$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33b18cf6-db54-3a99-bc60-26d8d25048dc.roa File: 33b18cf6-db54-3a99-bc60-26d8d25048dc.roa (raw, json) Hash identifier: UzCHHS7eG2h4SjTY98G9UA0rcgxfx3W4FhXDwkt75iQ= Subject key identifier: 24:3E:C7:CA:05:1E:CA:85:C7:7C:40:EC:E0:F2:76:D8:8E:F5:FB:4C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D2644CD89D2D1AE2DB419F140 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33b18cf6-db54-3a99-bc60-26d8d25048dc.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:cd:89:d2:d1:ae:2d:b4:19:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=570a3de0-af3c-4900-920d-23a7467836af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:15:26:82:39:e6:94:ae:83:0d:de:f6:f8:dd: d0:bb:61:27:b0:95:da:ee:b9:ec:e8:df:69:0a:8d: 99:3e:da:4b:11:d6:4e:4b:b7:ff:61:aa:7e:f9:c2: 6a:75:4e:47:45:69:ee:f7:ff:b9:35:87:51:47:e6: 1f:2e:1a:96:2b:f8:a7:e7:a7:7f:eb:4c:1d:14:20: 73:69:19:2b:db:62:55:b7:07:1a:c4:6d:d2:34:08: 6a:b5:17:41:58:c9:82:68:d4:2d:05:5a:a6:3f:64: 79:db:5f:4e:32:c2:35:5f:46:77:eb:98:f4:5c:31: 18:3f:3e:ec:10:e2:8c:ee:b5:a4:92:bf:35:f6:1f: 55:be:fb:ce:c1:2b:ca:dd:4e:2f:56:81:96:b4:11: d3:7e:e1:80:29:93:22:20:35:dc:01:40:83:d9:de: 15:40:dd:5a:bb:4c:7b:9e:5e:d4:28:8d:9c:72:e9: a2:5f:de:b9:27:94:f9:21:9d:2c:41:64:bf:3b:35: 8e:97:cc:c5:76:72:7c:c3:64:c3:78:30:12:1e:24: 51:43:35:91:a0:44:d9:dc:18:12:10:91:50:36:90: 73:f7:27:8d:50:b7:23:66:f3:4b:52:40:ef:d1:07: 2d:b9:94:af:fb:87:e6:88:3a:3f:49:04:14:08:7e: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3E:C7:CA:05:1E:CA:85:C7:7C:40:EC:E0:F2:76:D8:8E:F5:FB:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33b18cf6-db54-3a99-bc60-26d8d25048dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1e:6a:04:d6:56:42:a4:28:4c:fd:e8:c6:48:21:5f:4c:bf: 09:16:e4:5a:2b:36:72:54:1f:58:fe:8a:57:e3:d0:2d:14:1c: 35:ae:bb:ee:51:06:cc:87:9c:47:ca:b3:ed:02:48:cc:bb:77: ec:b3:f7:44:d2:44:9f:d5:6c:44:8a:ea:ef:0b:7a:a4:22:0a: 0f:77:19:d6:2e:8c:5d:19:57:14:4a:fd:94:c9:a7:f9:02:d9: 92:a4:14:31:bf:2c:f5:27:19:5c:01:d2:6d:cf:c3:76:2f:1c: 47:ae:5a:17:9d:0d:fd:5f:83:4b:df:5e:36:54:ca:2d:42:8d: 2c:d8:ff:51:12:f2:ba:4e:db:ef:1b:9e:23:c1:b4:1d:24:47: f1:38:d7:7c:6e:4f:88:7b:1f:b0:1a:b1:45:ea:84:11:a7:72: 11:c4:f4:39:ea:9b:3e:07:58:23:14:11:83:bd:9f:5e:8e:90: 6a:cb:d5:c4:b3:ab:ff:98:24:cd:a6:ed:31:75:4d:ef:8f:3e: ca:0c:8f:12:e1:76:44:84:70:0e:3d:48:87:9a:d3:64:31:c6: 35:6d:cb:70:e1:e2:98:2e:5e:be:53:90:49:22:7a:5a:c6:29: 66:5c:65:9a:e7:b0:45:61:51:73:63:83:4e:7a:e8:b9:e2:2d: 7d:6c:89:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRM2J0tGuLbQZ8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NTcwYTNkZTAtYWYzYy00OTAwLTkyMGQtMjNhNzQ2NzgzNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixUmgjnmlK6DDd72+N3Qu2EnsJXa7rns6N9p Co2ZPtpLEdZOS7f/Yap++cJqdU5HRWnu9/+5NYdRR+YfLhqWK/in56d/60wdFCBz aRkr22JVtwcaxG3SNAhqtRdBWMmCaNQtBVqmP2R5219OMsI1X0Z365j0XDEYPz7s EOKM7rWkkr819h9VvvvOwSvK3U4vVoGWtBHTfuGAKZMiIDXcAUCD2d4VQN1au0x7 nl7UKI2ccumiX965J5T5IZ0sQWS/OzWOl8zFdnJ8w2TDeDASHiRRQzWRoETZ3BgS EJFQNpBz9yeNULcjZvNLUkDv0QctuZSv+4fmiDo/SQQUCH7p4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQ+x8oFHsqFx3xA7ODydtiO9ftMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzNiMThjZjYtZGI1NC0z YTk5LWJjNjAtMjZkOGQyNTA0OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQeagTWVkKkKEz96MZIIV9MvwkW5ForNnJUH1j+ilfj0C0UHDWuu+5R BsyHnEfKs+0CSMy7d+yz90TSRJ/VbESK6u8LeqQiCg93GdYujF0ZVxRK/ZTJp/kC 2ZKkFDG/LPUnGVwB0m3Pw3YvHEeuWhedDf1fg0vfXjZUyi1CjSzY/1ES8rpO2+8b niPBtB0kR/E413xuT4h7H7AasUXqhBGnchHE9Dnqmz4HWCMUEYO9n16OkGrL1cSz q/+YJM2m7TF1Te+PPsoMjxLhdkSEcA49SIea02QxxjVty3Dh4pguXr5TkEkielrG KWZcZZrnsEVhUXNjg0566LniLX1sicE= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:19 2026 by rpki-client