$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa File: 40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa (raw, json) Hash identifier: r40Rz/+ztF18InyOm20+HN+ooEYzfrV2bO8/3t46rro= Subject key identifier: EA:B5:36:49:74:92:6A:4B:51:D2:CB:FF:38:6B:39:12:A5:F2:A7:F1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D2644D5B90B6AE7549FC278A0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:d5:b9:0b:6a:e7:54:9f:c2:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=41b48526-15a8-40ae-8c3e-77fecb7a254a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8f:70:b2:94:70:9d:c3:dc:4b:8a:8e:26:2d: ac:d9:45:76:64:44:1e:99:1b:bd:f8:3c:4b:bb:1d: d9:19:19:ff:e2:aa:e0:28:e4:1d:bc:ac:71:46:b2: 84:3d:21:36:c9:b2:a0:90:dd:a1:c0:c8:76:aa:b9: d5:00:a0:36:8b:38:64:7d:2a:69:44:ea:aa:be:8f: ee:78:6d:48:da:13:90:36:8e:24:b9:34:5f:13:a3: bc:30:e5:81:f0:7e:ca:1c:b0:25:a3:87:42:0f:e3: 38:10:c1:54:2b:1e:66:ef:a9:10:bd:02:5e:1e:a3: 6e:20:46:c0:e9:94:d4:f5:c8:03:a7:6b:a0:fa:6a: cf:c1:cf:aa:0d:0e:2f:10:06:e3:9a:7d:9d:ae:6d: 9e:48:d2:74:f0:b1:5d:46:4b:c3:4c:2f:4d:6b:bb: 3b:c5:a2:ca:b5:dd:2e:82:8f:0d:3a:d3:d6:98:34: a3:8a:c2:b9:ec:c2:0f:d2:4e:5b:33:f5:46:a7:79: bb:84:9b:8d:24:58:fc:83:0a:83:6c:51:1c:b2:2b: 05:d9:73:2e:c8:81:44:a4:39:c1:4f:6e:b3:8e:99: 5a:c9:fe:ab:01:68:26:8c:0f:5f:5c:5b:b8:06:d5: d6:d3:1b:5c:b5:a8:18:3a:8c:51:f9:4b:27:f9:54: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B5:36:49:74:92:6A:4B:51:D2:CB:FF:38:6B:39:12:A5:F2:A7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:39:fd:84:31:45:94:50:37:61:fb:d3:53:5c:2c:dc:e2:fe: 82:aa:02:01:b6:9e:8c:a8:c8:c4:1c:48:c6:95:8f:94:ec:11: 96:60:57:31:3f:26:c7:ad:ef:ce:47:2d:04:36:2c:4d:17:4f: 44:87:21:79:d9:ae:cf:ce:09:84:ab:2e:8e:4d:cd:4c:c5:2e: 6f:d2:62:15:b6:15:88:f2:91:b4:dd:22:2d:a0:e0:01:06:1c: 1b:a4:b8:51:1b:f5:b8:35:56:4d:a7:5a:dd:91:9e:89:cf:21: d1:63:d0:83:93:cc:aa:ab:be:7b:0d:87:75:4b:d9:84:c1:06: 9b:7c:60:d3:fd:50:3f:25:b0:2d:20:8c:6d:6f:06:4d:cb:67: 9a:4a:00:d8:7b:4f:94:93:5f:60:22:f8:03:4e:49:72:bc:be: 5b:a0:be:9c:e1:dd:6f:10:4c:64:1a:13:6a:a3:47:c9:4a:63: 21:82:a1:f2:d5:8d:d2:6f:5f:37:43:e0:1c:52:14:fd:43:2d: 92:f3:f8:18:d0:de:6c:24:1e:76:e3:2b:0f:be:c9:a3:23:9a: 2d:99:fc:b0:c7:aa:d7:2a:d9:ab:6d:61:a7:83:eb:ac:fd:49: 10:fc:bb:1c:97:15:aa:a8:35:a1:e4:c9:0d:ae:03:b9:ce:3a: 45:65:68:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRNW5C2rnVJ/CeKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NDFiNDg1MjYtMTVhOC00MGFlLThjM2UtNzdmZWNiN2EyNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4o9wspRwncPcS4qOJi2s2UV2ZEQemRu9+DxL ux3ZGRn/4qrgKOQdvKxxRrKEPSE2ybKgkN2hwMh2qrnVAKA2izhkfSppROqqvo/u eG1I2hOQNo4kuTRfE6O8MOWB8H7KHLAlo4dCD+M4EMFUKx5m76kQvQJeHqNuIEbA 6ZTU9cgDp2ug+mrPwc+qDQ4vEAbjmn2drm2eSNJ08LFdRkvDTC9Na7s7xaLKtd0u go8NOtPWmDSjisK57MIP0k5bM/VGp3m7hJuNJFj8gwqDbFEcsisF2XMuyIFEpDnB T26zjplayf6rAWgmjA9fXFu4BtXW0xtctagYOoxR+Usn+VRcfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOq1Nkl0kmpLUdLL/zhrORKl8qfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDA0NzRjYmItZGQ1ZC0z ZDQ0LWE0YmEtYTkzMzVjNWE5ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo5/YQxRZRQN2H701NcLNzi/oKqAgG2noyoyMQcSMaVj5TsEZZgVzE/ Jset785HLQQ2LE0XT0SHIXnZrs/OCYSrLo5NzUzFLm/SYhW2FYjykbTdIi2g4AEG HBukuFEb9bg1Vk2nWt2RnonPIdFj0IOTzKqrvnsNh3VL2YTBBpt8YNP9UD8lsC0g jG1vBk3LZ5pKANh7T5STX2Ai+ANOSXK8vlugvpzh3W8QTGQaE2qjR8lKYyGCofLV jdJvXzdD4BxSFP1DLZLz+BjQ3mwkHnbjKw++yaMjmi2Z/LDHqtcq2attYaeD66z9 SRD8uxyXFaqoNaHkyQ2uA7nOOkVlaNg= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:16 2026 by rpki-client