$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa File: a655e053-8445-36ca-bd9a-65d680860a66.roa (raw, json) Hash identifier: q4pMwGTrUM8+HmJ/HsbNvxZ+3Y4mu/zrvLukCo7C0r8= Subject key identifier: 32:1B:DE:B0:8A:B7:9A:60:EE:D9:68:77:43:1D:C5:BC:29:C8:F4:69 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D932565BB7CEFA9B92B983C00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 54994 IP address blocks: 153.43.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:65:bb:7c:ef:a9:b9:2b:98:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=c49407ab-9fad-4b76-b3a6-15e880edd787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:39:f8:51:dc:f9:b5:66:6e:f2:ca:3d:42:52: 53:e8:b0:8e:20:38:76:ec:1f:33:5b:0f:4b:97:40: 75:11:4e:0d:33:13:d7:ba:72:7b:a8:81:4f:ca:42: 8f:7f:84:4d:c8:d6:6e:c6:b1:53:8c:56:f6:06:c9: 34:4c:ad:66:20:69:dc:c9:80:f1:a1:2a:0d:81:f5: b8:d8:9f:ab:97:65:b6:df:e4:e2:ee:08:e6:e8:db: 8a:a7:74:f3:64:a8:5b:71:9d:ee:c4:72:67:1e:31: 73:63:9b:b5:37:33:3d:6c:33:62:2f:23:64:f4:41: d7:70:f6:f4:0c:bf:a8:af:bf:c9:ed:a8:8f:56:46: b2:a0:87:f1:5b:29:68:35:3b:3d:3f:ed:de:42:72: 82:68:95:00:e1:be:f6:18:c0:4c:2c:2a:8f:45:33: 84:c8:18:78:71:c3:21:be:2b:8e:1c:1c:6c:e9:c9: 59:8b:8e:69:95:e3:09:35:5a:a1:80:f1:2e:bd:aa: 39:5c:e5:85:d6:ee:3d:4d:58:04:e5:b4:9b:a0:7a: 83:2c:54:f6:21:4a:31:aa:a6:e5:7b:22:4c:43:6b: d9:10:13:47:9d:7e:4f:4a:e3:ca:45:a9:a5:89:b7: 95:55:42:18:b0:88:6f:7c:52:12:78:db:95:a2:f9: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1B:DE:B0:8A:B7:9A:60:EE:D9:68:77:43:1D:C5:BC:29:C8:F4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/a655e053-8445-36ca-bd9a-65d680860a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a6:18:2e:cb:87:0a:67:a0:f2:05:71:90:d1:5a:36:71:2c: 2d:d3:77:7d:27:c8:d6:46:56:1c:31:c0:e2:2a:8f:89:a3:bf: c6:c2:4d:a8:ad:84:99:7c:7d:b5:eb:0a:31:a1:4c:b3:0b:84: ab:71:45:e3:84:6b:67:04:8f:64:9b:e9:b4:bc:de:48:06:66: 2d:dc:75:7a:f4:02:23:b9:8a:ab:65:69:00:63:a5:b6:4e:32: d2:d7:bb:24:0a:60:30:b7:66:c9:dd:13:6e:cd:96:61:52:8b: b1:74:9e:64:7d:98:7f:0e:55:42:12:e2:93:08:7b:2a:3f:bb: 94:e9:74:27:6f:1b:68:bc:45:77:57:ad:42:f9:01:f3:e6:8a: 95:93:9e:14:db:40:04:f5:30:34:ca:e6:bd:03:3d:85:41:89: 6f:f0:45:f6:90:7f:6e:6c:c6:19:02:dc:b6:28:9c:4b:15:b3: 95:a5:b9:a1:82:63:12:a2:e3:dd:12:e8:bb:04:cf:f8:6b:09: b4:65:dc:e6:11:73:cf:18:f2:e4:72:90:42:68:4e:bd:64:b0: 53:a2:31:3d:db:a3:bb:57:dd:ea:64:01:fc:76:2b:70:96:5a: 57:d8:23:dc:d4:ea:e5:dd:46:56:3e:15:64:ef:de:42:0f:5b: be:11:a6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWW7fO+puSuYPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk YzQ5NDA3YWItOWZhZC00Yjc2LWIzYTYtMTVlODgwZWRkNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDn4Udz5tWZu8so9QlJT6LCOIDh27B8zWw9L l0B1EU4NMxPXunJ7qIFPykKPf4RNyNZuxrFTjFb2Bsk0TK1mIGncyYDxoSoNgfW4 2J+rl2W23+Ti7gjm6NuKp3TzZKhbcZ3uxHJnHjFzY5u1NzM9bDNiLyNk9EHXcPb0 DL+or7/J7aiPVkayoIfxWyloNTs9P+3eQnKCaJUA4b72GMBMLCqPRTOEyBh4ccMh viuOHBxs6clZi45pleMJNVqhgPEuvao5XOWF1u49TVgE5bSboHqDLFT2IUoxqqbl eyJMQ2vZEBNHnX5PSuPKRamlibeVVUIYsIhvfFISeNuVovlyywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIb3rCKt5pg7tlod0MdxbwpyPRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYTY1NWUwNTMtODQ0NS0z NmNhLWJkOWEtNjVkNjgwODYwYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSs0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWmGC7LhwpnoPIFcZDRWjZxLC3Td30nyNZGVhwxwOIqj4mjv8bCTait hJl8fbXrCjGhTLMLhKtxReOEa2cEj2Sb6bS83kgGZi3cdXr0AiO5iqtlaQBjpbZO MtLXuyQKYDC3ZsndE27NlmFSi7F0nmR9mH8OVUIS4pMIeyo/u5TpdCdvG2i8RXdX rUL5AfPmipWTnhTbQAT1MDTK5r0DPYVBiW/wRfaQf25sxhkC3LYonEsVs5WluaGC YxKi490S6LsEz/hrCbRl3OYRc88Y8uRykEJoTr1ksFOiMT3bo7tX3epkAfx2K3CW WlfYI9zU6uXdRlY+FWTv3kIPW74Rplk= -----END CERTIFICATE-----Generated at Wed Apr 22 00:23:21 2026 by rpki-client