$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa File: 2a68d3e0-9c3a-3216-aec4-379da22a5892.roa (raw, json) Hash identifier: VM1Jgni/tA982tug4zdOc6efoM6Zw/pmQHfEas+KWoI= Subject key identifier: 65:5F:F4:09:7C:CB:D8:91:BA:1A:1F:78:64:B4:86:3C:12:E2:5D:81 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF8998C539F6E873594C40 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:89:98:c5:39:f6:e8:73:59:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=4ab2651c-bdab-4ff1-b287-8686c8b173ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:b3:5f:ef:4a:2d:5b:7e:9a:82:ab:86:5d: a1:97:e9:59:5f:17:b6:be:83:ee:e8:c1:43:14:ab: 5d:0a:47:ca:b6:02:3a:43:d1:93:16:ab:54:e1:5c: 5d:5d:e1:4a:b0:49:cb:d9:3f:20:3d:08:7a:9f:05: 09:6d:9f:9a:43:ef:a7:3b:29:dd:b0:5d:86:20:2b: 4d:03:df:93:c4:57:b0:fc:b4:89:bb:7d:c9:99:c2: 4e:be:d4:0b:70:b7:7c:25:9c:52:2d:69:a8:7d:03: 48:9c:9c:87:d0:12:d6:31:d8:21:22:54:ca:56:a9: 9a:24:fc:10:4f:22:8c:64:e3:c4:40:cc:5b:a2:e2: 7a:66:bf:73:99:b2:8e:3c:75:0a:5e:f7:d7:7c:38: b0:e4:6f:a9:06:9f:d5:90:f6:af:05:ba:b9:8d:b1: 26:68:97:3a:2c:82:1f:6b:1c:28:db:44:cc:aa:5b: da:ba:58:3e:a9:cf:a2:6f:98:f1:6c:19:69:0f:74: 7a:0d:34:41:f5:a3:02:7a:a0:f8:85:68:ce:33:5a: 7c:e9:f1:df:6c:6c:0e:09:b2:10:8a:7f:16:52:e7: 04:d8:93:1a:70:0c:93:7c:59:8e:83:8c:07:22:48: 13:ba:27:b1:cd:3f:40:bf:d7:44:7c:36:91:e7:36: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:F4:09:7C:CB:D8:91:BA:1A:1F:78:64:B4:86:3C:12:E2:5D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7f:44:42:53:cf:d2:6b:1b:7f:fb:f5:38:69:8d:6d:79:bb: 74:1b:0d:8d:a3:ce:b4:be:ef:65:44:1c:4d:b8:39:b7:37:26: f1:09:a7:5c:e0:9d:05:a4:76:c7:8d:f1:69:c9:db:b4:cd:dc: ee:53:c9:de:a0:ef:ee:5f:dc:45:cd:af:2a:b1:d0:09:c3:31: f0:95:77:0c:49:2b:bb:de:6f:c2:96:7c:e9:3b:eb:42:28:01: 08:53:16:05:83:0d:c9:d3:d0:6a:44:69:3b:09:b3:96:33:15: 52:1c:50:dc:1b:4c:f3:e8:19:a9:51:ed:47:83:0b:9c:10:11: b2:d9:e7:d0:c9:91:e4:a1:87:21:17:61:9b:46:5c:b0:3b:09: 9e:3f:3b:2b:94:85:5d:5f:90:81:07:f5:bb:ca:73:7e:45:fe: f7:98:8e:5c:ba:c7:78:1c:0d:5f:26:fc:c0:e3:e6:65:b4:9c: b6:c8:95:fc:94:46:11:41:12:39:c6:83:d0:43:ea:c8:1e:87: 70:c6:6b:e4:30:66:f8:68:06:e0:46:5a:5f:5c:dd:6c:af:9e: 31:03:5c:1a:bb:78:ec:70:b6:6d:63:65:d6:cb:16:f0:24:b6: fb:f5:a0:46:ec:9d:56:3e:f3:dc:54:6f:ce:d2:e1:18:13:3b: f8:f3:0d:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4mYxTn26HNZTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NGFiMjY1MWMtYmRhYi00ZmYxLWIyODctODY4NmM4YjE3M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTCzX+9KLVt+moKrhl2hl+lZXxe2voPu6MFD FKtdCkfKtgI6Q9GTFqtU4VxdXeFKsEnL2T8gPQh6nwUJbZ+aQ++nOyndsF2GICtN A9+TxFew/LSJu33JmcJOvtQLcLd8JZxSLWmofQNInJyH0BLWMdghIlTKVqmaJPwQ TyKMZOPEQMxbouJ6Zr9zmbKOPHUKXvfXfDiw5G+pBp/VkPavBbq5jbEmaJc6LIIf axwo20TMqlvaulg+qc+ib5jxbBlpD3R6DTRB9aMCeqD4hWjOM1p86fHfbGwOCbIQ in8WUucE2JMacAyTfFmOg4wHIkgTuiexzT9Av9dEfDaR5zaIMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVf9Al8y9iRuhofeGS0hjwS4l2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmE2OGQzZTAtOWMzYS0z MjE2LWFlYzQtMzc5ZGEyMmE1ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF/REJTz9JrG3/79ThpjW15u3QbDY2jzrS+72VEHE24Obc3JvEJp1zg nQWkdseN8WnJ27TN3O5Tyd6g7+5f3EXNryqx0AnDMfCVdwxJK7veb8KWfOk760Io AQhTFgWDDcnT0GpEaTsJs5YzFVIcUNwbTPPoGalR7UeDC5wQEbLZ59DJkeShhyEX YZtGXLA7CZ4/OyuUhV1fkIEH9bvKc35F/veYjly6x3gcDV8m/MDj5mW0nLbIlfyU RhFBEjnGg9BD6sgeh3DGa+QwZvhoBuBGWl9c3WyvnjEDXBq7eOxwtm1jZdbLFvAk tvv1oEbsnVY+89xUb87S4RgTO/jzDUA= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:14 2026 by rpki-client