$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5cb689e4-762a-3450-8fba-de1a24f96946.roa File: 5cb689e4-762a-3450-8fba-de1a24f96946.roa (raw, json) Hash identifier: hQ6jiyGY2fSy8ciW57cEt+7dpOO0EWagY1AI8qDLFLY= Subject key identifier: 42:24:4E:AC:94:74:09:38:83:D7:C0:7F:65:33:75:FD:C1:7D:E8:AF Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EE921EBBACF809C8ABE6DBF80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5cb689e4-762a-3450-8fba-de1a24f96946.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 54994 IP address blocks: 153.43.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:eb:ba:cf:80:9c:8a:be:6d:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=1dee3b3a-2465-4fae-aa13-d780ea15ccf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:3c:24:b1:5d:7a:a8:03:64:98:19:5c:50: cf:05:6f:c1:49:6c:89:72:a2:9f:5b:7a:b8:bd:d2: 20:2d:b5:b3:dc:3f:81:9f:bb:42:5c:13:0b:47:41: 19:80:9d:5f:76:da:5e:e8:31:5b:d0:a2:85:29:26: 1f:ed:5c:c9:69:6a:da:12:7d:9b:83:75:19:7d:56: 37:e7:f7:22:6f:4e:d9:37:62:c4:09:b8:c8:87:05: 09:99:bf:e0:c6:f2:fb:31:e6:f8:b2:08:18:0c:48: c4:61:c9:d9:38:9e:db:5b:71:b8:ca:3d:a9:d2:15: 17:41:bd:0a:dc:e4:79:9d:f8:22:cc:c5:43:78:9c: 7d:aa:4a:a6:fe:77:e3:7f:0d:ba:2d:ed:94:ad:ea: 8c:0c:03:27:89:9d:3a:7f:8a:8c:88:c5:28:a9:20: a1:d3:73:98:d0:18:84:38:88:fe:82:27:84:42:15: ae:b5:7f:bf:11:b6:94:42:10:ff:7a:f4:af:ad:d3: c3:e9:31:0e:c4:ef:1f:76:39:d8:9a:9e:4d:29:6c: 8e:bb:58:af:49:ac:d5:f1:b4:0a:71:5c:16:61:f9: f6:c0:40:fb:79:e3:e8:46:44:4c:0d:3f:da:f5:97: 8f:eb:60:69:00:71:24:75:5a:1c:ca:87:2f:40:15: a9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:4E:AC:94:74:09:38:83:D7:C0:7F:65:33:75:FD:C1:7D:E8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/5cb689e4-762a-3450-8fba-de1a24f96946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5b:43:2c:f7:1f:f7:e0:12:19:af:cb:14:3b:d1:0c:f5:9c: 76:fe:77:ce:bc:a4:aa:c4:48:01:12:d3:15:8b:81:fa:1c:df: a3:b8:70:8a:04:18:2e:1f:b6:27:9e:d6:84:64:63:45:b3:09: 9a:6e:6a:23:f5:c2:4b:79:6f:65:63:b4:21:d9:ad:6b:3e:20: aa:24:d1:77:b9:ff:9a:65:41:b4:bf:6f:79:fa:48:60:e7:16: 57:04:72:7b:ad:e4:ba:3f:bc:e1:48:cd:fc:05:ee:32:fd:48: 08:6e:2b:6e:56:6f:fb:f1:b8:63:7c:f9:48:17:56:ba:40:7b: 78:e0:cf:eb:d9:6a:60:d7:4a:b5:fc:e0:e1:c9:2c:9e:d7:8f: 9c:0a:8b:ae:32:ee:50:96:3b:fb:2d:5f:0a:09:bb:9a:6d:d7: cf:72:15:08:77:af:c9:cf:c9:67:8e:ea:db:04:16:ab:de:92: 49:e0:67:97:d4:05:ff:b9:2a:0e:bc:39:f6:18:d1:b6:62:86: ef:2b:f4:70:00:5a:b0:a3:b4:09:30:eb:da:d8:5a:ed:a2:9c: 36:17:9d:bc:a8:6c:de:df:4d:d0:be:44:9e:52:ba:6b:8c:93: 08:97:be:14:d5:70:6b:7e:35:72:11:71:15:f9:6b:27:26:cb: 38:db:c5:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIeu6z4Ccir5tv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk MWRlZTNiM2EtMjQ2NS00ZmFlLWFhMTMtZDc4MGVhMTVjY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhk8JLFdeqgDZJgZXFDPBW/BSWyJcqKfW3q4 vdIgLbWz3D+Bn7tCXBMLR0EZgJ1fdtpe6DFb0KKFKSYf7VzJaWraEn2bg3UZfVY3 5/cib07ZN2LECbjIhwUJmb/gxvL7Meb4sggYDEjEYcnZOJ7bW3G4yj2p0hUXQb0K 3OR5nfgizMVDeJx9qkqm/nfjfw26Le2UreqMDAMniZ06f4qMiMUoqSCh03OY0BiE OIj+gieEQhWutX+/EbaUQhD/evSvrdPD6TEOxO8fdjnYmp5NKWyOu1ivSazV8bQK cVwWYfn2wED7eePoRkRMDT/a9ZeP62BpAHEkdVocyocvQBWpowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIkTqyUdAk4g9fAf2Uzdf3BfeivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNWNiNjg5ZTQtNzYyYS0z NDUwLThmYmEtZGUxYTI0Zjk2OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBbQyz3H/fgEhmvyxQ70Qz1nHb+d868pKrESAES0xWLgfoc36O4cIoE GC4ftiee1oRkY0WzCZpuaiP1wkt5b2VjtCHZrWs+IKok0Xe5/5plQbS/b3n6SGDn FlcEcnut5Lo/vOFIzfwF7jL9SAhuK25Wb/vxuGN8+UgXVrpAe3jgz+vZamDXSrX8 4OHJLJ7Xj5wKi64y7lCWO/stXwoJu5pt189yFQh3r8nPyWeO6tsEFqvekkngZ5fU Bf+5Kg68OfYY0bZihu8r9HAAWrCjtAkw69rYWu2inDYXnbyobN7fTdC+RJ5SumuM kwiXvhTVcGt+NXIRcRX5aycmyzjbxTg= -----END CERTIFICATE-----Generated at Sun Aug 23 03:37:12 2026 by rpki-client