$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/09158457-e8fe-3f39-9ac0-ecfa36f2a22a.roa File: 09158457-e8fe-3f39-9ac0-ecfa36f2a22a.roa (raw, json) Hash identifier: ca9olAWGje2M5pxAzilmJumnc3TD+QpHISzQ1zUi3xU= Subject key identifier: F3:02:D8:8E:6A:CF:3D:EC:22:9F:53:5F:98:63:5B:1B:15:25:AF:F3 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D3704C2203CE1D1EBA2B25280 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/09158457-e8fe-3f39-9ac0-ecfa36f2a22a.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:c2:20:3c:e1:d1:eb:a2:b2:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=3cea148f-139e-4daf-b7d9-ce02e9c92ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:c0:a8:83:cb:3f:23:29:67:c7:66:7a:f6: 5a:14:9f:a3:34:e6:e6:e0:13:c0:6c:f4:46:56:0b: 44:bc:1b:b3:b1:4d:7a:f6:5a:2d:32:d7:e3:08:a0: 8c:00:33:8b:a2:de:42:46:a5:93:18:ec:8f:7b:2a: 20:c5:44:67:91:64:01:26:e6:01:8e:7f:f5:48:0b: 50:ea:9d:2b:27:21:22:46:76:35:a1:e5:2e:94:d0: 97:ad:ab:71:32:bf:75:d2:db:a9:64:fa:c2:a8:dc: 84:76:8b:33:e0:0b:f6:88:1e:8e:25:37:7b:08:ca: f8:24:63:8d:5b:f0:85:9c:b3:00:81:47:e5:c9:b2: 4d:2f:87:0b:e3:32:00:d4:ce:4b:b3:5c:92:83:1c: da:9f:e2:39:45:69:a6:88:f4:ad:55:d8:6d:ee:1b: 2e:ee:c4:f8:34:78:a2:dd:9d:b4:d6:e3:33:3a:db: e5:b5:8e:69:54:3d:0a:a5:03:d7:40:c7:d3:9f:8c: 0a:a9:86:ee:9f:af:a5:9e:0b:bd:d1:a8:46:aa:0d: 2f:62:5a:74:7b:71:a6:84:6f:98:80:21:91:5a:fd: 2b:19:21:53:cc:ff:5d:1e:10:f7:0c:d1:da:65:da: 04:9c:19:8b:de:81:1c:35:f4:13:dd:f3:48:89:e7: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:02:D8:8E:6A:CF:3D:EC:22:9F:53:5F:98:63:5B:1B:15:25:AF:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/09158457-e8fe-3f39-9ac0-ecfa36f2a22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:db:90:ce:66:0c:20:ea:7f:e3:de:20:5b:7e:8d:ab:b3:fa: dc:26:e5:94:90:23:54:fc:bc:c5:d8:58:0b:98:30:12:bb:64: 0f:83:e3:a7:5c:72:74:92:33:57:26:7d:6e:29:55:86:e9:e1: df:02:46:64:6e:c1:76:84:b5:12:87:64:a3:0d:32:4f:22:59: bc:3d:ef:24:35:be:62:ed:94:d6:50:1b:24:ba:2e:23:86:e7: 94:2f:45:8c:b0:56:cb:3a:93:b4:2e:89:b9:58:31:81:f1:8a: 7a:31:a5:64:f1:13:1a:19:cf:76:2a:cd:d6:e7:0c:5b:c2:46: 92:1c:e5:9c:fa:a4:a1:fb:16:34:0d:01:e5:84:1f:32:6e:a2: f3:e4:1a:61:ea:7b:5b:22:ef:ec:c9:c5:00:72:40:2b:a9:fe: 19:95:32:88:45:8d:f7:40:0b:ec:ab:a5:58:bc:ed:a4:9e:9c: 1d:b5:92:06:64:12:3f:53:da:38:38:eb:f5:a6:7e:5a:47:87: c5:1f:a5:c6:13:9e:8e:1f:13:86:bb:be:8d:af:9f:c8:86:53: c5:5a:b9:d6:db:3d:bd:0d:18:ca:cf:c9:a3:c0:a6:d9:ce:ba: d0:6a:ae:e6:f3:07:6e:10:cd:bd:3a:9f:bb:1d:f3:c4:27:fe: 07:13:fa:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BMIgPOHR66KyUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk M2NlYTE0OGYtMTM5ZS00ZGFmLWI3ZDktY2UwMmU5YzkyZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hXAqIPLPyMpZ8dmevZaFJ+jNObm4BPAbPRG VgtEvBuzsU169lotMtfjCKCMADOLot5CRqWTGOyPeyogxURnkWQBJuYBjn/1SAtQ 6p0rJyEiRnY1oeUulNCXratxMr910tupZPrCqNyEdosz4Av2iB6OJTd7CMr4JGON W/CFnLMAgUflybJNL4cL4zIA1M5Ls1ySgxzan+I5RWmmiPStVdht7hsu7sT4NHii 3Z201uMzOtvltY5pVD0KpQPXQMfTn4wKqYbun6+lngu90ahGqg0vYlp0e3GmhG+Y gCGRWv0rGSFTzP9dHhD3DNHaZdoEnBmL3oEcNfQT3fNIiecT2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMC2I5qzz3sIp9TX5hjWxsVJa/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDkxNTg0NTctZThmZS0z ZjM5LTlhYzAtZWNmYTM2ZjJhMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzbkM5mDCDqf+PeIFt+jauz+twm5ZSQI1T8vMXYWAuYMBK7ZA+D46dc cnSSM1cmfW4pVYbp4d8CRmRuwXaEtRKHZKMNMk8iWbw97yQ1vmLtlNZQGyS6LiOG 55QvRYywVss6k7QuiblYMYHxinoxpWTxExoZz3YqzdbnDFvCRpIc5Zz6pKH7FjQN AeWEHzJuovPkGmHqe1si7+zJxQByQCup/hmVMohFjfdAC+yrpVi87aSenB21kgZk Ej9T2jg46/WmflpHh8UfpcYTno4fE4a7vo2vn8iGU8VaudbbPb0NGMrPyaPAptnO utBqrubzB24Qzb06n7sd88Qn/gcT+jE= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:34 2026 by rpki-client