$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0b7f4acc-fcfa-39b2-8abf-e7d18be4fc45.roa File: 0b7f4acc-fcfa-39b2-8abf-e7d18be4fc45.roa (raw, json) Hash identifier: WW/v89Eh2MQufchNa7PC8+qrt8vED3bxjU9YK4RLQUo= Subject key identifier: CF:19:F7:67:9D:46:86:5B:AF:C3:9C:81:3F:1F:A3:D7:48:8D:08:5E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF97B9A814157A10BAEC80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0b7f4acc-fcfa-39b2-8abf-e7d18be4fc45.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:97:b9:a8:14:15:7a:10:ba:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=08b1e8fd-0f0e-40d3-910c-3f2d4f6346c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:79:a8:67:41:1d:86:7a:a2:a9:eb:90:1a: eb:48:79:a9:8f:cb:dc:e9:87:56:8a:f4:ae:31:03: 1c:ee:96:d0:b1:7f:7c:10:e6:11:b6:f9:eb:ad:c8: 2d:86:b3:f0:62:b0:11:92:b3:89:56:8b:0f:57:3b: 86:c9:fa:6a:9a:af:a2:3a:76:b1:0f:eb:62:e1:5b: 5a:e7:4c:c5:e8:7d:89:f4:05:36:f4:10:77:c9:7d: 59:d1:2a:89:a8:17:80:e0:0d:e9:ee:48:6a:37:53: f7:6a:e0:8f:e8:88:e0:dc:5e:dd:00:3c:76:f8:ee: 78:21:54:cf:08:48:1f:a3:c7:33:d7:9e:5e:d4:20: df:76:55:0d:5e:95:d5:5e:3c:bc:4b:c5:db:4d:69: 8b:c2:6f:92:f9:34:6d:71:3c:27:2f:45:03:5a:ee: 4b:7a:74:d4:1f:83:3a:61:2f:72:8e:32:12:70:16: b7:09:4e:d6:ed:15:8c:f0:79:2c:f5:e8:4a:01:77: eb:c0:0c:6f:10:97:48:c3:20:a1:5e:58:cf:4c:69: 33:9a:0c:77:f4:48:c4:2f:52:67:8a:8a:3e:4d:e2: 80:c7:de:a7:2c:9c:07:b5:0c:05:0d:09:bd:e1:51: ae:a1:70:05:d1:5f:46:37:38:10:a9:f6:10:74:6f: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:19:F7:67:9D:46:86:5B:AF:C3:9C:81:3F:1F:A3:D7:48:8D:08:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0b7f4acc-fcfa-39b2-8abf-e7d18be4fc45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ab:21:64:d2:7f:0f:a0:a6:ea:f9:fd:b5:bd:84:1b:9d:22: d8:91:5f:5b:89:69:66:99:e1:1a:18:93:0c:c2:3b:4c:42:ef: 1b:0e:33:18:d3:6e:e9:80:87:46:26:34:21:42:62:f9:eb:6e: 14:da:05:0c:be:38:22:99:9d:a5:8f:af:b2:93:a9:b2:80:63: 80:e4:21:71:29:a6:c9:b5:67:49:da:64:9b:7c:32:6a:c7:fe: ec:ca:99:cc:de:7b:11:05:03:fa:40:d5:cf:bb:82:51:3a:35: e2:97:f5:a4:1e:60:a6:51:6d:63:1b:87:ca:a4:8f:59:99:63: 50:89:54:24:4c:e0:5a:b0:bf:95:62:72:8a:fb:5a:e1:5d:a8: 5c:64:bc:38:f3:07:b4:f2:08:01:3b:36:12:80:0f:45:7e:e9: 18:c4:e6:ac:d1:b4:86:a2:c9:22:9f:42:2f:6f:29:70:34:a8: 3c:3e:58:14:94:e7:2e:31:8d:41:25:91:e6:cb:4f:8d:db:57: ee:81:0a:4c:2f:7d:87:da:c2:e2:a4:19:aa:26:f1:e8:56:aa: 1d:8a:e6:f5:87:06:db:e4:63:7c:8a:96:e3:e7:03:c8:f7:b0: ad:93:73:5f:73:83:a0:d8:6d:b9:1c:9b:91:75:c5:53:e8:04: c3:c6:22:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5e5qBQVehC67IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MDhiMWU4ZmQtMGYwZS00MGQzLTkxMGMtM2YyZDRmNjM0NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk95qGdBHYZ6oqnrkBrrSHmpj8vc6YdWivSu MQMc7pbQsX98EOYRtvnrrcgthrPwYrARkrOJVosPVzuGyfpqmq+iOnaxD+ti4Vta 50zF6H2J9AU29BB3yX1Z0SqJqBeA4A3p7khqN1P3auCP6Ijg3F7dADx2+O54IVTP CEgfo8cz155e1CDfdlUNXpXVXjy8S8XbTWmLwm+S+TRtcTwnL0UDWu5LenTUH4M6 YS9yjjIScBa3CU7W7RWM8Hks9ehKAXfrwAxvEJdIwyChXljPTGkzmgx39EjEL1Jn ioo+TeKAx96nLJwHtQwFDQm94VGuoXAF0V9GNzgQqfYQdG+KLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8Z92edRoZbr8OcgT8fo9dIjQheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGI3ZjRhY2MtZmNmYS0z OWIyLThhYmYtZTdkMThiZTRmYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2rIWTSfw+gpur5/bW9hBudItiRX1uJaWaZ4RoYkwzCO0xC7xsOMxjT bumAh0YmNCFCYvnrbhTaBQy+OCKZnaWPr7KTqbKAY4DkIXEppsm1Z0naZJt8MmrH /uzKmczeexEFA/pA1c+7glE6NeKX9aQeYKZRbWMbh8qkj1mZY1CJVCRM4Fqwv5Vi cor7WuFdqFxkvDjzB7TyCAE7NhKAD0V+6RjE5qzRtIaiySKfQi9vKXA0qDw+WBSU 5y4xjUElkebLT43bV+6BCkwvfYfawuKkGaom8ehWqh2K5vWHBtvkY3yKluPnA8j3 sK2Tc19zg6DYbbkcm5F1xVPoBMPGIjs= -----END CERTIFICATE-----Generated at Sat Mar 21 20:53:13 2026 by rpki-client