$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/109f624a-6043-313b-9e02-cb22bf0b9771.roa File: 109f624a-6043-313b-9e02-cb22bf0b9771.roa (raw, json) Hash identifier: f82Q593kzOnOklOlqZmnftK+rUSX8Dar1xhJmlu+udw= Subject key identifier: 67:EE:01:C2:EE:7F:BE:DB:2D:1C:0C:C8:F4:E1:A8:10:EB:EA:2C:60 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF9F638D8650F3B92D3980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/109f624a-6043-313b-9e02-cb22bf0b9771.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9f:63:8d:86:50:f3:b9:2d:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=68cfcec8-4240-4a2d-ad2a-3bcc07eac447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:72:ab:d4:d9:39:e9:90:66:5e:63:69:3b: d4:19:97:fe:8b:80:87:3a:47:d8:df:3b:98:3f:c5: ac:1b:2d:36:64:73:da:3f:1a:4b:9b:0a:17:31:df: 46:f1:dd:77:75:54:8e:3d:f4:19:47:25:2b:ed:19: 3b:3f:79:29:64:4a:bf:a7:51:bf:02:7b:de:ae:03: bd:f9:f2:09:95:5a:7c:d7:da:e4:20:16:14:31:cc: a5:e7:28:f9:a5:c1:6a:cb:70:6a:fb:ef:b9:a2:3a: 0e:f6:57:db:de:65:dd:0e:5d:09:b5:c7:82:b8:b8: 2b:c1:04:3e:d1:84:1c:f5:d0:2b:50:29:ee:70:9f: 33:d3:69:d1:80:8b:87:30:f9:60:20:f1:a9:e2:e2: 78:ba:b6:96:a5:6a:7d:08:b3:94:59:35:3c:6f:45: 4b:fd:05:c8:7d:c3:9f:34:54:a8:03:d9:cc:25:a4: 69:08:29:45:47:b4:52:7a:0d:40:37:3a:36:ad:56: cc:38:11:91:23:33:a8:ff:ba:8c:32:05:a3:86:9b: 13:0b:00:04:b8:d5:de:f8:7d:98:3c:06:ea:5b:49: a1:38:40:2f:6f:60:8d:e9:5d:5d:1c:11:a4:48:f4: bd:ea:48:fb:be:e3:96:30:f9:f8:de:fa:76:a1:36: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EE:01:C2:EE:7F:BE:DB:2D:1C:0C:C8:F4:E1:A8:10:EB:EA:2C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/109f624a-6043-313b-9e02-cb22bf0b9771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:aa:2d:3d:a7:6c:05:95:d2:e3:be:bb:03:e2:cc:f6:67:3c: 86:7a:3d:f8:7e:ea:e5:29:4b:5c:9f:49:20:3d:70:34:0f:cd: b2:ba:2a:ba:73:8f:32:c2:49:79:3d:2c:74:54:0a:8f:4f:bb: 70:21:ef:7d:d8:98:6e:93:75:0c:26:d8:64:af:85:bf:3b:65: af:dd:fc:ba:42:79:79:5c:15:bb:25:f9:3f:b8:aa:60:60:17: ec:b0:02:c0:13:98:f8:bb:34:78:c0:b2:13:a7:dd:84:ed:aa: e9:b2:dc:73:34:eb:f8:db:6a:08:44:5e:ae:c5:4d:9c:67:98: 45:07:13:db:bd:ed:fb:09:e3:cf:45:e3:18:d9:17:2b:de:d8: ec:7e:04:2e:96:92:a4:56:52:fd:aa:66:e3:2d:09:8d:c2:d9: 5d:34:20:ff:b9:21:93:c9:02:0b:37:c3:53:35:e5:8f:f7:fe: 83:e6:29:e4:40:f4:b8:f8:07:9c:9f:1a:81:63:34:c1:9f:11: dc:bf:23:ba:44:ef:98:f6:f5:2d:b3:3c:ab:17:14:e3:f3:c2: 8d:b1:f0:4a:f8:87:5b:03:63:c0:2d:88:d0:e4:c7:3a:66:c7: ab:70:c1:f6:a1:7b:13:01:9c:00:6b:42:56:05:e5:5d:62:82: 4e:f2:08:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z59jjYZQ87ktOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NjhjZmNlYzgtNDI0MC00YTJkLWFkMmEtM2JjYzA3ZWFjNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg5yq9TZOemQZl5jaTvUGZf+i4CHOkfY3zuY P8WsGy02ZHPaPxpLmwoXMd9G8d13dVSOPfQZRyUr7Rk7P3kpZEq/p1G/AnvergO9 +fIJlVp819rkIBYUMcyl5yj5pcFqy3Bq+++5ojoO9lfb3mXdDl0JtceCuLgrwQQ+ 0YQc9dArUCnucJ8z02nRgIuHMPlgIPGp4uJ4uraWpWp9CLOUWTU8b0VL/QXIfcOf NFSoA9nMJaRpCClFR7RSeg1ANzo2rVbMOBGRIzOo/7qMMgWjhpsTCwAEuNXe+H2Y PAbqW0mhOEAvb2CN6V1dHBGkSPS96kj7vuOWMPn43vp2oTYDuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfuAcLuf77bLRwMyPThqBDr6ixgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTA5ZjYyNGEtNjA0My0z MTNiLTllMDItY2IyMmJmMGI5NzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqqLT2nbAWV0uO+uwPizPZnPIZ6Pfh+6uUpS1yfSSA9cDQPzbK6Krpz jzLCSXk9LHRUCo9Pu3Ah733YmG6TdQwm2GSvhb87Za/d/LpCeXlcFbsl+T+4qmBg F+ywAsATmPi7NHjAshOn3YTtqumy3HM06/jbaghEXq7FTZxnmEUHE9u97fsJ489F 4xjZFyve2Ox+BC6WkqRWUv2qZuMtCY3C2V00IP+5IZPJAgs3w1M15Y/3/oPmKeRA 9Lj4B5yfGoFjNMGfEdy/I7pE75j29S2zPKsXFOPzwo2x8Er4h1sDY8AtiNDkxzpm x6twwfahexMBnABrQlYF5V1igk7yCDk= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:56 2026 by rpki-client