$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1a0836c0-3d58-33be-bb65-781e00a25aa5.roa File: 1a0836c0-3d58-33be-bb65-781e00a25aa5.roa (raw, json) Hash identifier: 0FVWhWBnwVaiw33qpPyI9fvpfjb3S9YLMcqRgsLSDx0= Subject key identifier: 0F:B3:E8:D4:78:44:56:2F:8F:15:C8:F4:E2:1B:37:71:51:A7:5F:9F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D3704BFE4D7DC1F59172E7C00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1a0836c0-3d58-33be-bb65-781e00a25aa5.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:bf:e4:d7:dc:1f:59:17:2e:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=3e1a3987-60dc-4806-a888-5dfe75e182f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:35:c5:a6:61:aa:35:86:01:0c:e0:40:5b: f4:7b:40:0b:c4:87:e2:92:9c:81:dd:11:5c:b4:bb: 76:65:40:b2:9a:31:b0:3b:32:41:14:56:1a:0f:03: 08:b3:64:6b:8c:7a:4c:64:ac:17:70:7b:94:95:79: d0:8c:8c:2d:56:be:dc:c9:a8:ca:83:19:01:63:17: 57:17:97:6d:3d:2c:c4:b3:5a:3f:02:9f:f5:e1:93: 7c:43:e3:44:2a:79:69:ee:8e:a4:cd:e1:aa:63:76: d5:a9:46:bd:e1:dc:92:8b:54:48:82:61:e4:83:23: 13:33:66:d8:4c:d0:98:00:31:2a:45:35:c5:c0:01: 0c:eb:38:14:15:82:d1:18:92:6c:7a:b4:07:10:b2: 2f:46:98:aa:dd:aa:55:26:ff:1f:b0:3e:f5:5e:67: 14:2f:29:22:b8:45:d6:f1:71:ad:99:93:60:98:2a: 4c:45:71:e9:4c:45:ca:4d:67:56:5b:f3:33:84:82: d8:ae:2e:b8:e6:09:52:7b:1a:5d:72:ac:6c:c7:2a: 0a:88:25:4d:4e:9a:43:9f:eb:68:2d:c5:13:6c:9e: a6:11:20:26:70:27:dc:bb:2c:d6:e0:3d:a2:60:0b: 3a:a2:7a:20:a4:26:97:f4:4a:6a:9d:d5:ca:5b:0e: d8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B3:E8:D4:78:44:56:2F:8F:15:C8:F4:E2:1B:37:71:51:A7:5F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1a0836c0-3d58-33be-bb65-781e00a25aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ab:ff:e3:b8:2e:1b:bd:91:5f:4b:2c:fe:40:02:6d:08:0e: b6:d3:ab:e3:c3:51:2b:e9:be:fb:2b:f5:25:bd:07:e2:a3:1c: 9b:8c:ec:40:9b:59:a4:ea:b3:3f:c9:3c:cf:6f:23:a5:6e:08: 3e:22:c6:11:5b:c1:30:d2:f8:68:99:3f:a6:32:b3:c2:fd:1e: 20:3a:52:0f:f6:65:14:af:e6:9f:12:04:2d:02:fe:f4:04:22: 45:c6:94:a4:8f:db:64:7e:41:30:d2:26:5c:4e:90:65:c9:e9: ed:b2:cd:a3:74:3f:aa:f3:f2:9e:7a:96:06:b4:c8:51:87:a8: 5a:3b:7d:78:e8:72:ee:e5:ca:4b:5e:2b:39:28:85:5c:c6:84: 3b:a8:23:5b:a6:3b:39:17:4e:0d:45:e0:74:76:cb:dd:ce:aa: 6a:2c:68:eb:9b:f6:9b:5f:b2:71:d9:28:36:e4:e2:6c:82:19: 29:ce:dc:7d:e3:77:ed:a1:8e:ff:6a:43:93:57:7c:86:73:08: 89:e0:85:71:52:46:44:b0:22:51:91:d3:6b:e8:f1:73:c9:7c: 49:f0:d5:90:33:22:f1:0d:61:c8:91:d4:d4:cd:a4:b7:24:5c: 55:5c:b3:f7:ca:60:31:31:c4:c1:19:54:7d:ab:5f:6b:d0:2d: 5e:f7:b9:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BL/k19wfWRcufAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk M2UxYTM5ODctNjBkYy00ODA2LWE4ODgtNWRmZTc1ZTE4MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE81xaZhqjWGAQzgQFv0e0ALxIfikpyB3RFc tLt2ZUCymjGwOzJBFFYaDwMIs2RrjHpMZKwXcHuUlXnQjIwtVr7cyajKgxkBYxdX F5dtPSzEs1o/Ap/14ZN8Q+NEKnlp7o6kzeGqY3bVqUa94dySi1RIgmHkgyMTM2bY TNCYADEqRTXFwAEM6zgUFYLRGJJserQHELIvRpiq3apVJv8fsD71XmcULykiuEXW 8XGtmZNgmCpMRXHpTEXKTWdWW/MzhILYri645glSexpdcqxsxyoKiCVNTppDn+to LcUTbJ6mESAmcCfcuyzW4D2iYAs6onogpCaX9EpqndXKWw7YcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+z6NR4RFYvjxXI9OIbN3FRp1+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMWEwODM2YzAtM2Q1OC0z M2JlLWJiNjUtNzgxZTAwYTI1YWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+r/+O4Lhu9kV9LLP5AAm0IDrbTq+PDUSvpvvsr9SW9B+KjHJuM7ECb WaTqsz/JPM9vI6VuCD4ixhFbwTDS+GiZP6Yys8L9HiA6Ug/2ZRSv5p8SBC0C/vQE IkXGlKSP22R+QTDSJlxOkGXJ6e2yzaN0P6rz8p56lga0yFGHqFo7fXjocu7lykte KzkohVzGhDuoI1umOzkXTg1F4HR2y93OqmosaOub9ptfsnHZKDbk4myCGSnO3H3j d+2hjv9qQ5NXfIZzCInghXFSRkSwIlGR02vo8XPJfEnw1ZAzIvENYciR1NTNpLck XFVcs/fKYDExxMEZVH2rX2vQLV73uRQ= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:28 2026 by rpki-client