$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ac5b36b9-45b9-3c74-baf4-cc2442cdf533.roa File: ac5b36b9-45b9-3c74-baf4-cc2442cdf533.roa (raw, json) Hash identifier: yImbFIZ12EhfR7UvG/BH2iZ+zbk5qERwIOJ/NjNUOKQ= Subject key identifier: 2B:6C:40:ED:DD:6F:C9:6F:5A:03:F3:2B:31:8E:55:92:D6:35:16:EA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584D082F4A585B6FC62267FB7D00 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ac5b36b9-45b9-3c74-baf4-cc2442cdf533.roa Signing time: Mon 02 Mar 2026 06:23:20 +0000 ROA not before: Mon 02 Mar 2026 06:23:20 +0000 ROA not after: Sun 31 May 2026 05:23:20 +0000 asID: 54994 IP address blocks: 153.43.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:2f:4a:58:5b:6f:c6:22:67:fb:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 2 06:23:20 2026 GMT Not After : May 31 05:23:20 2026 GMT Subject: CN=4a872fe9-56d0-486a-953a-f95478b00ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:db:59:a5:60:cd:98:57:c4:9a:ed:fc:25:1c: 86:be:f0:e0:6c:a1:80:1d:1c:99:f4:f0:7c:0d:d6: 05:e3:03:f7:b5:6b:9c:4b:e7:ad:6a:ea:9e:56:94: 09:e5:87:2a:88:e7:f4:70:03:3e:4b:d8:cb:e9:06: 68:02:5d:05:0b:3b:b6:c0:3f:93:34:f5:0d:4a:45: 7c:a9:56:53:1b:68:da:19:1e:57:32:1c:6a:e5:c6: 51:3d:fd:04:87:6d:16:bd:59:1b:82:11:b8:c8:5e: 4a:e4:f7:8f:b9:12:de:dc:19:ac:b7:0b:62:a9:92: 36:14:75:3f:34:62:5c:1b:39:53:d6:f1:ef:5f:a1: 34:a6:5d:cc:7b:b7:c5:49:73:50:39:ac:2c:27:b8: 81:73:aa:64:a3:39:c5:12:7a:c0:2e:e3:be:31:48: ae:b8:6f:32:88:8a:07:23:2b:e1:a8:46:d7:e6:c7: 12:78:c7:e9:58:15:9a:ce:c7:ed:34:36:55:59:03: 1b:cb:20:28:72:50:77:29:8a:1d:be:9e:8f:0d:6d: 7d:5a:0c:93:2d:6a:25:84:e8:4e:d9:f5:13:5f:d7: 71:8a:a8:d0:80:a2:c0:8d:1f:41:56:69:80:b7:ac: 8b:0d:82:9f:67:f8:55:45:d1:f7:e0:3c:b3:26:3a: a8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6C:40:ED:DD:6F:C9:6F:5A:03:F3:2B:31:8E:55:92:D6:35:16:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/ac5b36b9-45b9-3c74-baf4-cc2442cdf533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 153.43.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b4:f7:6e:e9:f2:ad:4a:a8:ba:73:ba:cd:8f:65:81:b1:b1: 7f:c0:6f:25:a4:f9:79:14:9a:7d:89:37:72:98:54:00:b4:35: c7:1d:d5:7f:5d:56:71:b1:86:31:28:b3:d9:48:06:fe:3b:7a: 39:bb:2f:91:67:b7:2d:15:60:65:d7:d4:cb:d0:ab:10:4b:e8: 88:2a:58:ba:fa:18:32:1b:44:96:1f:0c:a3:2d:c9:3e:0d:86: 0e:12:92:2c:be:9e:5b:ea:9b:87:ae:39:63:ca:43:b6:b1:bb: d9:8b:41:30:9a:88:9c:44:d1:3b:c3:b3:cc:87:11:59:8d:d7: 01:21:a9:e1:28:42:99:bd:02:1c:ae:33:8a:ed:39:8d:c8:d8: ae:ef:21:33:81:08:b1:7a:4c:46:d6:10:4f:8f:62:fc:c1:65: 7d:c9:4a:5c:ab:cb:b2:79:47:11:e6:44:d6:71:b8:6f:b6:81: 22:e0:fa:1e:fe:1f:a8:e2:5f:69:0f:f5:14:2f:a9:32:22:e2: e8:0e:03:b4:e4:ed:3f:a4:95:8a:9d:ec:59:59:09:a2:65:92: c8:b8:15:ab:d9:17:ac:8b:55:a3:5b:70:eb:47:3f:1d:ca:16: c2:65:68:e7:25:38:c7:76:4d:c4:d2:31:17:50:5e:7a:81:ee: 4a:98:88:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0IL0pYW2/GImf7fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI2MDMwMjA2MjMyMFoXDTI2MDUzMTA1MjMyMFowLzEtMCsGA1UEAxMk NGE4NzJmZTktNTZkMC00ODZhLTk1M2EtZjk1NDc4YjAwZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdtZpWDNmFfEmu38JRyGvvDgbKGAHRyZ9PB8 DdYF4wP3tWucS+etauqeVpQJ5YcqiOf0cAM+S9jL6QZoAl0FCzu2wD+TNPUNSkV8 qVZTG2jaGR5XMhxq5cZRPf0Eh20WvVkbghG4yF5K5PePuRLe3BmstwtiqZI2FHU/ NGJcGzlT1vHvX6E0pl3Me7fFSXNQOawsJ7iBc6pkoznFEnrALuO+MUiuuG8yiIoH IyvhqEbX5scSeMfpWBWazsftNDZVWQMbyyAoclB3KYodvp6PDW19WgyTLWolhOhO 2fUTX9dxiqjQgKLAjR9BVmmAt6yLDYKfZ/hVRdH34DyzJjqoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtsQO3db8lvWgPzKzGOVZLWNRbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvYWM1YjM2YjktNDViOS0z Yzc0LWJhZjQtY2MyNDQyY2RmNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS0927p8q1KqLpzus2PZYGxsX/AbyWk+XkUmn2JN3KYVAC0Nccd1X9d VnGxhjEos9lIBv47ejm7L5Fnty0VYGXX1MvQqxBL6IgqWLr6GDIbRJYfDKMtyT4N hg4Skiy+nlvqm4euOWPKQ7axu9mLQTCaiJxE0TvDs8yHEVmN1wEhqeEoQpm9Ahyu M4rtOY3I2K7vITOBCLF6TEbWEE+PYvzBZX3JSlyry7J5RxHmRNZxuG+2gSLg+h7+ H6jiX2kP9RQvqTIi4ugOA7Tk7T+klYqd7FlZCaJlksi4FavZF6yLVaNbcOtHPx3K FsJlaOclOMd2TcTSMRdQXnqB7kqYiAM= -----END CERTIFICATE-----Generated at Fri Mar 6 19:36:15 2026 by rpki-client