$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/787c0dfb-6eb7-33e8-9e6a-07b942213606.roa File: 787c0dfb-6eb7-33e8-9e6a-07b942213606.roa (raw, json) Hash identifier: c0XKsBAYYsTx+NzRB4bgApEDJnNHKkV18oSQ/r4FZXA= Subject key identifier: 75:42:BC:5C:33:04:14:43:0B:6A:63:20:49:D8:DF:C9:62:BB:EA:E8 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EDB2C8CC366D2C1ECE47B4B00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/787c0dfb-6eb7-33e8-9e6a-07b942213606.roa Signing time: Sun 16 Aug 2026 13:00:12 +0000 ROA not before: Sun 16 Aug 2026 13:00:12 +0000 ROA not after: Sat 14 Nov 2026 14:00:12 +0000 asID: 54994 IP address blocks: 153.43.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:db:2c:8c:c3:66:d2:c1:ec:e4:7b:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Aug 16 13:00:12 2026 GMT Not After : Nov 14 14:00:12 2026 GMT Subject: CN=f444883c-6a4b-4e1f-970d-f5017137f785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:80:fd:fb:2c:a6:cd:36:51:34:a7:92:8d: 93:0b:9c:2e:9d:f6:8c:b3:fe:a6:41:40:68:01:54: c0:8d:ef:fd:99:93:34:0c:d0:57:52:e5:e6:69:5b: 3a:e3:30:f2:5b:cb:15:3c:e8:b3:95:b6:7c:fc:db: 48:c0:d6:72:c5:ee:09:80:36:1a:fe:d1:96:f5:be: cf:bb:18:39:9b:d1:46:7b:f0:b5:73:28:38:4b:61: 12:6d:86:40:91:42:97:0a:22:a2:ad:44:72:55:93: 78:d2:9d:4c:ab:2b:cf:be:13:82:b7:5a:af:69:4c: e0:54:80:e7:ae:93:25:ce:ca:8b:4c:e6:32:52:63: 90:30:6a:66:45:61:01:9d:8c:4d:10:cd:b6:b4:ac: d9:ad:60:69:b4:c5:77:97:d7:be:80:97:2c:65:e1: bc:67:02:48:3d:cc:c5:4b:cf:d5:97:3e:a2:4a:22: 8b:11:e0:bf:8a:9d:c3:70:5a:1f:f3:1b:3b:8f:f5: 33:ae:cb:4d:27:38:8c:5e:94:52:e2:4d:cd:bb:77: 6c:01:56:8d:b1:4c:71:3c:51:53:cc:78:82:b2:f3: 9e:b8:f2:1e:a1:b3:85:d9:83:1c:ad:7f:b7:3c:1f: 78:74:ab:db:69:3a:d1:5a:eb:ed:da:c1:2d:5b:aa: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:42:BC:5C:33:04:14:43:0B:6A:63:20:49:D8:DF:C9:62:BB:EA:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/787c0dfb-6eb7-33e8-9e6a-07b942213606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:73:43:6f:28:8c:0a:5d:4a:b9:eb:c4:1e:97:e0:6a:0d:96: 89:53:e3:a3:3f:01:ff:8f:91:df:39:99:f1:b2:ac:8b:cb:2b: f7:13:d7:b4:2e:d7:35:85:c2:af:80:31:30:22:9e:b5:03:03: cc:83:e4:a2:03:45:67:ce:cc:7f:ab:10:21:e6:d4:9a:93:56: 6f:8a:3e:f6:d3:df:e5:30:46:a7:07:d0:f4:06:4f:28:15:d5: 0f:d0:d3:34:d5:1c:bb:5e:f6:d3:a5:16:e9:38:bb:07:c5:ce: ac:43:56:f8:94:50:2d:d5:53:bf:dc:6f:b4:a0:c0:ab:89:d0: 46:5f:33:ec:6e:e6:37:4b:9b:68:3a:5d:d5:9e:d2:d5:b8:b0: ce:1d:b6:85:32:1e:3a:c0:5b:7e:80:10:1f:5c:46:26:ae:f2: 04:d2:10:ee:12:73:4e:91:ac:b9:e5:5f:1f:4f:13:71:90:3c: e5:e6:61:ba:48:39:30:8f:08:33:48:96:80:3f:4b:1c:e8:f3: 47:b9:b6:d1:91:a1:d8:e4:53:01:e6:dd:05:2e:0c:b0:3e:e5: 0c:79:33:e1:ce:de:12:65:b4:43:c7:de:b9:0b:3f:c8:4d:b6: aa:2e:50:ca:65:a7:77:3d:36:9b:0b:a3:97:f2:22:2a:bc:d1: 44:fa:58:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7bLIzDZtLB7OR7SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDgxNjEzMDAxMloXDTI2MTExNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjQ0NDg4M2MtNmE0Yi00ZTFmLTk3MGQtZjUwMTcxMzdmNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt6A/fssps02UTSnko2TC5wunfaMs/6mQUBo AVTAje/9mZM0DNBXUuXmaVs64zDyW8sVPOizlbZ8/NtIwNZyxe4JgDYa/tGW9b7P uxg5m9FGe/C1cyg4S2ESbYZAkUKXCiKirURyVZN40p1MqyvPvhOCt1qvaUzgVIDn rpMlzsqLTOYyUmOQMGpmRWEBnYxNEM22tKzZrWBptMV3l9e+gJcsZeG8ZwJIPczF S8/Vlz6iSiKLEeC/ip3DcFof8xs7j/UzrstNJziMXpRS4k3Nu3dsAVaNsUxxPFFT zHiCsvOeuPIeobOF2YMcrX+3PB94dKvbaTrRWuvt2sEtW6pavQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVCvFwzBBRDC2pjIEnY38liu+roMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzg3YzBkZmItNmViNy0z M2U4LTllNmEtMDdiOTQyMjEzNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZzQ28ojApdSrnrxB6X4GoNlolT46M/Af+Pkd85mfGyrIvLK/cT17Qu 1zWFwq+AMTAinrUDA8yD5KIDRWfOzH+rECHm1JqTVm+KPvbT3+UwRqcH0PQGTygV 1Q/Q0zTVHLte9tOlFuk4uwfFzqxDVviUUC3VU7/cb7SgwKuJ0EZfM+xu5jdLm2g6 XdWe0tW4sM4dtoUyHjrAW36AEB9cRiau8gTSEO4Sc06RrLnlXx9PE3GQPOXmYbpI OTCPCDNIloA/Sxzo80e5ttGRodjkUwHm3QUuDLA+5Qx5M+HO3hJltEPH3rkLP8hN tqouUMplp3c9NpsLo5fyIiq80UT6WIw= -----END CERTIFICATE-----Generated at Sun Aug 23 09:28:05 2026 by rpki-client