$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1f307f50-5eaa-30dc-9da2-b6709cdabe6d.roa File: 1f307f50-5eaa-30dc-9da2-b6709cdabe6d.roa (raw, json) Hash identifier: 3cl72B8OfBv1nyMuWZaQqoD05cEnWmq8UZG2cbcuKc4= Subject key identifier: 54:3A:0E:3A:61:DC:CF:F4:71:F1:82:14:44:C3:C8:A4:EF:CB:10:74 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D32D4CF96483522D471BF6100 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1f307f50-5eaa-30dc-9da2-b6709cdabe6d.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 23473 IP address blocks: 153.33.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:cf:96:48:35:22:d4:71:bf:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=f9cff7a1-c2f9-4430-bb0d-52d20661f271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:7c:b6:af:72:bf:56:6a:82:05:93:12:e2: 2d:08:3f:d6:06:73:09:46:9c:1a:ce:fc:ee:66:06: c8:88:b6:e8:0c:45:5a:a2:a2:68:d6:f0:fa:76:6b: f4:2f:f5:56:e3:8c:a9:ec:37:bf:a0:1a:80:df:6a: dd:60:97:ca:b1:74:f1:33:ab:48:25:b1:d0:0d:4d: 3e:19:d2:eb:53:51:8d:76:db:61:fc:71:69:b5:9f: 69:a9:cb:17:d8:ee:de:74:90:e9:83:d0:f4:44:2e: 10:01:b8:fc:b3:5f:1f:5c:dd:0b:c2:ce:15:4f:7c: 46:2f:39:52:d2:2a:9f:ef:e4:66:e2:ec:27:e8:fe: 2e:59:40:eb:6c:42:cc:3e:31:8d:64:88:7e:3d:0c: 60:56:cd:db:0f:7d:50:b0:1a:60:ae:2e:cb:08:67: 94:42:f5:25:44:9e:3a:17:60:81:ec:93:b4:76:af: b8:90:5d:d2:42:86:6f:40:24:1d:d9:29:52:1e:96: 8c:e5:a7:c3:9e:0c:5c:12:5e:7a:a0:02:16:c7:e5: a2:db:5c:ca:cf:55:f7:af:c6:0d:4b:45:58:53:32: ea:a2:dc:83:3e:dd:eb:68:de:9b:b8:3e:f9:07:ba: 51:a8:ad:34:bf:12:41:ae:00:d8:79:e6:01:46:e0: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3A:0E:3A:61:DC:CF:F4:71:F1:82:14:44:C3:C8:A4:EF:CB:10:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1f307f50-5eaa-30dc-9da2-b6709cdabe6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d1:15:ee:23:3c:6b:9d:6b:d8:22:4a:ba:a8:60:f1:db:53: 14:61:68:33:f8:b5:22:98:8c:38:55:98:bc:48:9a:5c:99:b3: aa:43:b3:36:58:cb:ad:28:c3:9e:91:37:18:e5:4e:44:58:1c: 95:6b:9e:bd:50:ea:4b:28:1f:4a:ca:e7:f0:5a:d3:4f:d3:1b: 1f:a4:46:47:ae:ee:7a:89:65:f7:2c:ef:3d:cd:fc:76:0e:47: c4:93:b4:21:4d:96:6c:c6:ab:10:03:fb:84:61:2c:77:23:6a: 97:8c:1c:07:b7:a3:dc:1c:8a:13:0c:36:fb:50:14:73:32:71: c2:e9:60:d4:71:10:89:6a:59:1a:0c:2b:64:e0:a3:05:f1:6c: a5:3c:db:fb:01:e1:78:53:70:6a:c9:a4:4c:3c:cd:b2:72:9b: 81:e6:73:3d:03:07:d9:1d:62:42:d8:cb:8e:4d:85:45:44:35: 6e:c2:43:59:16:7b:d9:77:56:69:dc:21:ba:5c:b1:16:57:32: d4:e6:2c:34:fd:70:f5:8d:ea:92:37:6e:df:a1:53:9a:e3:89: 28:6c:56:e1:1d:f7:8e:51:38:46:22:85:8f:99:bc:1e:83:04: aa:46:bf:9a:8f:78:c5:2b:a5:3a:d8:58:8d:a5:5a:07:1e:af: 7c:5d:db:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1M+WSDUi1HG/YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZjljZmY3YTEtYzJmOS00NDMwLWJiMGQtNTJkMjA2NjFmMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQF8tq9yv1ZqggWTEuItCD/WBnMJRpwazvzu ZgbIiLboDEVaoqJo1vD6dmv0L/VW44yp7De/oBqA32rdYJfKsXTxM6tIJbHQDU0+ GdLrU1GNdtth/HFptZ9pqcsX2O7edJDpg9D0RC4QAbj8s18fXN0Lws4VT3xGLzlS 0iqf7+Rm4uwn6P4uWUDrbELMPjGNZIh+PQxgVs3bD31QsBpgri7LCGeUQvUlRJ46 F2CB7JO0dq+4kF3SQoZvQCQd2SlSHpaM5afDngxcEl56oAIWx+Wi21zKz1X3r8YN S0VYUzLqotyDPt3raN6buD75B7pRqK00vxJBrgDYeeYBRuCp9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ6Djph3M/0cfGCFETDyKTvyxB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMWYzMDdmNTAtNWVhYS0z MGRjLTlkYTItYjY3MDljZGFiZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfRFe4jPGuda9giSrqoYPHbUxRhaDP4tSKYjDhVmLxImlyZs6pDszZY y60ow56RNxjlTkRYHJVrnr1Q6ksoH0rK5/Ba00/TGx+kRkeu7nqJZfcs7z3N/HYO R8STtCFNlmzGqxAD+4RhLHcjapeMHAe3o9wcihMMNvtQFHMyccLpYNRxEIlqWRoM K2TgowXxbKU82/sB4XhTcGrJpEw8zbJym4Hmcz0DB9kdYkLYy45NhUVENW7CQ1kW e9l3VmncIbpcsRZXMtTmLDT9cPWN6pI3bt+hU5rjiShsVuEd945ROEYihY+ZvB6D BKpGv5qPeMUrpTrYWI2lWgcer3xd27w= -----END CERTIFICATE-----Generated at Sat Mar 21 20:53:12 2026 by rpki-client