$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/67d729c1-5585-377a-9389-afde0b766d8b.roa File: 67d729c1-5585-377a-9389-afde0b766d8b.roa (raw, json) Hash identifier: NrsE7mFD2/8SuRrrrpRaMBYRJ65krSEBqmg6gupszm8= Subject key identifier: 3F:65:70:FB:AB:A3:ED:AD:D9:A8:A2:A7:73:42:A7:83:06:17:B1:1C Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584E0964C0BE2703B1ADDEDAAB00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/67d729c1-5585-377a-9389-afde0b766d8b.roa Signing time: Tue 02 Jun 2026 09:33:48 +0000 ROA not before: Tue 02 Jun 2026 09:33:48 +0000 ROA not after: Mon 31 Aug 2026 09:33:48 +0000 asID: 54994 IP address blocks: 153.43.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:64:c0:be:27:03:b1:ad:de:da:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jun 2 09:33:48 2026 GMT Not After : Aug 31 09:33:48 2026 GMT Subject: CN=3379b6f7-cebb-4d62-9625-be66f1a80925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:90:9a:03:77:a7:b0:54:f5:c9:d4:9b:c4: 64:ed:27:9a:aa:b4:1f:52:e2:03:7c:e5:67:1e:d5: 50:4b:17:0b:0b:c1:a3:90:0a:d4:84:00:63:f0:9b: 5e:2b:5c:62:e0:22:92:04:2e:e8:9f:0a:8d:82:e1: b0:27:46:1a:37:ec:27:59:21:23:72:8b:e3:89:a1: 57:45:4b:f3:23:37:42:da:3f:f1:a0:c5:54:9e:94: 67:ca:49:14:72:df:ab:45:7a:28:73:a2:47:fb:ff: 22:9f:b9:29:b2:b4:82:35:2b:d8:9f:ca:97:cf:e3: 63:f8:f4:e0:b7:86:02:54:d9:d7:d9:94:38:05:d7: 86:f3:13:16:ce:20:41:f5:4d:72:8d:cd:3a:56:35: c1:33:25:c6:c3:17:e8:de:a1:27:cd:ac:30:f1:1e: b2:ce:ac:98:38:48:9e:cc:ca:71:e8:fa:96:fc:af: cf:9c:d9:c0:5d:30:fe:2b:87:b1:78:7c:05:ea:da: b6:15:d6:7e:b7:1a:c4:50:63:0d:53:b1:1b:2c:51: c1:59:f3:91:bf:f9:0b:d2:14:26:1d:0c:82:11:fb: f9:28:39:e1:a9:39:1c:90:8b:20:6c:43:b9:79:3b: 92:6f:24:52:69:a1:1a:b3:48:60:4e:8b:37:73:4b: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:65:70:FB:AB:A3:ED:AD:D9:A8:A2:A7:73:42:A7:83:06:17:B1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/67d729c1-5585-377a-9389-afde0b766d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3f:8e:74:ac:c9:6a:db:4c:87:fb:6d:06:c2:84:cd:1f:d3: 4c:ea:6a:4c:33:12:6e:33:0c:ae:35:49:15:bf:4e:c6:40:43: 66:74:f5:89:6a:dd:1c:aa:62:67:4b:bc:78:1b:e3:54:25:93: 5d:5f:d1:17:22:08:84:ab:b1:2c:89:7f:3d:d6:1e:76:df:61: ef:cb:7f:9e:65:99:24:51:14:21:19:02:ce:e8:51:b3:c2:d1: c4:9e:e7:e3:9a:3e:63:93:b8:db:f2:45:f2:04:3e:30:7f:0f: d0:7a:e9:b8:54:b1:07:5f:c7:45:b4:cf:eb:7c:13:a8:26:ec: f1:dc:17:c4:93:b4:41:12:af:05:bd:5f:a1:83:cb:2b:a7:04: 92:db:cd:94:50:03:bf:6e:a7:61:e6:20:b6:3a:cd:9e:ba:97: 09:36:22:e3:29:2e:9b:54:6f:1e:ec:29:54:6a:31:fb:dd:a8: bf:c0:c7:7a:16:91:94:b1:78:9b:90:18:16:54:41:91:a6:bc: 5f:d9:e3:87:75:d7:dd:e1:2f:ae:e7:b3:5d:44:12:34:b0:23: d8:e0:8c:c5:c2:aa:cb:a2:6b:99:4f:50:85:6c:53:70:5c:14: 4b:df:2a:f1:71:1b:74:e6:a2:06:39:aa:62:bf:92:94:8b:54: f9:8c:42:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4JZMC+JwOxrd7aqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDYwMjA5MzM0OFoXDTI2MDgzMTA5MzM0OFowLzEtMCsGA1UEAxMk MzM3OWI2ZjctY2ViYi00ZDYyLTk2MjUtYmU2NmYxYTgwOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvmQmgN3p7BU9cnUm8Rk7SeaqrQfUuIDfOVn HtVQSxcLC8GjkArUhABj8JteK1xi4CKSBC7onwqNguGwJ0YaN+wnWSEjcovjiaFX RUvzIzdC2j/xoMVUnpRnykkUct+rRXooc6JH+/8in7kpsrSCNSvYn8qXz+Nj+PTg t4YCVNnX2ZQ4BdeG8xMWziBB9U1yjc06VjXBMyXGwxfo3qEnzaww8R6yzqyYOEie zMpx6PqW/K/PnNnAXTD+K4exeHwF6tq2FdZ+txrEUGMNU7EbLFHBWfORv/kL0hQm HQyCEfv5KDnhqTkckIsgbEO5eTuSbyRSaaEas0hgTos3c0sumwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9lcPuro+2t2aiip3NCp4MGF7EcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNjdkNzI5YzEtNTU4NS0z NzdhLTkzODktYWZkZTBiNzY2ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc/jnSsyWrbTIf7bQbChM0f00zqakwzEm4zDK41SRW/TsZAQ2Z09Ylq 3RyqYmdLvHgb41Qlk11f0RciCISrsSyJfz3WHnbfYe/Lf55lmSRRFCEZAs7oUbPC 0cSe5+OaPmOTuNvyRfIEPjB/D9B66bhUsQdfx0W0z+t8E6gm7PHcF8STtEESrwW9 X6GDyyunBJLbzZRQA79up2HmILY6zZ66lwk2IuMpLptUbx7sKVRqMfvdqL/Ax3oW kZSxeJuQGBZUQZGmvF/Z44d1193hL67ns11EEjSwI9jgjMXCqsuia5lPUIVsU3Bc FEvfKvFxG3TmogY5qmK/kpSLVPmMQgM= -----END CERTIFICATE-----Generated at Sat Jun 6 12:05:25 2026 by rpki-client