$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/350b1221-b495-35a8-a540-bfc9a9d2a860.roa File: 350b1221-b495-35a8-a540-bfc9a9d2a860.roa (raw, json) Hash identifier: PUAEfez3qWrMSfWfqOyKyH4Kzm1zIguKlUFQyyWyhRs= Subject key identifier: 4F:23:6C:88:2B:48:47:06:79:A2:D3:55:75:B4:C7:6A:9A:9B:5B:83 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F5B98040346F20E65E811C400 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/350b1221-b495-35a8-a540-bfc9a9d2a860.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 23473 IP address blocks: 153.33.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:04:03:46:f2:0e:65:e8:11:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=2c3abb72-c57f-4f22-b447-5a79939af2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:d9:6a:25:f8:69:8f:0a:cc:83:83:42:e1: 80:7e:2e:8c:3f:39:69:5e:57:f3:66:a2:d6:dc:1c: 14:99:f5:fa:1e:57:2a:f5:65:12:88:52:3c:e8:43: 73:9b:d2:55:72:20:b2:08:4c:ab:fc:fd:93:ae:94: 60:84:bf:80:d8:54:b0:72:19:64:71:29:16:78:1c: 0c:af:3f:43:be:0e:56:5d:aa:6f:58:3a:38:48:5a: 91:57:da:da:07:7d:c3:9a:1b:8c:9d:9c:3b:df:97: fc:5b:ac:0d:ee:84:62:26:3e:40:51:11:c7:5e:fb: 5b:4b:7e:b5:43:91:61:f4:8b:04:d9:6d:e7:f4:d4: 50:77:42:c2:bd:43:6c:94:1c:aa:5f:2f:52:03:dd: 14:d3:14:00:2a:e2:bf:bd:b2:05:d1:cd:a5:3c:85: e0:be:92:6b:9f:38:fb:1a:8b:71:c9:8e:dd:45:76: 0e:fc:0f:df:85:fd:12:1d:47:23:3d:6c:df:44:34: 93:7c:e0:a4:e3:4a:81:09:68:9c:2a:e4:d6:08:e2: 6a:e9:c7:84:b2:15:63:da:59:77:81:5b:c6:54:4c: 9d:e1:66:bc:ca:f4:bc:d4:b4:ab:b5:4e:4b:5e:29: 9f:12:91:20:67:c4:85:02:4f:03:83:ac:ba:1e:98: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:23:6C:88:2B:48:47:06:79:A2:D3:55:75:B4:C7:6A:9A:9B:5B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/350b1221-b495-35a8-a540-bfc9a9d2a860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:17:60:ce:95:ee:9a:a7:d8:62:2c:b0:ca:3e:9a:c1:7c:1c: ca:38:d8:08:0a:3e:ec:74:bd:f9:44:5e:25:50:04:88:6a:af: c1:03:04:9b:4c:01:f8:62:10:33:de:99:10:8a:a6:74:b7:b0: 21:25:fe:5d:a9:81:4a:b4:50:a2:43:6c:98:d0:c1:4c:57:60: 8f:e9:03:39:64:55:b5:54:66:d2:fc:0e:20:c6:0c:59:46:42: 62:a5:4f:4d:60:e5:00:de:9c:60:b3:d4:fd:52:c5:c3:09:fd: df:d8:93:8c:b9:87:45:5c:12:d0:0e:2d:d6:d5:81:71:4d:1e: 70:0f:70:ed:2d:3f:bf:a0:86:48:12:0b:b4:94:11:d2:47:88: b3:1e:f2:f2:27:28:7a:bf:f0:9f:44:4c:bd:f4:9d:4a:14:12: 3b:90:a9:1e:f3:a6:6d:b9:85:4b:e5:dd:a1:ca:ab:57:7e:51: 39:6f:f5:e1:b3:3b:15:be:8d:df:92:73:48:e5:4e:e5:dd:de: 7b:4a:df:fb:e3:d9:c0:93:55:56:08:09:52:17:1a:f5:b6:3c: 36:8e:45:c9:4c:b5:63:b7:7f:21:bb:1b:74:c1:8a:bf:ba:69: a4:cc:17:21:23:bd:7f:1a:fd:89:43:73:f8:0e:1b:36:8c:5c: d9:35:74:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bmAQDRvIOZegRxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MmMzYWJiNzItYzU3Zi00ZjIyLWI0NDctNWE3OTkzOWFmMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMnZaiX4aY8KzIODQuGAfi6MPzlpXlfzZqLW 3BwUmfX6Hlcq9WUSiFI86ENzm9JVciCyCEyr/P2TrpRghL+A2FSwchlkcSkWeBwM rz9Dvg5WXapvWDo4SFqRV9raB33DmhuMnZw735f8W6wN7oRiJj5AURHHXvtbS361 Q5Fh9IsE2W3n9NRQd0LCvUNslByqXy9SA90U0xQAKuK/vbIF0c2lPIXgvpJrnzj7 GotxyY7dRXYO/A/fhf0SHUcjPWzfRDSTfOCk40qBCWicKuTWCOJq6ceEshVj2ll3 gVvGVEyd4Wa8yvS81LSrtU5LXimfEpEgZ8SFAk8Dg6y6Hpg26wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8jbIgrSEcGeaLTVXW0x2qam1uDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzUwYjEyMjEtYjQ5NS0z NWE4LWE1NDAtYmZjOWE5ZDJhODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIXYM6V7pqn2GIssMo+msF8HMo42AgKPux0vflEXiVQBIhqr8EDBJtM AfhiEDPemRCKpnS3sCEl/l2pgUq0UKJDbJjQwUxXYI/pAzlkVbVUZtL8DiDGDFlG QmKlT01g5QDenGCz1P1SxcMJ/d/Yk4y5h0VcEtAOLdbVgXFNHnAPcO0tP7+ghkgS C7SUEdJHiLMe8vInKHq/8J9ETL30nUoUEjuQqR7zpm25hUvl3aHKq1d+UTlv9eGz OxW+jd+Sc0jlTuXd3ntK3/vj2cCTVVYICVIXGvW2PDaORclMtWO3fyG7G3TBir+6 aaTMFyEjvX8a/YlDc/gOGzaMXNk1dMs= -----END CERTIFICATE-----Generated at Mon Oct 5 06:46:40 2026 by rpki-client