$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa File: 401e0813-9670-37a2-9d6b-a3d8b19c9975.roa (raw, json) Hash identifier: aCSocQQXfgKdAkoF1pxZnAabba9E1Wl8u8EETfOu9k4= Subject key identifier: 8C:50:3D:E5:F7:20:D5:14:6F:76:3F:05:C8:FC:7D:0A:7C:19:84:3F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F549DA0F73B979FE2888A8340 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a0:f7:3b:97:9f:e2:88:8a:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8576b121-8c8b-4fb7-b6e5-729c0a3389ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e3:c4:d6:b4:4b:a2:cc:1f:06:36:3b:5c:dc: e8:09:75:b8:14:f8:e6:fd:c4:42:46:b8:d7:90:c5: fd:8f:1b:d1:69:16:48:1a:22:7e:08:94:b3:59:07: 67:1d:28:c7:3f:67:0d:9a:fc:9e:14:9a:89:2b:42: 14:6c:ac:73:df:be:bc:36:5f:99:32:9b:6e:fa:e2: f5:3e:b0:24:70:a6:b4:d2:4a:b4:b4:f6:9d:2a:41: 61:20:3a:74:0a:2a:2f:ee:d1:a7:ca:1c:a3:9b:4c: 71:43:fb:74:1d:1b:9b:2c:40:e8:99:42:3f:e8:b9: 03:27:7f:ca:9c:1c:86:b7:3b:06:af:a6:48:2f:f3: 36:8e:00:24:07:89:88:13:53:86:5c:74:75:76:d5: b7:5d:54:4d:47:6f:f3:2c:42:33:36:a6:24:92:bb: 57:7c:df:a6:da:00:46:22:04:1c:a5:58:9c:20:89: ab:96:3e:e8:d7:ed:f9:63:2c:70:6b:8a:ec:83:aa: e4:52:a1:02:fe:56:4d:5c:c2:5d:cb:88:ac:87:e9: c3:a9:3e:d3:cd:37:5c:c1:b2:81:6c:67:07:c7:d0: 4c:74:d9:da:6a:e2:bb:bd:b5:3e:5a:c8:b1:32:43: 65:d0:da:58:44:b5:24:92:d8:a7:0e:39:10:11:79: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:50:3D:E5:F7:20:D5:14:6F:76:3F:05:C8:FC:7D:0A:7C:19:84:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:2e:a1:de:b7:99:d6:06:a7:e4:98:c7:e1:2d:ad:09:44:f2: 6b:7d:9d:69:92:bc:c8:d6:ef:86:0d:0f:6c:37:bb:77:84:80: fd:de:a0:80:86:88:1b:fa:68:aa:fb:6e:bb:a2:9c:be:01:b1: 4a:91:bf:04:d0:78:9f:76:3b:44:e9:57:db:a2:88:e8:40:81: e9:67:15:0b:04:ec:39:08:8c:d4:c7:65:aa:6e:81:c1:79:96: 63:f7:24:c8:07:30:1b:eb:16:f5:7a:41:82:f8:6f:26:20:84: 33:a6:62:5c:73:f7:75:54:11:89:18:6a:37:76:a1:d0:44:ee: 1d:6a:71:77:15:7d:93:39:d2:ab:6f:81:7f:4e:10:b4:e7:24: c1:91:3d:e8:76:2c:43:14:2c:ef:ec:21:fc:48:f2:45:2d:7a: 9a:60:49:78:c0:cb:63:e7:65:ec:cc:a9:2a:00:4d:31:ba:d7: c0:b4:04:dc:85:11:ca:ef:59:f7:ce:a7:fc:23:94:3c:f6:25: e9:4b:67:b8:9c:53:70:26:e6:ac:03:18:e8:fd:82:ca:03:f6: 8b:e7:e0:46:16:1b:88:9e:ef:e6:55:82:79:3f:5f:00:7a:fe: c1:83:3a:a8:68:82:01:2b:77:07:09:8e:71:c4:c2:65:58:80: 6b:a7:c9:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaD3O5ef4oiKg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ODU3NmIxMjEtOGM4Yi00ZmI3LWI2ZTUtNzI5YzBhMzM4OWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuPE1rRLoswfBjY7XNzoCXW4FPjm/cRCRrjX kMX9jxvRaRZIGiJ+CJSzWQdnHSjHP2cNmvyeFJqJK0IUbKxz3768Nl+ZMptu+uL1 PrAkcKa00kq0tPadKkFhIDp0Ciov7tGnyhyjm0xxQ/t0HRubLEDomUI/6LkDJ3/K nByGtzsGr6ZIL/M2jgAkB4mIE1OGXHR1dtW3XVRNR2/zLEIzNqYkkrtXfN+m2gBG IgQcpVicIImrlj7o1+35Yyxwa4rsg6rkUqEC/lZNXMJdy4ish+nDqT7TzTdcwbKB bGcHx9BMdNnaauK7vbU+WsixMkNl0NpYRLUkktinDjkQEXmQwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxQPeX3INUUb3Y/Bcj8fQp8GYQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDAxZTA4MTMtOTY3MC0z N2EyLTlkNmItYTNkOGIxOWM5OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMuod63mdYGp+SYx+EtrQlE8mt9nWmSvMjW74YND2w3u3eEgP3eoICG iBv6aKr7bruinL4BsUqRvwTQeJ92O0TpV9uiiOhAgelnFQsE7DkIjNTHZapugcF5 lmP3JMgHMBvrFvV6QYL4byYghDOmYlxz93VUEYkYajd2odBE7h1qcXcVfZM50qtv gX9OELTnJMGRPeh2LEMULO/sIfxI8kUteppgSXjAy2PnZezMqSoATTG618C0BNyF EcrvWffOp/wjlDz2JelLZ7icU3Am5qwDGOj9gsoD9ovn4EYWG4ie7+ZVgnk/XwB6 /sGDOqhoggErdwcJjnHEwmVYgGunycM= -----END CERTIFICATE-----Generated at Sun Oct 4 22:17:07 2026 by rpki-client