$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3a01d9ab-f0ff-357d-a3a2-3d79a4f7dc75.roa File: 3a01d9ab-f0ff-357d-a3a2-3d79a4f7dc75.roa (raw, json) Hash identifier: QOQJqXD7J/6kOYg3z13ZG/wfjCVq1OlCQhUsmrvmpbc= Subject key identifier: 21:98:DB:CC:EC:C9:5D:B7:C2:7F:90:8F:D1:54:C5:E9:FC:55:72:A6 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D316F7475EA37A8B0345E6300 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3a01d9ab-f0ff-357d-a3a2-3d79a4f7dc75.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:74:75:ea:37:a8:b0:34:5e:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=4f8735e8-dd53-4e7f-8055-7d64c3cf650d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:08:2c:ba:fe:95:02:33:38:26:13:4e:04: 0a:1a:8f:d0:34:4c:12:d6:59:4e:e6:fd:30:ee:49: 85:b4:16:76:60:a2:1a:c0:03:13:8f:0c:c2:0b:dc: 17:3a:a1:0c:d5:ad:1b:d9:fa:08:5a:ed:46:55:f5: af:17:ce:86:b5:7a:c7:41:6a:f4:9e:75:05:23:6b: 09:51:54:b9:35:48:c9:73:98:12:a6:6c:29:4b:43: a2:a0:fa:90:0f:6e:09:72:e8:1f:fc:a8:75:38:d9: 6a:65:bf:ff:75:8e:38:95:3e:d5:11:44:96:fd:c0: 13:8a:09:7f:af:81:4d:76:58:d9:c6:0a:e4:a6:6c: 0f:e8:69:44:f2:d0:92:24:20:de:d9:a9:a6:7f:19: fe:58:8b:8a:cf:09:15:d1:92:c2:49:4d:72:e7:f0: ff:91:1b:40:75:72:3e:09:db:55:cd:ed:4c:17:ce: dd:7e:56:e1:c8:93:70:ad:f2:6f:c5:38:09:af:fc: e9:f6:39:ce:58:aa:0a:85:8f:59:8e:94:08:0f:20: 4f:bf:a8:0a:d5:6e:e9:12:b7:56:aa:00:5f:8c:5e: 5f:2f:2e:a9:e3:53:c4:ca:92:54:51:e6:85:42:99: ff:1e:d8:cd:64:a9:57:c0:09:ec:1e:4f:ef:0d:eb: fa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:98:DB:CC:EC:C9:5D:B7:C2:7F:90:8F:D1:54:C5:E9:FC:55:72:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3a01d9ab-f0ff-357d-a3a2-3d79a4f7dc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:35:0b:0a:57:58:60:7f:16:55:33:7a:4a:4f:a5:b5:b5:04: 82:62:89:79:98:b5:a9:84:86:08:f9:b3:ee:e9:9f:b1:72:39: dc:7b:eb:96:0a:de:25:7d:7c:e3:38:81:71:20:96:b4:9d:6c: 9a:95:8a:ea:c7:ac:d3:3e:d3:51:70:fa:7d:aa:f8:4d:98:51: c0:79:d1:a3:a6:75:79:87:39:f5:98:ca:29:86:26:a8:dd:f8: 34:d7:ae:dc:6a:41:68:6f:8a:82:15:0c:43:bb:65:85:d7:44: f1:03:99:c8:b8:89:34:cb:7e:b9:b8:8d:c3:1a:02:69:b5:49: d4:06:a1:89:f3:75:75:2a:8e:21:16:3c:53:4c:55:9d:63:4d: 43:36:47:c5:2b:a9:45:a6:09:6c:6a:12:64:a3:b1:2f:0d:1d: 10:93:01:10:c3:97:cb:7b:bc:46:29:df:cf:d6:0c:32:3f:bb: c6:a6:06:72:78:30:08:e2:f2:68:09:21:2f:c6:5a:67:f2:8d: ac:24:fe:c5:1b:39:86:f4:1b:15:ac:0c:64:c4:37:f0:5b:3c: a6:41:a5:84:65:54:78:9c:d1:24:76:bb:2e:c0:34:27:e6:5b: 00:57:1b:0c:02:a2:0a:b8:0b:c4:08:0d:cc:08:07:c6:49:6d: 57:54:d6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3R16jeosDReYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NGY4NzM1ZTgtZGQ1My00ZTdmLTgwNTUtN2Q2NGMzY2Y2NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35AILLr+lQIzOCYTTgQKGo/QNEwS1llO5v0w 7kmFtBZ2YKIawAMTjwzCC9wXOqEM1a0b2foIWu1GVfWvF86GtXrHQWr0nnUFI2sJ UVS5NUjJc5gSpmwpS0OioPqQD24Jcugf/Kh1ONlqZb//dY44lT7VEUSW/cATigl/ r4FNdljZxgrkpmwP6GlE8tCSJCDe2ammfxn+WIuKzwkV0ZLCSU1y5/D/kRtAdXI+ CdtVze1MF87dflbhyJNwrfJvxTgJr/zp9jnOWKoKhY9ZjpQIDyBPv6gK1W7pErdW qgBfjF5fLy6p41PEypJUUeaFQpn/HtjNZKlXwAnsHk/vDev6QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGY28zsyV23wn+Qj9FUxen8VXKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2EwMWQ5YWItZjBmZi0z NTdkLWEzYTItM2Q3OWE0ZjdkYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSF5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs1CwpXWGB/FlUzekpPpbW1BIJiiXmYtamEhgj5s+7pn7FyOdx765YK 3iV9fOM4gXEglrSdbJqViurHrNM+01Fw+n2q+E2YUcB50aOmdXmHOfWYyimGJqjd +DTXrtxqQWhvioIVDEO7ZYXXRPEDmci4iTTLfrm4jcMaAmm1SdQGoYnzdXUqjiEW PFNMVZ1jTUM2R8UrqUWmCWxqEmSjsS8NHRCTARDDl8t7vEYp38/WDDI/u8amBnJ4 MAji8mgJIS/GWmfyjawk/sUbOYb0GxWsDGTEN/BbPKZBpYRlVHic0SR2uy7ANCfm WwBXGwwCogq4C8QIDcwIB8ZJbVdU1mc= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:16 2026 by rpki-client