$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2fa8fec8-6de6-3faa-942f-4e766a046b0c.roa File: 2fa8fec8-6de6-3faa-942f-4e766a046b0c.roa (raw, json) Hash identifier: t5OQ5f8VihNDcZpbL5MT/S11YpZaMVXJvXxtuiCktAI= Subject key identifier: C0:85:8C:44:0B:9D:55:AD:AB:97:AE:FB:14:4A:CE:08:95:FD:ED:9C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D2644A7B4B01F743F147CA800 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2fa8fec8-6de6-3faa-942f-4e766a046b0c.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:a7:b4:b0:1f:74:3f:14:7c:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=698f5899-3484-42aa-bf6d-c8ee00ac1d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b3:2a:e6:b2:a6:92:34:14:b5:1e:d1:86:65: 8f:59:ce:8a:a3:ad:6a:57:33:19:cb:72:d1:67:18: b7:65:43:f4:27:04:5a:28:cc:c7:0f:dd:0e:2f:f4: 1a:a9:3e:d1:ce:47:4e:9a:26:11:82:7b:5b:3d:2e: 7d:68:02:c1:19:fa:14:14:ef:0d:11:de:f6:dd:d6: 22:a3:6f:e1:38:15:2c:2b:b4:4c:f2:0d:56:af:72: d1:d2:6c:40:77:5c:df:e7:18:f7:7c:ac:c6:08:74: 93:30:2a:f6:5c:9c:db:da:80:f0:18:72:77:3f:ce: c3:19:36:fd:21:30:9b:d5:3e:3c:12:f7:b7:8b:46: bb:67:00:ff:2d:dc:33:e7:89:1b:3d:2d:2f:e6:ca: ca:78:c7:f9:ad:1f:95:aa:7e:c5:d8:1b:8a:62:f9: 4e:b6:5d:ba:be:1f:06:05:46:8d:bd:6f:fb:63:c6: cb:0a:dc:07:91:dd:31:cd:55:ef:ce:96:19:3d:7e: c4:e8:ec:29:35:f0:62:7e:32:fa:bd:56:e2:11:27: 85:e3:64:c5:fa:cf:be:90:1d:96:40:81:13:c4:59: 22:cc:b3:0f:e2:6b:e6:a4:9e:4f:8d:62:70:62:bf: c8:0e:74:4c:44:53:64:73:5a:4e:4f:96:d6:e3:b8: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:85:8C:44:0B:9D:55:AD:AB:97:AE:FB:14:4A:CE:08:95:FD:ED:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2fa8fec8-6de6-3faa-942f-4e766a046b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fc:b3:21:17:84:2c:c5:37:ed:51:ef:f3:3c:34:56:d1:88: 6b:64:30:87:36:49:25:2f:61:2c:b1:88:d4:82:38:14:c7:61: 25:f5:af:90:7c:f5:17:ef:c7:8a:a3:ca:2a:ec:3e:1f:da:18: 48:e5:ba:eb:12:b7:38:37:9d:51:ee:ab:57:7d:6e:d3:e3:95: 79:a2:78:32:5e:2f:22:6e:4a:4f:72:8e:3b:3c:1c:df:4a:7d: 3b:b9:41:be:c0:06:7a:32:b3:72:98:bd:be:5d:06:15:ac:fb: 8c:3f:4c:25:ec:78:0d:ae:ca:22:c2:46:5e:54:e7:24:80:54: 5f:b6:5b:cf:39:0c:f8:02:a7:9c:61:83:9b:b7:b6:14:4f:52: 87:9b:14:ed:71:0c:c2:9c:ac:9d:c0:dc:1c:be:90:7e:39:75: dd:4e:7a:96:1b:7e:f5:a1:52:61:ce:1a:c0:03:24:a3:f1:71: 8a:32:21:6e:a4:78:71:66:cf:c9:c7:d1:9a:d8:b7:4b:30:f6: d7:3b:ba:bc:7e:6c:5d:06:d6:81:47:25:7b:05:59:df:3a:13: b1:50:5f:23:21:3a:3a:44:b4:a1:cb:fb:d2:5f:ec:92:5c:be: 1e:da:ee:20:cc:6f:4f:98:9b:87:1e:8b:01:0a:49:b3:25:42: 84:d5:9a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRKe0sB90PxR8qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk Njk4ZjU4OTktMzQ4NC00MmFhLWJmNmQtYzhlZTAwYWMxZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrMq5rKmkjQUtR7RhmWPWc6Ko61qVzMZy3LR Zxi3ZUP0JwRaKMzHD90OL/QaqT7RzkdOmiYRgntbPS59aALBGfoUFO8NEd723dYi o2/hOBUsK7RM8g1Wr3LR0mxAd1zf5xj3fKzGCHSTMCr2XJzb2oDwGHJ3P87DGTb9 ITCb1T48Eve3i0a7ZwD/Ldwz54kbPS0v5srKeMf5rR+Vqn7F2BuKYvlOtl26vh8G BUaNvW/7Y8bLCtwHkd0xzVXvzpYZPX7E6OwpNfBifjL6vVbiESeF42TF+s++kB2W QIETxFkizLMP4mvmpJ5PjWJwYr/IDnRMRFNkc1pOT5bW47iyewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCFjEQLnVWtq5eu+xRKzgiV/e2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmZhOGZlYzgtNmRlNi0z ZmFhLTk0MmYtNGU3NjZhMDQ2YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX8syEXhCzFN+1R7/M8NFbRiGtkMIc2SSUvYSyxiNSCOBTHYSX1r5B8 9Rfvx4qjyirsPh/aGEjluusStzg3nVHuq1d9btPjlXmieDJeLyJuSk9yjjs8HN9K fTu5Qb7ABnoys3KYvb5dBhWs+4w/TCXseA2uyiLCRl5U5ySAVF+2W885DPgCp5xh g5u3thRPUoebFO1xDMKcrJ3A3By+kH45dd1OepYbfvWhUmHOGsADJKPxcYoyIW6k eHFmz8nH0ZrYt0sw9tc7urx+bF0G1oFHJXsFWd86E7FQXyMhOjpEtKHL+9Jf7JJc vh7a7iDMb0+Ym4ceiwEKSbMlQoTVmlk= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:27 2026 by rpki-client