S4pbGCVl9y95LJV2pBSEMsv7GcMhwokLY73fldbw RLNl7eU4etC5ar7Y2+tSDdm7eKV6SL0nzufkWDx02DufwOUT7GJX9aFDQLceeNlL /stCUts75tI4Zysn4hNMdoGMqNR03ItEJe+vzm0WeJSFnjU5SDGCOvr2pLN1t8cf GDey3GnYFZjSZWxoP6yvQU9rTlUPx4gr/JSxkHfVI3LS8/FtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTK9TEEDZaWARcRDDKBqcyipUASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMmQ1MjI4NGQtYTZkOC0z N2JkLWEyZjUtMWI3MDZlM2JiOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwHgzgH9idPbYHdbOkzRDN93vgUq4dptG/XZSMfmagYbkGvN3+iGCQe R20XAwhwDKtncFEAT1uIm6ZMJ/Iu8biz4K7u55G/All0k+d3IhQIpfqy44PMmjwL TgbADZxDs4F4LgYOIT0XkLq5Q2gv1H39B6vEtGzVFA6Bck1DLTHYsn5q2F4ljbSE gUcRmshPkPXPMAcpfsn8vy2c8Dxr2xf0KWNGkwqsznZgob/whiXjhJ8zEucEoUV9 QmTEOw0gn4MDWS1lM2OYQMPmMjqEQqWfHGhKaOcfrrcla7GvPxtXjDSgmk/cfoFU mQBQsaWJuCsDavOFodSZp31kvXO5ncU= -----END CERTIFICATE-----Generated at Sun Aug 23 04:40:25 2026 by rpki-client