$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/787c0dfb-6eb7-33e8-9e6a-07b942213606.roa File: 787c0dfb-6eb7-33e8-9e6a-07b942213606.roa (raw, json) Hash identifier: Adk9NdryqroEe8w07lrksVSyh/lUcQU0KdiQdxsaQCE= Subject key identifier: 5D:A1:CA:68:9E:F5:48:B3:D2:B8:E9:41:D4:54:6E:FA:B4:E4:4E:0D Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D5884E066AE5624888ADCE440 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/787c0dfb-6eb7-33e8-9e6a-07b942213606.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 54994 IP address blocks: 153.43.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e0:66:ae:56:24:88:8a:dc:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=3db7e678-1866-47f5-975e-5149c72ae78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:22:c5:44:0d:04:fd:a8:84:43:d7:db:48: 4d:a3:ba:27:8e:51:c6:f6:30:dd:96:46:3b:6f:a5: 6c:ad:6c:74:7e:a3:5e:0f:ba:51:be:55:d7:94:03: e2:ce:4d:20:52:ae:52:1a:ef:c0:4f:c9:c0:ea:f8: 29:ed:ba:08:78:92:5c:ba:90:a1:e7:e5:77:4e:52: 2f:31:43:7e:47:59:07:91:97:44:32:15:b8:12:e2: bc:64:37:99:8f:47:e8:9d:85:aa:a5:ba:f0:72:d8: 78:67:da:11:22:6e:1e:1a:ed:c3:46:c2:a8:44:3d: 8f:4e:2d:43:9b:e1:84:ad:dc:a7:3c:ef:2f:4f:c2: a8:a1:12:f2:17:cc:7d:86:42:c8:0d:97:3a:e5:ce: bc:58:26:a1:21:0d:2e:56:2d:a0:98:68:df:fb:35: f7:52:9f:6f:0d:9a:88:9a:cc:98:1b:63:9a:41:ad: d9:e1:ba:b4:f0:c7:d6:ab:93:5b:a3:85:fa:30:6a: 21:68:72:96:78:63:76:40:10:cb:b8:8d:1e:39:49: 1a:8a:63:da:f1:bc:92:d2:8c:a3:c4:d5:0d:06:98: 89:ea:ab:52:6c:66:6e:f4:ca:26:1f:8f:2b:21:e9: 4d:65:35:a7:e9:dd:b3:aa:6e:fc:1f:cf:b2:3c:5b: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A1:CA:68:9E:F5:48:B3:D2:B8:E9:41:D4:54:6E:FA:B4:E4:4E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/787c0dfb-6eb7-33e8-9e6a-07b942213606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ff:c1:19:18:ef:b3:e0:f7:5b:d9:b1:34:73:19:e1:5d:47: 85:8f:77:54:b7:7c:71:3b:75:8e:aa:48:57:e7:b9:cd:27:f5: 18:76:da:60:58:b0:28:85:d3:a0:ff:1a:51:b7:1e:06:0e:42: 77:ca:c9:c5:b0:c7:23:47:33:7d:5f:24:5d:64:11:33:d1:d9: 24:09:8f:59:22:73:f6:1d:d1:80:c5:0e:9b:eb:69:9e:9f:21: 57:ce:95:51:fa:63:cb:1a:d5:cf:cb:76:d0:a4:e2:3d:fb:f4: 75:57:cb:90:b9:b0:91:42:c1:1f:35:11:29:f0:01:3a:af:13: ac:7c:91:19:5d:44:65:e7:44:6c:be:67:bb:f7:e2:b3:6c:e7: 69:fa:c4:09:41:36:39:09:36:66:cb:ad:71:a5:13:37:c4:e9: 11:cc:83:87:21:a8:59:0b:c2:14:90:c7:28:8f:f5:5c:86:3f: dc:a6:34:ca:f6:78:e2:8b:c6:42:41:0c:5c:84:f9:76:31:a8: 51:8a:0a:db:d2:1f:c7:1f:e9:88:63:fa:62:a4:6a:95:7a:c1: a7:0e:d5:5e:90:a7:fe:ab:01:ce:e7:dc:89:cd:5d:03:63:16: a4:8c:80:b4:58:17:13:01:11:80:e7:36:e9:83:34:85:3d:80: ae:45:23:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOBmrlYkiIrc5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk M2RiN2U2NzgtMTg2Ni00N2Y1LTk3NWUtNTE0OWM3MmFlNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd0ixUQNBP2ohEPX20hNo7onjlHG9jDdlkY7 b6VsrWx0fqNeD7pRvlXXlAPizk0gUq5SGu/AT8nA6vgp7boIeJJcupCh5+V3TlIv MUN+R1kHkZdEMhW4EuK8ZDeZj0fonYWqpbrwcth4Z9oRIm4eGu3DRsKoRD2PTi1D m+GErdynPO8vT8KooRLyF8x9hkLIDZc65c68WCahIQ0uVi2gmGjf+zX3Up9vDZqI msyYG2OaQa3Z4bq08MfWq5Nbo4X6MGohaHKWeGN2QBDLuI0eOUkaimPa8byS0oyj xNUNBpiJ6qtSbGZu9MomH48rIelNZTWn6d2zqm78H8+yPFt1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2hymie9Uiz0rjpQdRUbvq05E4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvNzg3YzBkZmItNmViNy0z M2U4LTllNmEtMDdiOTQyMjEzNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7/wRkY77Pg91vZsTRzGeFdR4WPd1S3fHE7dY6qSFfnuc0n9Rh22mBY sCiF06D/GlG3HgYOQnfKycWwxyNHM31fJF1kETPR2SQJj1kic/Yd0YDFDpvraZ6f IVfOlVH6Y8sa1c/LdtCk4j379HVXy5C5sJFCwR81ESnwATqvE6x8kRldRGXnRGy+ Z7v34rNs52n6xAlBNjkJNmbLrXGlEzfE6RHMg4chqFkLwhSQxyiP9VyGP9ymNMr2 eOKLxkJBDFyE+XYxqFGKCtvSH8cf6Yhj+mKkapV6wacO1V6Qp/6rAc7n3InNXQNj FqSMgLRYFxMBEYDnNumDNIU9gK5FI0A= -----END CERTIFICATE-----Generated at Tue Apr 7 07:59:37 2026 by rpki-client