$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa File: 8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa (raw, json) Hash identifier: cpfbEqK0V9KqEfIs2vibCPeRgXJnrFXFmQa7lkaS0Xk= Subject key identifier: 8F:F2:E7:DB:1C:74:5C:4F:A3:09:02:69:49:89:21:C6:FA:5C:1B:4A Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584EA799F59D56FDAE5CE684E680 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54994 IP address blocks: 153.43.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:f5:9d:56:fd:ae:5c:e6:84:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3de2ac92-29ca-47d0-9978-52f81ff85028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:89:bd:c4:b9:f4:c6:00:5c:54:6a:0d:b7: 83:56:6e:c3:ba:47:c2:0d:fd:ee:93:13:36:f9:d9: f0:28:a2:45:28:37:74:f6:65:df:b6:00:8b:b6:7e: d9:50:e0:b9:c9:86:1e:0c:23:6a:6b:1f:f8:c7:93: 55:4e:16:3e:6a:13:07:7b:f6:cb:d9:0c:45:cd:6c: 24:52:d4:f1:77:68:51:91:11:4a:60:f0:c6:13:24: e6:f0:f6:f0:be:86:d8:ff:7f:20:16:dd:5a:30:3b: 2d:82:88:f3:8f:6f:1d:c1:c0:a5:97:dd:8e:92:8b: c5:59:cc:04:82:2a:65:63:99:2d:9f:ef:81:b7:89: 73:46:fc:dd:51:d2:22:08:78:00:1d:b8:d9:6a:c6: 6a:3b:05:ac:15:2d:a7:54:d2:e8:54:a5:e7:8b:10: 55:0e:64:53:db:75:55:28:69:f0:9f:25:57:d5:9c: 5d:00:7d:1e:5a:76:43:cb:9a:35:f9:c4:d8:f4:ff: 71:0a:ec:99:08:4f:41:f6:b6:99:40:5f:06:ee:39: b5:76:cd:97:22:a8:35:55:ae:50:09:fe:7c:55:3f: e5:b8:ab:41:fd:7d:2d:03:fc:09:f6:55:5b:d5:e3: 49:42:d1:ed:a2:8b:b1:c3:08:40:66:e8:3b:47:1d: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F2:E7:DB:1C:74:5C:4F:A3:09:02:69:49:89:21:C6:FA:5C:1B:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8ac029f3-d3ea-316d-be98-8566a5d3bcca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9f:c1:07:01:fb:fa:f8:13:e6:2d:2b:41:d4:4e:14:db:2a: 5d:00:66:08:be:41:c1:a0:56:09:26:0a:c8:55:b9:95:6f:1f: 23:c5:6c:d2:c0:cc:48:4b:25:33:66:f6:bf:48:e2:0d:48:80: bd:4f:46:fb:55:4f:6d:ff:72:dc:78:d1:04:18:97:53:68:e2: a5:93:73:6a:ec:91:be:c1:e3:bf:9a:f2:0a:6d:72:ec:32:f8: 4b:3e:94:50:35:16:33:bb:8e:94:b8:81:19:74:0e:0f:ef:e9: 7e:2d:59:d9:f3:64:60:72:12:7a:4e:ea:e3:08:cf:25:59:e0: 9b:db:d6:f1:4f:1f:03:16:fc:2c:a8:f1:b3:55:ca:9e:76:fa: 8a:2e:a8:ce:44:3b:47:d0:dd:c0:5c:ac:20:65:0a:4e:58:eb: 02:1c:ac:8f:9a:57:50:f3:dd:d9:47:08:1e:94:d1:f4:1d:41: 40:73:63:fb:69:36:4a:95:f4:df:05:74:05:1f:60:10:1b:1b: b4:17:96:d9:7c:d1:fe:0c:e9:d6:54:88:78:cf:51:44:93:2e: 27:b9:8c:cc:05:e3:0f:a1:8c:e4:5a:aa:f2:69:e6:dc:b0:84: c4:f2:a2:79:8c:54:bb:c8:59:28:ba:48:9b:e6:0b:66:94:e7: fa:03:4e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmfWdVv2uXOaE5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2RlMmFjOTItMjljYS00N2QwLTk5NzgtNTJmODFmZjg1MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6eJvcS59MYAXFRqDbeDVm7DukfCDf3ukxM2 +dnwKKJFKDd09mXftgCLtn7ZUOC5yYYeDCNqax/4x5NVThY+ahMHe/bL2QxFzWwk UtTxd2hRkRFKYPDGEyTm8PbwvobY/38gFt1aMDstgojzj28dwcCll92OkovFWcwE giplY5ktn++Bt4lzRvzdUdIiCHgAHbjZasZqOwWsFS2nVNLoVKXnixBVDmRT23VV KGnwnyVX1ZxdAH0eWnZDy5o1+cTY9P9xCuyZCE9B9raZQF8G7jm1ds2XIqg1Va5Q Cf58VT/luKtB/X0tA/wJ9lVb1eNJQtHtoouxwwhAZug7Rx1EUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/y59scdFxPowkCaUmJIcb6XBtKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGFjMDI5ZjMtZDNlYS0z MTZkLWJlOTgtODU2NmE1ZDNiY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKfwQcB+/r4E+YtK0HUThTbKl0AZgi+QcGgVgkmCshVuZVvHyPFbNLA zEhLJTNm9r9I4g1IgL1PRvtVT23/ctx40QQYl1No4qWTc2rskb7B47+a8gptcuwy +Es+lFA1FjO7jpS4gRl0Dg/v6X4tWdnzZGByEnpO6uMIzyVZ4Jvb1vFPHwMW/Cyo 8bNVyp52+oouqM5EO0fQ3cBcrCBlCk5Y6wIcrI+aV1Dz3dlHCB6U0fQdQUBzY/tp NkqV9N8FdAUfYBAbG7QXltl80f4M6dZUiHjPUUSTLie5jMwF4w+hjORaqvJp5tyw hMTyonmMVLvIWSi6SJvmC2aU5/oDTiE= -----END CERTIFICATE-----Generated at Sun Aug 23 09:28:27 2026 by rpki-client