$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2314380e-2d2b-3d34-ae55-abb37bfe2e8c.roa File: 2314380e-2d2b-3d34-ae55-abb37bfe2e8c.roa (raw, json) Hash identifier: e3DTgpvQyZbbbva8dbuG+1Ib8vvnAPTjDL9VwBVeKm8= Subject key identifier: A1:78:52:ED:FD:67:14:B8:D7:7E:74:39:61:F9:F5:08:87:EC:06:3D Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D2644C000BAF7F412E85C3240 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2314380e-2d2b-3d34-ae55-abb37bfe2e8c.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c0:00:ba:f7:f4:12:e8:5c:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=ad1e46b2-96c9-4a16-a5c1-1b8a2121b9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:73:b4:c2:34:22:c0:68:81:e9:c4:32:65: 04:8b:f1:c8:43:bc:f6:17:db:34:89:05:5f:28:08: 5f:69:ac:e8:d0:38:0a:0f:01:7d:bb:f2:ae:5f:80: 12:aa:e8:eb:25:b7:0f:43:fb:e9:b2:2b:b7:92:09: 97:a2:80:05:b2:16:7d:c8:44:26:25:e4:7f:44:2c: 8c:6e:7d:1b:b8:05:61:a3:7d:69:3d:2e:3d:95:45: bc:ee:1f:07:1e:5a:56:33:21:d3:92:d1:97:64:0e: 74:10:19:86:86:7a:5d:bd:0c:b6:4e:ef:64:62:03: 65:a7:3e:84:c3:9b:31:fa:35:13:4b:f4:3d:f6:8a: 25:68:2a:ad:f1:80:99:65:b3:0a:fd:d3:ae:8d:9f: b7:38:d1:eb:30:8c:15:9c:8b:34:a3:21:64:ca:a5: d0:b3:9f:0e:a8:6d:06:3d:bd:5a:56:73:c7:64:c0: ef:94:1a:03:e8:18:4f:95:4f:1c:30:7c:f0:2b:2c: f1:73:83:b0:5e:40:52:45:f0:ce:ed:44:00:e1:2f: 27:c1:da:05:7a:f2:11:bd:02:58:e7:12:d6:99:10: 0d:10:0e:f7:34:b2:ce:c5:85:08:16:b3:e8:f1:c2: 73:2f:b0:38:8e:60:b5:a4:7c:97:f6:74:e1:e8:b1: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:78:52:ED:FD:67:14:B8:D7:7E:74:39:61:F9:F5:08:87:EC:06:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2314380e-2d2b-3d34-ae55-abb37bfe2e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f6:2c:a7:44:7b:3e:43:d3:de:bd:2f:f7:49:fe:07:df:83: e1:d9:95:3f:11:b3:e7:1d:db:94:61:77:00:39:86:e4:bb:b2: ad:41:5f:fe:7d:89:f2:c4:51:d4:31:1d:88:76:95:77:fb:12: 79:10:0c:b8:c5:01:7b:23:27:8d:b5:c0:02:89:ec:4d:51:ac: f3:e9:91:33:c8:d9:4a:68:aa:e7:a4:4a:42:2c:b9:12:0f:61: c0:c9:5b:43:50:29:70:77:28:ad:e8:46:fa:1e:6c:ab:03:66: 3d:6d:ac:4a:4b:91:b6:c1:60:a4:88:61:7d:7b:96:84:23:74: 86:a0:53:e1:b1:6c:ab:df:d0:98:0c:34:f7:d7:9b:cc:78:ad: 2f:37:c5:e9:14:50:1b:32:66:dd:c3:05:4b:09:ca:92:3f:31: 1f:6a:cb:c7:ec:a0:96:07:84:f4:7f:27:64:71:27:23:36:9f: 16:d1:c4:f4:e7:12:b7:f0:b1:cc:fa:74:68:27:9b:1e:5e:89: 8a:8d:f0:1a:2b:75:7e:a1:91:21:43:ea:f4:c7:c0:ae:a6:42: d3:67:fb:28:f2:3f:53:f2:b0:96:1a:65:3a:5a:20:a5:f0:19: 61:df:38:92:ff:60:49:a4:49:52:1c:7a:ab:ff:49:23:1b:dd: 4e:e8:34:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMAAuvf0EuhcMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YWQxZTQ2YjItOTZjOS00YTE2LWE1YzEtMWI4YTIxMjFiOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnblztMI0IsBogenEMmUEi/HIQ7z2F9s0iQVf KAhfaazo0DgKDwF9u/KuX4ASqujrJbcPQ/vpsiu3kgmXooAFshZ9yEQmJeR/RCyM bn0buAVho31pPS49lUW87h8HHlpWMyHTktGXZA50EBmGhnpdvQy2Tu9kYgNlpz6E w5sx+jUTS/Q99oolaCqt8YCZZbMK/dOujZ+3ONHrMIwVnIs0oyFkyqXQs58OqG0G Pb1aVnPHZMDvlBoD6BhPlU8cMHzwKyzxc4OwXkBSRfDO7UQA4S8nwdoFevIRvQJY 5xLWmRANEA73NLLOxYUIFrPo8cJzL7A4jmC1pHyX9nTh6LFCjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF4Uu39ZxS41350OWH59QiH7AY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjMxNDM4MGUtMmQyYi0z ZDM0LWFlNTUtYWJiMzdiZmUyZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv2LKdEez5D0969L/dJ/gffg+HZlT8Rs+cd25RhdwA5huS7sq1BX/59 ifLEUdQxHYh2lXf7EnkQDLjFAXsjJ421wAKJ7E1RrPPpkTPI2UpoquekSkIsuRIP YcDJW0NQKXB3KK3oRvoebKsDZj1trEpLkbbBYKSIYX17loQjdIagU+GxbKvf0JgM NPfXm8x4rS83xekUUBsyZt3DBUsJypI/MR9qy8fsoJYHhPR/J2RxJyM2nxbRxPTn Erfwscz6dGgnmx5eiYqN8BordX6hkSFD6vTHwK6mQtNn+yjyP1PysJYaZTpaIKXw GWHfOJL/YEmkSVIceqv/SSMb3U7oNGY= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:34 2026 by rpki-client