$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b0135f5-807b-3866-b6d8-58969cea8883.roa File: 3b0135f5-807b-3866-b6d8-58969cea8883.roa (raw, json) Hash identifier: v3UB2cVmRleGWWaMiyadknJmue/aydKwzvEKy+JtHJQ= Subject key identifier: DD:43:56:77:12:96:72:36:5F:97:7F:82:29:6C:1B:AE:65:2E:32:73 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF9D1C3FA83C70DDDAC180 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b0135f5-807b-3866-b6d8-58969cea8883.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9d:1c:3f:a8:3c:70:dd:da:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=1cb3767d-3c1e-45c2-b3a7-720f1760c0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:3b:0c:5c:c3:f3:33:98:63:e3:81:5f:54: 74:8e:c1:8a:d4:69:10:fb:a0:fe:2c:ff:60:9e:70: 42:fd:29:63:86:87:a6:28:57:b8:f3:6c:43:8a:ee: ba:56:1d:59:db:8a:60:9f:a3:c5:cd:52:78:b0:7b: be:28:38:cb:07:57:cf:cc:2a:f3:3e:d0:20:4d:3b: e7:8b:46:f9:8a:ff:65:44:7e:54:b3:e0:36:35:66: 9b:3f:d1:0b:5a:69:b3:61:50:ea:6d:9c:58:87:bc: 66:78:6b:ee:6e:cd:85:9c:9d:de:d3:ee:b2:df:66: 53:23:de:0c:fe:47:c5:46:0c:1c:1c:a6:e9:a6:69: 63:10:17:e5:d2:4e:9f:0d:d2:d9:84:21:43:42:ee: 0f:28:fc:f2:09:2d:a0:6f:b0:7c:34:a1:95:2c:4a: 60:5e:db:87:a8:90:4d:9d:e5:12:cf:9d:72:4a:24: 9a:b3:2b:14:bb:7f:34:d2:00:07:07:4f:30:b5:c9: 0d:d7:00:59:30:92:f9:58:31:a7:52:12:fe:1c:ad: 44:56:47:98:31:f3:36:61:33:d3:aa:b9:80:80:04: bf:84:f5:78:a8:3a:50:dd:af:f2:ae:08:d5:4d:87: d4:57:29:5a:bd:9a:5b:b5:a9:82:25:4a:4a:a7:d6: 97:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:43:56:77:12:96:72:36:5F:97:7F:82:29:6C:1B:AE:65:2E:32:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b0135f5-807b-3866-b6d8-58969cea8883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4a:4f:bb:d1:7d:e5:54:3b:20:ea:b7:61:14:50:44:87:25: 72:87:48:cf:21:01:92:51:29:3c:83:1e:69:cc:f3:a7:5c:b7: 35:80:f4:4f:29:4a:b8:ae:ff:79:0b:e0:51:a0:90:85:3a:c0: e0:14:ac:3d:9c:d7:5f:a8:74:e1:bd:87:85:61:89:1f:c9:bd: ad:27:cb:8e:5b:d2:38:d4:f6:86:4d:80:d3:34:ae:ea:97:4a: 10:77:d2:fd:75:31:c9:59:a0:10:03:e2:b9:fb:fd:74:ac:74: 2f:69:0e:95:3d:0c:77:44:01:e8:1c:0d:38:35:21:99:f1:be: 1a:11:d8:69:4c:46:1b:71:3b:7c:67:e8:73:f7:0c:31:d4:48: b6:ed:b3:a0:07:14:01:2e:28:c8:f7:cc:e4:3b:f0:96:f5:35: c4:e2:85:39:7b:08:db:10:94:9f:a7:2d:94:13:25:30:ca:55: e8:db:6d:c0:90:11:df:01:59:7d:2f:2c:09:e0:98:bf:00:29: 83:f6:4a:ca:1a:52:ff:ec:e5:17:3d:ea:3b:5a:2b:f2:28:6f: 04:ff:72:d3:56:18:f9:06:af:74:d7:8f:8d:cb:38:ac:b8:7a: 94:c5:bd:57:86:24:72:85:83:b9:4b:32:e1:8c:63:55:23:ab: ce:47:af:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z50cP6g8cN3awYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MWNiMzc2N2QtM2MxZS00NWMyLWIzYTctNzIwZjE3NjBjMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlok7DFzD8zOYY+OBX1R0jsGK1GkQ+6D+LP9g nnBC/SljhoemKFe482xDiu66Vh1Z24pgn6PFzVJ4sHu+KDjLB1fPzCrzPtAgTTvn i0b5iv9lRH5Us+A2NWabP9ELWmmzYVDqbZxYh7xmeGvubs2FnJ3e0+6y32ZTI94M /kfFRgwcHKbppmljEBfl0k6fDdLZhCFDQu4PKPzyCS2gb7B8NKGVLEpgXtuHqJBN neUSz51ySiSasysUu3800gAHB08wtckN1wBZMJL5WDGnUhL+HK1EVkeYMfM2YTPT qrmAgAS/hPV4qDpQ3a/yrgjVTYfUVylavZpbtamCJUpKp9aXlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1DVncSlnI2X5d/gilsG65lLjJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2IwMTM1ZjUtODA3Yi0z ODY2LWI2ZDgtNTg5NjljZWE4ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhKT7vRfeVUOyDqt2EUUESHJXKHSM8hAZJRKTyDHmnM86dctzWA9E8p Sriu/3kL4FGgkIU6wOAUrD2c11+odOG9h4VhiR/Jva0ny45b0jjU9oZNgNM0ruqX ShB30v11MclZoBAD4rn7/XSsdC9pDpU9DHdEAegcDTg1IZnxvhoR2GlMRhtxO3xn 6HP3DDHUSLbts6AHFAEuKMj3zOQ78Jb1NcTihTl7CNsQlJ+nLZQTJTDKVejbbcCQ Ed8BWX0vLAngmL8AKYP2SsoaUv/s5Rc96jtaK/IobwT/ctNWGPkGr3TXj43LOKy4 epTFvVeGJHKFg7lLMuGMY1Ujq85Hr2A= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:53 2026 by rpki-client