$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa File: 401e0813-9670-37a2-9d6b-a3d8b19c9975.roa (raw, json) Hash identifier: zxA4pzf3Y/LGnqdmspws+DVtKMZr0r+ymibBEoblSVA= Subject key identifier: 43:AE:C7:FE:E8:4B:92:31:C9:A2:A2:DD:70:91:8C:14:8F:A8:28:65 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D300A376F85C180B298EDB980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 23473 IP address blocks: 153.33.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:37:6f:85:c1:80:b2:98:ed:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=8ec5861c-f04a-4d04-88be-e0b8db205d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:d8:0f:55:b3:66:22:e2:74:2f:b8:52:19: c8:79:47:e3:41:d6:48:9b:11:08:5c:65:29:46:9f: 47:82:c7:f0:19:9b:b8:f8:ea:7f:1a:4a:6a:71:15: 6c:04:76:62:1f:27:59:0c:07:fb:81:1f:f6:5d:da: 8f:63:05:89:5c:ab:a8:50:85:45:ee:a1:f6:36:66: 65:84:aa:cf:70:85:42:63:3f:c7:2e:d9:35:ed:49: ff:3b:e7:70:b5:52:2d:43:5f:83:26:4e:c5:8e:9c: 08:e3:36:1d:80:db:4f:46:15:03:1c:a3:ae:29:db: 9b:ba:7c:07:cc:07:03:a7:cc:8b:b5:f7:c7:d0:d6: c3:ea:ea:a8:fd:8b:f9:2b:49:e8:81:0e:19:ff:e6: b6:c6:f0:4c:79:f8:75:16:36:ef:f9:70:2c:ae:35: a7:c4:27:62:fa:e8:53:ed:e5:b5:62:30:02:d2:a0: 22:2c:7a:d8:fc:f1:74:d6:65:e5:a1:87:9a:0b:7a: 95:aa:ef:54:ac:5c:b2:ec:71:aa:e0:79:0f:28:b7: f0:4b:92:2f:e6:c4:ce:cf:57:8b:73:b9:51:ef:7f: d5:46:5a:ae:85:ce:7a:86:bd:5a:44:c6:18:29:9f: e0:69:e7:7d:2a:84:47:1b:4d:0a:23:f5:20:a3:e0: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AE:C7:FE:E8:4B:92:31:C9:A2:A2:DD:70:91:8C:14:8F:A8:28:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a6:a0:7b:3d:07:1a:14:94:5a:24:cd:0c:ca:7c:1e:c5:a5: 02:9e:a5:60:d2:93:d2:75:a2:2b:54:03:6b:1d:63:21:4f:d5: d7:0d:a8:03:b5:eb:ff:73:11:2a:92:84:6d:f0:9e:ce:61:47: 3e:bf:6f:31:8a:5b:c2:a9:65:13:cf:15:96:ae:de:47:4f:54: 71:37:be:9a:34:99:4d:7f:92:32:f5:e6:e0:0a:17:96:0e:4b: 92:1a:60:c3:4e:05:38:06:d5:d2:7c:76:75:95:6e:f6:7a:a1: fc:32:63:bc:55:26:43:eb:93:44:c8:65:e2:98:ae:8a:cd:22: b4:72:5a:e2:25:d3:8b:c4:5d:e6:1f:6d:90:f9:4d:8b:5b:1c: 46:d6:e9:b3:c1:62:2b:68:da:91:11:be:79:06:d9:7c:3f:10: ec:42:3d:ef:f2:df:9c:25:c1:cb:2d:1c:75:f8:82:1d:a4:00: 0c:08:72:0c:1a:81:4d:87:e0:fb:5f:81:0b:db:64:c7:38:43: d4:a9:55:05:36:df:12:61:25:f9:33:75:fd:16:20:39:e2:57: 52:88:8c:e2:e8:c9:d9:19:8a:cf:86:d3:4d:27:06:60:96:a3: 4c:ff:21:85:02:7d:d4:18:a9:0a:1d:39:12:d4:e8:cf:e0:98: 03:dc:8b:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjdvhcGAspjtuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OGVjNTg2MWMtZjA0YS00ZDA0LTg4YmUtZTBiOGRiMjA1ZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl3YD1WzZiLidC+4UhnIeUfjQdZImxEIXGUp Rp9HgsfwGZu4+Op/GkpqcRVsBHZiHydZDAf7gR/2XdqPYwWJXKuoUIVF7qH2NmZl hKrPcIVCYz/HLtk17Un/O+dwtVItQ1+DJk7FjpwI4zYdgNtPRhUDHKOuKdubunwH zAcDp8yLtffH0NbD6uqo/Yv5K0nogQ4Z/+a2xvBMefh1Fjbv+XAsrjWnxCdi+uhT 7eW1YjAC0qAiLHrY/PF01mXloYeaC3qVqu9UrFyy7HGq4HkPKLfwS5Iv5sTOz1eL c7lR73/VRlquhc56hr1aRMYYKZ/gaed9KoRHG00KI/Ugo+AuDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOux/7oS5IxyaKi3XCRjBSPqChlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDAxZTA4MTMtOTY3MC0z N2EyLTlkNmItYTNkOGIxOWM5OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACmoHs9BxoUlFokzQzKfB7FpQKepWDSk9J1oitUA2sdYyFP1dcNqAO1 6/9zESqShG3wns5hRz6/bzGKW8KpZRPPFZau3kdPVHE3vpo0mU1/kjL15uAKF5YO S5IaYMNOBTgG1dJ8dnWVbvZ6ofwyY7xVJkPrk0TIZeKYrorNIrRyWuIl04vEXeYf bZD5TYtbHEbW6bPBYito2pERvnkG2Xw/EOxCPe/y35wlwcstHHX4gh2kAAwIcgwa gU2H4PtfgQvbZMc4Q9SpVQU23xJhJfkzdf0WIDniV1KIjOLoydkZis+G000nBmCW o0z/IYUCfdQYqQodORLU6M/gmAPci7s= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:28 2026 by rpki-client