$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2c33ca07-446e-3049-b708-3da4ef6b63f0.roa File: 2c33ca07-446e-3049-b708-3da4ef6b63f0.roa (raw, json) Hash identifier: Zztp/hrI01odgwtnDiNJU4Ef6GOKYMTdI3Bopq+A2/8= Subject key identifier: E6:4D:BA:4A:C5:AD:2A:80:39:B1:AD:9C:01:98:36:DF:B6:A2:6D:73 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D300A3863720299D3B082CD80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2c33ca07-446e-3049-b708-3da4ef6b63f0.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 23473 IP address blocks: 153.33.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:38:63:72:02:99:d3:b0:82:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7df1e7fc-3e0d-459b-b2e9-34a8ea03bd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0c:de:6f:f0:e9:90:dd:8b:3c:1e:1f:e7:f6: 92:40:ed:32:3a:d3:53:55:aa:5d:b4:9a:ea:dd:cd: e0:50:ef:16:18:0b:62:d5:31:ee:e3:be:7b:67:1a: 5e:b4:c1:dc:55:31:af:8a:0b:b6:47:dc:51:da:b2: d6:3f:3d:60:1a:2a:c6:f5:e6:8c:8c:08:ba:a5:aa: f5:26:7a:c8:7b:98:7a:c8:74:89:58:26:0c:36:4c: 17:23:3c:c8:21:84:cd:01:35:0b:a2:e7:93:e6:04: e4:b8:55:0b:85:54:b8:27:2f:14:24:77:dc:66:e9: d2:3e:c4:e7:38:d6:bb:5e:cb:b3:4a:d4:bd:37:b6: 7e:31:e8:23:66:61:cc:43:cf:05:b0:a6:34:c5:ae: 13:0a:02:99:c5:b0:03:48:79:69:88:88:7e:e7:22: 8d:a3:02:3e:b4:d2:73:b4:2e:bf:31:60:12:9f:6b: 33:6d:44:5c:47:70:ee:ec:7d:b3:a0:44:97:c7:61: 03:26:58:58:9a:e4:9e:33:f1:e2:c2:fc:2c:cc:9b: 36:2b:63:7c:fd:e6:c4:66:cd:02:8e:1f:82:cc:8b: 15:0f:eb:73:e0:e9:3c:cf:2c:e3:e7:45:c9:df:5d: a5:dc:60:83:fd:78:37:82:91:ac:3e:3e:a6:df:93: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4D:BA:4A:C5:AD:2A:80:39:B1:AD:9C:01:98:36:DF:B6:A2:6D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2c33ca07-446e-3049-b708-3da4ef6b63f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ac:fa:f0:d4:16:2a:a9:66:f9:ac:69:bd:07:f6:99:24:21: b3:ed:d0:39:46:03:c2:65:40:b9:ea:c1:28:3d:ac:36:aa:ff: ba:ea:8b:8e:f6:cc:7d:bc:f9:6f:ac:74:4f:4e:34:1b:e6:c1: 74:48:cd:43:ff:08:74:75:23:8f:3c:44:c2:53:2d:0f:8c:99: ae:76:8a:2b:de:36:33:be:8c:c2:07:aa:3f:e7:c7:f2:17:5b: 6a:d3:9d:7b:eb:0a:54:bc:4a:44:de:7d:6d:3a:10:d1:b2:54: a2:29:2b:eb:dd:ac:7c:15:29:4f:55:06:0f:0e:cb:1a:fb:cf: a7:09:4d:17:5f:14:53:3b:2d:48:b0:dc:a5:1d:94:5e:c3:f6: 9d:96:0a:9a:f4:40:a5:cd:7c:4b:3e:33:1f:bc:90:30:ac:06: f3:02:29:64:5c:c8:0d:0d:65:f5:fd:ff:41:4b:f4:a8:30:6a: 59:fe:74:0c:a9:35:93:e6:ae:9e:74:3c:7a:e9:ab:43:c6:a1: 5c:5f:8f:56:24:8d:34:d1:62:c6:c3:a7:84:83:58:9a:e6:c3: 15:60:fa:4e:61:c7:23:b5:8c:7c:c8:6f:8e:65:9d:ec:06:7b: a1:b7:d4:f6:94:96:b3:8c:7d:0a:64:5c:7a:d6:24:e4:81:be: ef:c0:2e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjhjcgKZ07CCzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk N2RmMWU3ZmMtM2UwZC00NTliLWIyZTktMzRhOGVhMDNiZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwzeb/DpkN2LPB4f5/aSQO0yOtNTVapdtJrq 3c3gUO8WGAti1THu4757ZxpetMHcVTGvigu2R9xR2rLWPz1gGirG9eaMjAi6par1 JnrIe5h6yHSJWCYMNkwXIzzIIYTNATULoueT5gTkuFULhVS4Jy8UJHfcZunSPsTn ONa7XsuzStS9N7Z+MegjZmHMQ88FsKY0xa4TCgKZxbADSHlpiIh+5yKNowI+tNJz tC6/MWASn2szbURcR3Du7H2zoESXx2EDJlhYmuSeM/HiwvwszJs2K2N8/ebEZs0C jh+CzIsVD+tz4Ok8zyzj50XJ312l3GCD/Xg3gpGsPj6m35PwAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZNukrFrSqAObGtnAGYNt+2om1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmMzM2NhMDctNDQ2ZS0z MDQ5LWI3MDgtM2RhNGVmNmI2M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6s+vDUFiqpZvmsab0H9pkkIbPt0DlGA8JlQLnqwSg9rDaq/7rqi472 zH28+W+sdE9ONBvmwXRIzUP/CHR1I488RMJTLQ+Mma52iiveNjO+jMIHqj/nx/IX W2rTnXvrClS8SkTefW06ENGyVKIpK+vdrHwVKU9VBg8Oyxr7z6cJTRdfFFM7LUiw 3KUdlF7D9p2WCpr0QKXNfEs+Mx+8kDCsBvMCKWRcyA0NZfX9/0FL9Kgwaln+dAyp NZPmrp50PHrpq0PGoVxfj1YkjTTRYsbDp4SDWJrmwxVg+k5hxyO1jHzIb45lnewG e6G31PaUlrOMfQpkXHrWJOSBvu/ALsk= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:21 2026 by rpki-client