$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/377cddad-790d-35dd-9c50-e2dafff22d2b.roa File: 377cddad-790d-35dd-9c50-e2dafff22d2b.roa (raw, json) Hash identifier: TTtBWIHo7lT4uOSLeYd7VYdfpM3EtZ4t3wCDmgW2Sw4= Subject key identifier: B3:7C:F3:35:AF:1D:8C:A2:B0:F9:46:87:43:20:63:5B:1C:78:FA:F6 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D1DE49052A295169FBF3F3540 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/377cddad-790d-35dd-9c50-e2dafff22d2b.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:90:52:a2:95:16:9f:bf:3f:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=f331fc98-187a-4258-8c71-955757ac232c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:60:8c:18:26:68:32:dc:77:a2:0a:44:a6: e9:ac:fd:04:91:ab:ab:cf:c7:88:95:d6:d9:e7:42: d3:87:1e:82:26:d3:5e:e2:c8:cb:21:ec:66:7a:6d: 41:09:c2:5e:11:24:01:39:5c:f1:87:a8:18:35:c9: fc:38:72:65:6c:d7:d7:6f:df:64:aa:0d:03:aa:6a: 2c:56:39:82:d6:11:b4:44:5e:19:a3:bd:b0:9a:47: 85:34:a5:47:f9:7b:d0:2b:35:78:f0:23:61:11:31: 62:01:70:b1:5a:2b:85:0d:a8:45:2c:e6:3e:41:05: c8:1c:a3:1d:5d:e3:34:f0:84:5f:63:6d:ee:a3:97: 07:82:f7:ad:c0:c3:4d:1c:58:d0:fe:87:07:1d:d5: 75:f8:84:c5:c2:48:63:c0:aa:74:ec:45:44:99:1c: 7e:1c:ed:f5:9d:b2:cd:96:13:2f:d9:8e:6a:12:aa: 3d:0c:4b:0e:b9:9a:d5:19:af:40:fb:1e:b3:9d:a6: 9b:70:cb:59:96:48:e9:23:15:ac:1a:1f:9e:30:3e: b7:b6:17:f9:56:ef:0c:26:1f:88:ba:8a:d2:dc:58: aa:02:21:3e:44:76:34:3d:9c:6a:6e:04:91:1b:7d: 24:40:46:e9:e2:27:2a:b8:e6:17:69:6b:47:42:bc: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7C:F3:35:AF:1D:8C:A2:B0:F9:46:87:43:20:63:5B:1C:78:FA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/377cddad-790d-35dd-9c50-e2dafff22d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9e:43:d2:eb:28:77:08:4a:d5:f6:72:65:02:7d:84:28:f4: b4:99:08:42:33:79:08:01:21:77:ea:ed:35:fe:7b:d6:94:a1: 3f:22:d4:2e:de:59:11:37:30:8c:70:f1:f8:79:9a:b1:6b:28: 8a:92:d5:99:c0:07:aa:80:f9:ed:d6:d4:cd:68:a4:79:77:b6: 04:51:d2:b0:b6:b4:d6:c0:e5:20:0f:6b:51:67:13:29:8c:38: d6:8d:82:6e:85:8a:d8:cf:53:c8:61:6c:99:65:cd:00:80:ec: 46:3a:13:fc:de:55:0a:27:51:bd:ce:b3:f9:ab:32:da:6c:86: 35:a5:52:aa:b2:8a:7e:d3:07:d7:91:8e:39:aa:58:b0:17:56: 3e:6c:00:b7:af:19:4a:76:a1:50:64:a5:03:c7:3e:7d:74:f8: af:b2:9d:ec:38:78:44:98:79:75:0f:05:29:ec:41:dc:12:a0: cc:2c:7b:72:40:d5:b6:44:be:56:d1:1f:4e:25:b9:ea:be:01: b8:4e:53:50:cf:99:0e:bd:43:e1:6d:00:8b:01:b2:95:5e:14: 2e:32:af:82:7d:fe:5c:19:13:0a:6e:e8:fd:fa:fc:e4:0a:b2: e1:0b:00:5b:14:10:da:0d:0e:63:db:ae:29:91:07:8c:74:01: 24:32:bc:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JBSopUWn78/NUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk ZjMzMWZjOTgtMTg3YS00MjU4LThjNzEtOTU1NzU3YWMyMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllxgjBgmaDLcd6IKRKbprP0Ekaurz8eIldbZ 50LThx6CJtNe4sjLIexmem1BCcJeESQBOVzxh6gYNcn8OHJlbNfXb99kqg0Dqmos VjmC1hG0RF4Zo72wmkeFNKVH+XvQKzV48CNhETFiAXCxWiuFDahFLOY+QQXIHKMd XeM08IRfY23uo5cHgvetwMNNHFjQ/ocHHdV1+ITFwkhjwKp07EVEmRx+HO31nbLN lhMv2Y5qEqo9DEsOuZrVGa9A+x6znaabcMtZlkjpIxWsGh+eMD63thf5Vu8MJh+I uorS3FiqAiE+RHY0PZxqbgSRG30kQEbp4icquOYXaWtHQrytoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN88zWvHYyisPlGh0MgY1scePr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzc3Y2RkYWQtNzkwZC0z NWRkLTljNTAtZTJkYWZmZjIyZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+eQ9LrKHcIStX2cmUCfYQo9LSZCEIzeQgBIXfq7TX+e9aUoT8i1C7e WRE3MIxw8fh5mrFrKIqS1ZnAB6qA+e3W1M1opHl3tgRR0rC2tNbA5SAPa1FnEymM ONaNgm6FitjPU8hhbJllzQCA7EY6E/zeVQonUb3Os/mrMtpshjWlUqqyin7TB9eR jjmqWLAXVj5sALevGUp2oVBkpQPHPn10+K+ynew4eESYeXUPBSnsQdwSoMwse3JA 1bZEvlbRH04lueq+AbhOU1DPmQ69Q+FtAIsBspVeFC4yr4J9/lwZEwpu6P36/OQK suELAFsUENoNDmPbrimRB4x0ASQyvBI= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:26 2026 by rpki-client