$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4365a1ce-28fc-3db3-a21e-efeaae9b6976.roa File: 4365a1ce-28fc-3db3-a21e-efeaae9b6976.roa (raw, json) Hash identifier: x1jNWqnPOKn9OOoqDOwg7cRN63OVTNXi++ORZSfg++w= Subject key identifier: 10:A9:ED:51:C9:88:19:9A:ED:42:65:1E:AC:A7:F0:7A:A2:CC:9D:DD Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D316F76AF1E4FCBE1212B3700 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4365a1ce-28fc-3db3-a21e-efeaae9b6976.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:76:af:1e:4f:cb:e1:21:2b:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=a96d081b-794f-43b7-8341-77a641f19d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:1c:e3:78:cf:e5:11:e4:a9:e8:05:71:34: 76:06:dc:32:12:df:f8:0b:51:26:0a:81:0e:e2:7c: de:b3:02:de:c6:31:86:a6:81:f9:48:f3:b1:31:27: d8:ed:04:6e:9c:4e:4c:aa:60:5d:6a:49:53:03:64: 17:27:07:ee:4c:68:2c:24:b5:85:08:fe:6a:1d:d4: 28:67:dd:93:e5:e4:91:c4:65:2b:0a:51:30:78:fb: b9:1f:3c:b0:9c:0f:1e:af:c1:ea:c3:3d:d1:90:d6: c9:73:f2:3e:f9:22:6d:85:b5:5f:4f:5c:9e:02:e8: 6b:40:0b:9a:51:dc:bc:5f:b1:44:e2:16:c8:51:41: 26:38:87:36:63:64:1a:90:e7:b9:0f:57:0a:d1:38: c4:6c:2d:67:6f:d3:14:21:4d:30:fc:ba:20:99:1f: e2:d8:ac:f2:55:39:6b:8c:2a:20:73:4d:f2:24:29: 1a:ba:0f:88:f2:e3:04:e2:e0:09:82:5b:43:34:34: 74:03:f6:df:8e:25:aa:79:00:98:e3:74:1b:88:51: ea:4b:90:90:27:c4:50:0a:95:18:5a:ca:64:3a:02: 02:66:67:35:5c:b9:b0:7f:3a:f7:e7:bd:1d:d6:ad: 3a:d6:40:8b:f1:b4:f6:ad:59:ee:48:0d:26:32:19: 58:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A9:ED:51:C9:88:19:9A:ED:42:65:1E:AC:A7:F0:7A:A2:CC:9D:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4365a1ce-28fc-3db3-a21e-efeaae9b6976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3d:be:c8:7b:40:36:1b:8c:39:0d:99:53:fb:3d:2e:28:ef: 8c:f1:89:9a:f4:da:7c:9d:9c:16:0d:3b:e1:1f:e0:3f:74:f9: 2a:ac:f0:a7:bd:41:e2:69:b1:a6:83:fc:01:2f:93:b2:bd:02: 2f:a1:1a:c8:93:33:4b:0a:08:82:c4:50:f2:ed:41:bc:e3:41: b0:82:33:59:8a:68:70:ba:4f:b3:c7:0b:6b:ff:31:81:cd:0b: 10:71:29:4d:fe:9f:73:8e:b7:8a:55:d2:6a:42:45:4c:c0:da: 21:c8:7b:2e:67:8e:a2:42:c4:c9:8c:89:29:04:e5:dc:40:83: fa:b6:e2:d6:fe:cf:f7:92:ce:da:ed:fd:94:d0:a4:f5:8f:51: 16:8f:4c:78:cf:9d:ee:5c:85:49:49:e8:47:8e:d3:2d:88:ff: a0:c1:80:d1:27:0e:0f:4d:40:fc:40:16:15:7c:12:10:04:f4: d3:66:86:c8:8d:cc:fc:5b:db:fe:99:71:a8:dd:32:64:d0:a8: 1b:ef:86:c6:44:cd:f8:58:2b:c1:ed:9d:b2:68:5f:45:e3:ea: 3d:5d:d9:e2:6e:df:2e:79:43:f6:b5:b2:66:55:19:e3:c5:3a: 3e:20:71:15:38:b4:4c:b5:19:e2:8f:e0:4e:86:84:82:b1:54: 90:08:f3:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3avHk/L4SErNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk YTk2ZDA4MWItNzk0Zi00M2I3LTgzNDEtNzdhNjQxZjE5ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMMc43jP5RHkqegFcTR2BtwyEt/4C1EmCoEO 4nzeswLexjGGpoH5SPOxMSfY7QRunE5MqmBdaklTA2QXJwfuTGgsJLWFCP5qHdQo Z92T5eSRxGUrClEwePu5HzywnA8er8Hqwz3RkNbJc/I++SJthbVfT1yeAuhrQAua Udy8X7FE4hbIUUEmOIc2Y2QakOe5D1cK0TjEbC1nb9MUIU0w/LogmR/i2KzyVTlr jCogc03yJCkaug+I8uME4uAJgltDNDR0A/bfjiWqeQCY43QbiFHqS5CQJ8RQCpUY WspkOgICZmc1XLmwfzr3570d1q061kCL8bT2rVnuSA0mMhlYpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCp7VHJiBma7UJlHqyn8HqizJ3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDM2NWExY2UtMjhmYy0z ZGIzLWEyMWUtZWZlYWFlOWI2OTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs9vsh7QDYbjDkNmVP7PS4o74zxiZr02nydnBYNO+Ef4D90+Sqs8Ke9 QeJpsaaD/AEvk7K9Ai+hGsiTM0sKCILEUPLtQbzjQbCCM1mKaHC6T7PHC2v/MYHN CxBxKU3+n3OOt4pV0mpCRUzA2iHIey5njqJCxMmMiSkE5dxAg/q24tb+z/eSztrt /ZTQpPWPURaPTHjPne5chUlJ6EeO0y2I/6DBgNEnDg9NQPxAFhV8EhAE9NNmhsiN zPxb2/6ZcajdMmTQqBvvhsZEzfhYK8HtnbJoX0Xj6j1d2eJu3y55Q/a1smZVGePF Oj4gcRU4tEy1GeKP4E6GhIKxVJAI87M= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:18 2026 by rpki-client