$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0b40339c-7f9b-38bc-aa5b-30603ba5abd3.roa File: 0b40339c-7f9b-38bc-aa5b-30603ba5abd3.roa (raw, json) Hash identifier: YrgYHJ4ZmNjZtuNdSFEqgKHoBk+VKrZKFbDYRDQijf4= Subject key identifier: 38:66:D9:22:99:31:EC:24:31:BF:A3:D8:7C:B7:3C:C1:17:66:FF:1B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D316F7D87B894FD5F5A778200 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0b40339c-7f9b-38bc-aa5b-30603ba5abd3.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:7d:87:b8:94:fd:5f:5a:77:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=97d31178-e79e-4f01-bb04-1e20ee02b04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a5:c7:0a:09:11:12:2b:9b:d9:81:d1:bf:19: e3:61:b4:84:95:02:68:19:30:4f:f7:5d:4e:d2:37: 99:20:9a:2e:e3:e2:7b:bf:61:b7:50:9d:49:52:bb: 16:f6:90:8a:dd:e7:a0:66:4a:bd:b1:35:e0:8b:96: 74:6b:b7:53:44:ec:3e:30:8e:5e:67:c0:a4:d3:cc: 03:cf:26:72:92:89:9e:6f:8f:8a:01:6b:3c:70:53: 50:c5:8d:d7:30:2c:2b:d6:fe:ed:e5:b7:cb:8c:5b: ec:55:35:22:8a:24:a5:6c:12:fc:0b:41:e6:1a:d0: 1f:01:0d:88:0b:b5:f7:74:1f:d8:31:e7:98:38:17: 5d:c5:76:32:68:83:8c:4f:c3:cb:bc:30:43:45:31: 6b:fa:25:11:31:e2:ab:b2:bb:d3:ce:59:6e:54:7d: f1:97:ab:78:f7:91:77:ee:df:8f:95:38:a3:9c:40: 6a:68:a7:a5:2a:d0:28:92:15:90:36:90:9b:b4:75: 8a:83:d9:38:71:27:6e:08:f4:b6:be:f1:11:0c:e6: f0:14:ee:21:51:7e:e3:10:50:dd:f3:17:1c:b1:2c: 4f:c9:ff:3f:c4:7a:a9:10:2d:fd:fd:86:fa:b6:20: 06:2e:d9:1b:d2:6d:7d:54:94:5a:8b:79:09:43:ba: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:66:D9:22:99:31:EC:24:31:BF:A3:D8:7C:B7:3C:C1:17:66:FF:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0b40339c-7f9b-38bc-aa5b-30603ba5abd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a3:bf:80:e3:1f:e5:9d:85:dc:76:b6:b1:86:e5:b0:61:29: 22:29:29:8c:03:ff:42:b8:0a:3a:58:f3:8c:43:1e:9a:6a:c2: ae:a3:b9:66:92:45:e6:64:86:b2:b1:08:79:17:59:1c:47:bb: 1c:23:75:30:5a:52:6f:4b:e6:fc:cc:82:3f:d7:a9:1d:32:ff: fa:1b:d9:f3:77:f9:4b:97:15:3a:8e:61:e4:7e:ab:3a:f8:19: 08:8f:f6:92:6c:70:3b:c9:96:2d:18:2c:4e:87:19:d6:48:44: ca:54:43:1c:b2:86:23:8c:b5:dd:34:ca:7c:58:a3:78:1b:de: 8d:17:7f:1b:0c:c6:61:a3:62:1d:2e:15:e2:43:4a:bc:76:52: 58:79:0d:57:57:88:03:ad:a2:09:bf:f4:d4:61:5a:f9:86:05: 72:c9:62:c5:f1:68:d7:bc:0f:d0:da:eb:29:f5:ec:3c:10:2c: b5:ed:b7:f1:28:4f:a6:10:c6:15:1d:91:80:70:5a:b8:b8:14: ec:59:9e:50:af:bd:11:cd:e8:8d:b7:1b:38:58:da:4a:e2:d1: ec:52:7b:f9:e9:3e:a6:ab:c0:4b:f8:34:ff:09:81:9b:05:10: 75:48:d9:d3:8d:16:b4:2f:ea:ab:5b:a8:ef:ad:bc:00:33:b9: 6b:69:83:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb32HuJT9X1p3ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk OTdkMzExNzgtZTc5ZS00ZjAxLWJiMDQtMWUyMGVlMDJiMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6XHCgkREiub2YHRvxnjYbSElQJoGTBP911O 0jeZIJou4+J7v2G3UJ1JUrsW9pCK3eegZkq9sTXgi5Z0a7dTROw+MI5eZ8Ck08wD zyZykomeb4+KAWs8cFNQxY3XMCwr1v7t5bfLjFvsVTUiiiSlbBL8C0HmGtAfAQ2I C7X3dB/YMeeYOBddxXYyaIOMT8PLvDBDRTFr+iURMeKrsrvTzlluVH3xl6t495F3 7t+PlTijnEBqaKelKtAokhWQNpCbtHWKg9k4cSduCPS2vvERDObwFO4hUX7jEFDd 8xccsSxPyf8/xHqpEC39/Yb6tiAGLtkb0m19VJRai3kJQ7pq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhm2SKZMewkMb+j2Hy3PMEXZv8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGI0MDMzOWMtN2Y5Yi0z OGJjLWFhNWItMzA2MDNiYTVhYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOjv4DjH+Wdhdx2trGG5bBhKSIpKYwD/0K4CjpY84xDHppqwq6juWaS ReZkhrKxCHkXWRxHuxwjdTBaUm9L5vzMgj/XqR0y//ob2fN3+UuXFTqOYeR+qzr4 GQiP9pJscDvJli0YLE6HGdZIRMpUQxyyhiOMtd00ynxYo3gb3o0XfxsMxmGjYh0u FeJDSrx2Ulh5DVdXiAOtogm/9NRhWvmGBXLJYsXxaNe8D9Da6yn17DwQLLXtt/Eo T6YQxhUdkYBwWri4FOxZnlCvvRHN6I23GzhY2kri0exSe/npPqarwEv4NP8JgZsF EHVI2dONFrQv6qtbqO+tvAAzuWtpgxk= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:57 2026 by rpki-client