$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/47a42df1-d50c-313d-8a6e-037b0cbad1a0.roa File: 47a42df1-d50c-313d-8a6e-037b0cbad1a0.roa (raw, json) Hash identifier: pkHrC6msxBue987WKz+G5oT/q4lkugAbxBNBP4Rp6UU= Subject key identifier: FD:F8:45:DD:E5:6E:CB:45:E3:B0:F0:03:E3:56:17:F3:F6:DA:56:71 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584DEDE0B6B29729AD482E714490 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/47a42df1-d50c-313d-8a6e-037b0cbad1a0.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 54994 IP address blocks: 153.43.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:b6:b2:97:29:ad:48:2e:71:44:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=e50b5fc0-cf1b-4170-962d-b98f7599c6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:9a:29:28:89:6a:e8:9c:48:b4:de:07:06: 33:05:61:09:20:69:ad:47:1c:d9:cd:60:ef:7e:52: 14:ca:c1:0b:e1:0d:b6:47:b1:6c:91:a3:98:0e:8c: 90:44:27:06:2e:47:6e:89:36:6d:25:c8:fb:71:67: a5:f8:48:46:4b:74:b9:ff:40:6e:21:57:4c:ce:30: 42:d5:19:ba:1a:be:49:67:30:e2:68:ae:d7:17:80: 53:29:ed:7d:bb:d4:74:91:82:12:4c:cd:46:3f:d9: 61:48:3b:6a:0d:33:0d:ca:8a:02:77:cb:6a:00:52: 68:89:dd:95:7c:d4:cd:df:3f:b5:c8:f4:f3:d6:07: 11:e8:f1:f3:4a:0f:83:19:6c:24:70:d5:78:a9:92: 70:62:19:a3:b7:f4:66:0b:d3:07:85:3b:25:1f:25: 59:63:1a:d4:83:07:e4:03:12:c7:53:bf:ae:9a:c8: 06:c4:af:24:60:ce:6d:eb:40:48:d0:c9:2b:15:75: fd:c2:a1:fd:0b:6f:c2:0d:63:e2:44:a2:da:b6:fd: 89:d2:a6:4a:61:f3:6b:48:2c:04:9c:5e:da:b7:e0: ca:e8:55:77:79:ef:d2:0c:02:e5:56:76:14:fa:2f: 20:f3:b4:56:19:58:3f:0d:b8:27:92:9c:56:52:59: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F8:45:DD:E5:6E:CB:45:E3:B0:F0:03:E3:56:17:F3:F6:DA:56:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/47a42df1-d50c-313d-8a6e-037b0cbad1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:35:22:ba:81:82:b1:52:9a:f2:1e:44:6c:1f:a6:32:0c:b4: 8b:ec:ed:3a:86:84:af:c2:32:c0:09:7d:12:af:7a:5c:ad:a7: 88:91:ba:56:ee:78:33:27:0c:39:8d:e4:f8:52:70:69:b0:47: 38:06:92:9b:d6:81:eb:44:6d:5f:fc:7b:10:22:94:ac:9b:c6: d0:01:61:74:73:d9:2e:02:08:28:f3:ed:4c:81:aa:e3:ea:05: 62:2e:c0:1f:a3:73:87:87:01:b1:61:64:70:26:45:31:cb:99: 0c:6f:01:ff:5d:98:59:a7:9c:e9:ac:3a:a3:67:31:36:ee:79: 1d:7a:76:03:b5:c6:81:bb:0e:f5:5a:63:39:63:bc:66:5c:4d: 64:16:c8:60:ed:6c:08:af:5a:08:a5:40:22:bc:9a:ab:48:ee: db:c9:7f:87:02:b0:7c:bb:d3:89:d0:a0:0c:47:99:49:9d:44: 57:ff:73:01:62:2c:ac:6f:0c:e6:f4:27:45:07:00:0d:20:e1: b1:79:5c:d7:7d:1d:64:4b:2d:b5:d9:fc:14:07:8f:02:0a:5f: bc:1c:5c:b9:38:6c:e5:54:c5:bf:a0:cb:8d:6f:07:c4:3b:35: e6:bf:ff:d3:31:03:1a:1f:9b:dd:27:f6:f2:5a:a1:5f:23:4e: 34:24:95:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4LaylymtSC5xRJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk ZTUwYjVmYzAtY2YxYi00MTcwLTk2MmQtYjk4Zjc1OTljNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC2aKSiJauicSLTeBwYzBWEJIGmtRxzZzWDv flIUysEL4Q22R7FskaOYDoyQRCcGLkduiTZtJcj7cWel+EhGS3S5/0BuIVdMzjBC 1Rm6Gr5JZzDiaK7XF4BTKe19u9R0kYISTM1GP9lhSDtqDTMNyooCd8tqAFJoid2V fNTN3z+1yPTz1gcR6PHzSg+DGWwkcNV4qZJwYhmjt/RmC9MHhTslHyVZYxrUgwfk AxLHU7+umsgGxK8kYM5t60BI0MkrFXX9wqH9C2/CDWPiRKLatv2J0qZKYfNrSCwE nF7at+DK6FV3ee/SDALlVnYU+i8g87RWGVg/DbgnkpxWUll+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP34Rd3lbstF47DwA+NWF/P22lZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNDdhNDJkZjEtZDUwYy0z MTNkLThhNmUtMDM3YjBjYmFkMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE1IrqBgrFSmvIeRGwfpjIMtIvs7TqGhK/CMsAJfRKvelytp4iRulbu eDMnDDmN5PhScGmwRzgGkpvWgetEbV/8exAilKybxtABYXRz2S4CCCjz7UyBquPq BWIuwB+jc4eHAbFhZHAmRTHLmQxvAf9dmFmnnOmsOqNnMTbueR16dgO1xoG7DvVa YzljvGZcTWQWyGDtbAivWgilQCK8mqtI7tvJf4cCsHy704nQoAxHmUmdRFf/cwFi LKxvDOb0J0UHAA0g4bF5XNd9HWRLLbXZ/BQHjwIKX7wcXLk4bOVUxb+gy41vB8Q7 Nea//9MxAxofm90n9vJaoV8jTjQklbY= -----END CERTIFICATE-----Generated at Sat Jun 6 12:12:26 2026 by rpki-client