$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa File: 2a68d3e0-9c3a-3216-aec4-379da22a5892.roa (raw, json) Hash identifier: tB02PJ5f6vZj/pmko6B9lcPtFmUkBL6icrIuWp6Ed5c= Subject key identifier: 11:A2:C6:A4:09:E0:38:3A:B7:17:FD:FD:5C:C3:82:EB:73:8E:D7:EA Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F5E62E8534002894EF45896C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 23473 IP address blocks: 153.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e8:53:40:02:89:4e:f4:58:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=0ee648a7-3101-4cca-b6fe-fb86d541a6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:89:4b:49:9f:05:48:e6:87:72:fb:fe:9c: e3:7f:51:7a:c1:59:b1:8c:18:a4:ba:db:ad:48:64: 00:4d:de:61:93:96:37:53:6e:56:9a:cb:6a:9c:14: 9a:3b:87:b3:af:f5:72:6e:1c:d9:8f:b5:f5:06:76: c3:6d:ae:fa:17:5e:94:53:1e:ff:6d:05:82:94:d6: ec:0a:c6:2c:0f:6c:d7:c7:cc:8d:b7:69:92:ca:cd: 6a:b7:36:e1:89:2d:5e:b0:7c:f1:e9:d5:1c:14:23: 5e:7b:16:d8:33:6f:ab:ae:75:91:c2:c8:09:49:8b: e9:94:8b:cb:ba:22:09:88:19:34:ac:f9:3e:98:e4: 85:80:8d:11:45:a4:af:44:67:47:1a:82:fc:a2:2e: e0:b1:73:8d:ef:91:41:64:15:d9:c1:40:17:2e:17: e6:93:73:d4:b9:fa:ef:65:c5:ba:94:93:e9:00:86: 21:ca:06:7b:b8:6b:6b:ae:c4:b0:72:39:76:4a:40: be:4a:ac:dc:2d:1a:28:74:63:66:7c:c9:df:75:d7: d3:2a:07:27:56:93:4a:c2:99:85:b0:c3:e8:09:ae: f8:1b:eb:fa:96:d4:4f:87:2a:46:17:c5:17:4d:1b: 1f:76:ce:b7:fe:3c:81:ba:b1:08:7a:82:4a:a3:fd: 04:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A2:C6:A4:09:E0:38:3A:B7:17:FD:FD:5C:C3:82:EB:73:8E:D7:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b3:3d:9d:d2:83:4d:b2:ab:cb:db:af:ad:b6:11:ce:52:fe: 00:35:bd:48:51:62:c2:c3:df:48:71:4e:65:ff:f0:c8:17:52: 55:7b:35:8b:52:07:e3:33:4c:02:1e:9a:7b:17:fe:e2:69:db: ed:5f:13:12:e9:66:fc:41:e1:9d:32:dd:15:ce:fc:af:bb:3f: 0b:6d:bc:4f:7c:12:58:70:e8:7f:f0:8e:72:1e:36:49:cb:e1: c3:d9:8c:a8:b1:a5:c6:42:45:55:43:16:2c:38:df:03:97:2c: aa:ee:60:a0:32:3f:e0:a4:e3:4b:66:53:f1:3b:4e:ae:1c:08: 63:cf:a7:00:9a:92:ed:cd:3f:5a:0a:b4:0e:f4:d8:71:e2:16: 65:97:06:60:92:85:c3:51:1b:2d:b5:a1:cf:cf:3e:5d:5e:b2: bd:89:29:b5:6e:81:ed:d7:b4:8b:aa:f3:f3:5e:8e:3e:4b:33: f9:4f:dd:d2:32:7c:a9:77:2d:a1:c9:e5:ce:59:da:fb:97:41: cc:21:34:e3:47:d8:ec:37:1d:ae:55:1f:12:80:b5:33:e4:b4: 08:a3:56:9d:54:c4:4a:28:ac:88:ff:51:17:79:bc:fe:b0:fe: 87:7a:36:27:5c:be:0c:ac:a9:7b:ff:25:7b:9f:6c:fb:1c:85: e6:58:72:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuhTQAKJTvRYlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MGVlNjQ4YTctMzEwMS00Y2NhLWI2ZmUtZmI4NmQ1NDFhNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrCJS0mfBUjmh3L7/pzjf1F6wVmxjBikutut SGQATd5hk5Y3U25WmstqnBSaO4ezr/VybhzZj7X1BnbDba76F16UUx7/bQWClNbs CsYsD2zXx8yNt2mSys1qtzbhiS1esHzx6dUcFCNeexbYM2+rrnWRwsgJSYvplIvL uiIJiBk0rPk+mOSFgI0RRaSvRGdHGoL8oi7gsXON75FBZBXZwUAXLhfmk3PUufrv ZcW6lJPpAIYhygZ7uGtrrsSwcjl2SkC+SqzcLRoodGNmfMnfddfTKgcnVpNKwpmF sMPoCa74G+v6ltRPhypGF8UXTRsfds63/jyBurEIeoJKo/0E1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGixqQJ4Dg6txf9/VzDgutzjtfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmE2OGQzZTAtOWMzYS0z MjE2LWFlYzQtMzc5ZGEyMmE1ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKzPZ3Sg02yq8vbr622Ec5S/gA1vUhRYsLD30hxTmX/8MgXUlV7NYtS B+MzTAIemnsX/uJp2+1fExLpZvxB4Z0y3RXO/K+7PwttvE98Elhw6H/wjnIeNknL 4cPZjKixpcZCRVVDFiw43wOXLKruYKAyP+Ck40tmU/E7Tq4cCGPPpwCaku3NP1oK tA702HHiFmWXBmCShcNRGy21oc/PPl1esr2JKbVuge3XtIuq8/Nejj5LM/lP3dIy fKl3LaHJ5c5Z2vuXQcwhNONH2Ow3Ha5VHxKAtTPktAijVp1UxEoorIj/URd5vP6w /od6NidcvgysqXv/JXufbPscheZYcg0= -----END CERTIFICATE-----Generated at Sun Oct 4 21:31:40 2026 by rpki-client