$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0dc3c956-89b4-32e1-8157-034f4e28177c.roa File: 0dc3c956-89b4-32e1-8157-034f4e28177c.roa (raw, json) Hash identifier: e0hBLdl58+Lq5yI553PvUZWZZ8IQ4l2T3wo1n04IpDc= Subject key identifier: E2:9F:91:CE:C4:A1:A5:12:B5:7D:06:B6:41:37:59:83:07:58:88:80 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF88CE045186D7D5D17300 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0dc3c956-89b4-32e1-8157-034f4e28177c.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:88:ce:04:51:86:d7:d5:d1:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=dfb62e58-514b-45b6-8732-ef5d190a83d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:46:b7:eb:7f:24:71:f5:d2:1d:82:22:47:5d: f4:b8:3d:bd:b2:ae:e6:c1:e5:94:c0:52:14:42:7a: c7:ec:83:a8:ea:c1:3b:85:03:24:98:5b:9e:b9:f7: 6d:3f:0a:c1:f9:8c:11:ac:a8:1d:d0:e0:35:44:e4: 49:ac:28:0b:d6:4d:d9:65:9a:92:76:99:b7:da:cd: 73:7f:a0:f5:68:98:15:c8:6a:78:f8:fd:61:8d:3c: cc:85:3d:4c:19:af:4b:4f:f6:47:84:5f:da:79:08: 1e:1f:a9:20:ea:6b:67:f0:cd:ff:d8:94:af:31:4d: 27:70:fe:64:2d:40:7a:a9:2c:22:25:15:17:8f:78: 04:06:85:4c:f5:bc:a4:a6:be:29:29:fb:b0:1f:2d: a5:27:9b:23:85:47:77:6f:ee:0c:34:13:8d:75:1c: ce:35:d7:9e:c7:b1:50:2b:26:29:4e:38:7e:6f:03: 97:0a:07:b2:40:40:41:8e:23:e0:31:96:7f:a8:5e: dd:e4:13:1e:c4:47:6d:dc:d3:0b:5d:24:d0:45:1b: d5:2d:3d:b6:fd:b2:da:da:1c:11:d3:25:7d:70:c7: 1f:15:d7:85:75:d3:28:58:f9:61:e8:d2:47:66:0f: 90:5d:14:6b:e7:46:7c:f6:b9:9d:a2:d8:b2:cb:cb: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9F:91:CE:C4:A1:A5:12:B5:7D:06:B6:41:37:59:83:07:58:88:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0dc3c956-89b4-32e1-8157-034f4e28177c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0a:28:e6:86:54:25:6c:71:ff:ae:35:27:41:f6:28:b1:b7: a6:50:13:66:d9:77:9a:91:77:55:df:34:62:66:52:4d:80:d0: 29:ed:b0:50:b2:79:97:9b:4d:04:f9:4f:f2:f8:e3:81:5d:f7: 9d:3f:db:85:e7:96:35:72:2e:f3:61:06:da:18:6b:6d:07:2b: 7b:a1:44:23:ef:bd:90:1e:2c:e9:a0:69:61:5a:87:60:5c:3d: 8a:65:9d:8a:0d:7e:2f:e1:f8:2a:77:14:60:9e:7f:44:1a:0a: b8:a3:1a:41:d8:51:58:6a:53:2b:b3:16:93:43:34:5b:e6:5c: 5b:4a:cc:ce:0a:51:01:47:c2:33:f1:07:73:42:b9:5d:6c:5d: 54:a2:29:94:72:36:bb:a8:bb:78:c8:bc:db:cf:9f:0a:39:17: b5:2e:c6:f2:dd:d7:c1:7d:16:5e:c1:e6:5e:a5:ec:a7:48:43: cc:8a:96:ac:88:e5:48:8d:3d:7c:24:e6:6c:9f:02:15:3d:a6: ba:ae:26:44:dc:98:ea:1f:91:58:43:b6:5d:93:bf:ca:7b:69: 90:ec:66:82:d8:6d:5d:0b:4a:cf:13:25:e0:c2:bf:ee:46:8d: c3:47:64:0f:8c:fe:75:93:bc:0f:0b:b3:09:5a:a2:89:39:95: 04:26:65:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4jOBFGG19XRcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZGZiNjJlNTgtNTE0Yi00NWI2LTg3MzItZWY1ZDE5MGE4M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUa3638kcfXSHYIiR130uD29sq7mweWUwFIU QnrH7IOo6sE7hQMkmFueufdtPwrB+YwRrKgd0OA1RORJrCgL1k3ZZZqSdpm32s1z f6D1aJgVyGp4+P1hjTzMhT1MGa9LT/ZHhF/aeQgeH6kg6mtn8M3/2JSvMU0ncP5k LUB6qSwiJRUXj3gEBoVM9bykpr4pKfuwHy2lJ5sjhUd3b+4MNBONdRzONdeex7FQ KyYpTjh+bwOXCgeyQEBBjiPgMZZ/qF7d5BMexEdt3NMLXSTQRRvVLT22/bLa2hwR 0yV9cMcfFdeFddMoWPlh6NJHZg+QXRRr50Z89rmdotiyy8ugFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKfkc7EoaUStX0GtkE3WYMHWIiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGRjM2M5NTYtODliNC0z MmUxLTgxNTctMDM0ZjRlMjgxNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAKKOaGVCVscf+uNSdB9iixt6ZQE2bZd5qRd1XfNGJmUk2A0CntsFCy eZebTQT5T/L444Fd950/24XnljVyLvNhBtoYa20HK3uhRCPvvZAeLOmgaWFah2Bc PYplnYoNfi/h+Cp3FGCef0QaCrijGkHYUVhqUyuzFpNDNFvmXFtKzM4KUQFHwjPx B3NCuV1sXVSiKZRyNruou3jIvNvPnwo5F7UuxvLd18F9Fl7B5l6l7KdIQ8yKlqyI 5UiNPXwk5myfAhU9prquJkTcmOofkVhDtl2Tv8p7aZDsZoLYbV0LSs8TJeDCv+5G jcNHZA+M/nWTvA8Lswlaook5lQQmZU8= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:59 2026 by rpki-client