$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0c2c2971-e600-3386-81af-a6eff800af7c.roa File: 0c2c2971-e600-3386-81af-a6eff800af7c.roa (raw, json) Hash identifier: Gy44m5M+bRofvWOwcbd8jezzxJZY4aq2I/WY9E4dRsM= Subject key identifier: 80:D9:9C:60:E5:F8:87:08:52:F6:E1:45:59:AC:4F:99:0F:69:66:CF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F576817FDF1C2CA6F3193CA00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0c2c2971-e600-3386-81af-a6eff800af7c.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:17:fd:f1:c2:ca:6f:31:93:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=9cf8c2c5-55a9-4376-98c7-69a304b19fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:2a:8c:1f:66:f6:20:30:ec:27:f6:0e:2c: dd:a6:fd:af:6a:c2:c9:13:b3:ec:ca:57:75:56:26: d2:4f:32:ea:dd:9a:70:60:b3:a0:f9:7d:25:07:77: cb:4d:fd:3d:75:d2:cf:3b:53:5f:2c:ea:fa:e1:c9: a7:05:83:a9:0b:99:90:c3:49:91:9f:4b:9d:f3:a5: 97:aa:2d:a0:92:7c:c6:b9:70:b7:8e:fe:9a:5f:41: 03:a3:d9:76:4b:43:0b:4b:3b:d3:7b:36:56:0f:bf: 27:77:aa:b3:9a:e8:f6:09:46:45:7a:bc:7f:a9:84: 2f:bd:05:75:07:88:ff:ef:0a:cf:f7:9e:0d:ce:0c: 0b:43:40:78:3f:f6:a5:30:d4:b0:c2:48:c8:97:67: 3b:4b:d7:c1:7d:9c:f6:91:1b:10:1b:01:91:44:a0: 53:c1:67:bc:ca:5b:05:5a:00:df:5c:1d:b5:a3:0c: 3f:02:f1:67:d3:20:9e:18:35:c4:4e:39:da:99:80: 9f:b3:78:36:2e:33:57:05:79:89:6e:46:11:6f:e8: 86:3b:a3:7e:67:d5:d5:15:b5:98:1e:23:ef:3d:fe: e6:b3:c9:d0:a7:a1:66:bb:69:47:88:d0:93:7a:cd: 5b:17:73:45:a2:c4:72:ea:3f:d5:27:80:5c:c1:2c: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D9:9C:60:E5:F8:87:08:52:F6:E1:45:59:AC:4F:99:0F:69:66:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0c2c2971-e600-3386-81af-a6eff800af7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6f:99:3c:3f:63:d1:9a:48:9a:70:dc:58:03:94:5c:1b:7f: a2:79:68:6a:d9:cf:68:70:93:4f:41:83:b6:6a:a5:21:28:31: d7:2d:39:dc:a9:91:ad:f4:d4:66:0e:49:fe:53:9e:e8:fb:af: 3c:de:af:1b:81:9a:c8:ea:d0:67:12:15:52:73:37:f7:7c:4a: 66:21:8b:b2:45:84:78:89:44:87:e1:0e:bc:e8:27:c4:b9:01: bb:7a:39:87:0a:9b:b4:da:35:ea:dc:fd:ee:64:66:ff:51:c6: b3:3c:05:b0:26:74:26:11:db:af:e4:36:c9:ba:d0:62:1e:83: 35:6d:42:72:71:8b:9a:e7:87:c6:d4:20:81:0b:11:30:72:e7: 97:6f:2e:f2:24:41:3f:5e:60:cb:4a:80:46:89:6c:54:6e:90: 6f:16:fa:17:e1:49:93:a6:f2:52:ec:0b:5c:cd:c2:60:de:d6: 38:25:04:f3:36:86:c5:25:d7:6a:c8:b4:76:d8:78:95:8c:18: d5:06:33:ec:a2:60:a7:8a:02:35:83:d6:38:55:ce:d1:39:5e: 87:cb:8c:c5:c9:7a:52:e6:02:79:b2:d9:5f:48:63:9b:38:30: ab:db:d8:df:49:54:37:74:03:b7:b1:e8:86:66:59:52:90:6c: ff:4d:a1:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaBf98cLKbzGTygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OWNmOGMyYzUtNTVhOS00Mzc2LTk4YzctNjlhMzA0YjE5ZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxkqjB9m9iAw7Cf2Dizdpv2vasLJE7Psyld1 VibSTzLq3ZpwYLOg+X0lB3fLTf09ddLPO1NfLOr64cmnBYOpC5mQw0mRn0ud86WX qi2gknzGuXC3jv6aX0EDo9l2S0MLSzvTezZWD78nd6qzmuj2CUZFerx/qYQvvQV1 B4j/7wrP954NzgwLQ0B4P/alMNSwwkjIl2c7S9fBfZz2kRsQGwGRRKBTwWe8ylsF WgDfXB21oww/AvFn0yCeGDXETjnamYCfs3g2LjNXBXmJbkYRb+iGO6N+Z9XVFbWY HiPvPf7ms8nQp6Fmu2lHiNCTes1bF3NFosRy6j/VJ4BcwSxiYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDZnGDl+IcIUvbhRVmsT5kPaWbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGMyYzI5NzEtZTYwMC0z Mzg2LTgxYWYtYTZlZmY4MDBhZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9vmTw/Y9GaSJpw3FgDlFwbf6J5aGrZz2hwk09Bg7ZqpSEoMdctOdyp ka301GYOSf5Tnuj7rzzerxuBmsjq0GcSFVJzN/d8SmYhi7JFhHiJRIfhDrzoJ8S5 Abt6OYcKm7TaNerc/e5kZv9RxrM8BbAmdCYR26/kNsm60GIegzVtQnJxi5rnh8bU IIELETBy55dvLvIkQT9eYMtKgEaJbFRukG8W+hfhSZOm8lLsC1zNwmDe1jglBPM2 hsUl12rItHbYeJWMGNUGM+yiYKeKAjWD1jhVztE5XofLjMXJelLmAnmy2V9IY5s4 MKvb2N9JVDd0A7ex6IZmWVKQbP9NoUE= -----END CERTIFICATE-----Generated at Tue Oct 6 11:35:30 2026 by rpki-client