$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/589f5562-29a6-3f48-8fba-2637acb5388e.roa File: 589f5562-29a6-3f48-8fba-2637acb5388e.roa (raw, json) Hash identifier: 8OJ4FJ52s+/tJQoH17wUl02En4wHsaflaxpRa+zNH/I= Subject key identifier: 7A:0E:E2:04:7D:FF:6D:8C:6B:F3:9B:CB:E2:A9:88:DF:60:84:3E:9C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D32D4D36FD6DA4E0E33143380 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/589f5562-29a6-3f48-8fba-2637acb5388e.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 23473 IP address blocks: 153.33.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:d3:6f:d6:da:4e:0e:33:14:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=e7c830a4-fab4-44a7-b0f6-ef4cd72a2712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:4f:6a:09:8c:57:18:46:16:c2:11:3b:3c: 1b:ca:c7:ee:07:ea:2e:6f:bd:89:f2:f6:05:4a:44: a2:3e:aa:48:32:fe:d1:a9:67:ea:54:d9:72:ca:82: 53:4c:9b:98:23:a2:0d:8c:34:73:7a:b1:49:ea:65: be:f8:80:fb:72:df:ed:2f:64:42:db:c3:a8:64:78: cf:dd:90:db:75:bb:5f:39:b8:79:df:db:90:46:58: 24:b0:31:51:bc:65:75:91:03:8f:93:a6:0c:e0:38: d2:79:9b:ed:a1:de:09:66:e1:f1:d6:c1:8d:91:40: d6:23:7d:56:7e:71:aa:37:19:e1:42:83:24:4e:8e: 78:42:34:54:b8:f0:0e:bc:e6:4c:ac:95:75:9a:ac: 83:75:64:7a:43:83:65:91:91:2e:da:3d:aa:fa:d8: a5:89:38:74:d8:27:76:0d:f9:60:ac:24:9e:85:f1: 6b:b6:20:71:01:f4:d3:8a:aa:06:05:2d:d0:31:98: 5c:ae:c7:d2:06:7b:16:aa:0c:bd:88:8e:d0:fc:56: 75:02:99:09:4f:b3:25:58:ac:1e:27:b9:0a:51:99: d7:05:94:ec:32:6d:d6:76:e6:35:b8:16:74:20:06: f1:54:06:33:31:ca:8b:0a:c7:3b:93:10:d2:8f:34: db:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0E:E2:04:7D:FF:6D:8C:6B:F3:9B:CB:E2:A9:88:DF:60:84:3E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/589f5562-29a6-3f48-8fba-2637acb5388e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6f:c9:a8:55:47:d0:7f:82:63:dd:6f:40:24:a5:6d:87:39: ed:eb:59:4e:8b:60:86:e3:81:a8:86:9f:be:0d:63:91:66:80: db:ad:8b:d7:21:58:21:55:81:56:3e:73:9b:f7:64:a1:4a:b2: 81:80:8c:61:72:43:58:59:60:88:35:63:a1:ec:75:b1:c8:6b: 22:66:84:f1:60:0e:37:98:95:7d:91:10:94:6a:8d:52:20:a5: f6:65:ee:8e:a7:90:09:81:56:b6:ef:6f:e9:35:f1:8f:1d:ee: 6e:87:39:39:50:5b:3c:37:ba:0b:60:d3:91:6e:8b:2c:5b:c2: 9b:66:19:c4:40:08:dc:dd:20:1b:96:a6:ef:cd:da:00:3e:b9: c7:78:b2:7d:b7:c6:f8:9d:67:46:94:3f:d6:9d:47:fe:44:79: c7:1e:5f:e4:8f:00:d3:5a:49:61:31:ee:4c:c7:3f:4d:c4:4b: db:2b:0e:37:20:30:47:1c:be:db:cb:73:09:1d:b8:91:58:2a: 10:fc:bd:60:b4:53:1e:4d:37:d2:f8:9f:7c:8a:27:92:05:c1: a3:34:83:cc:df:00:9b:ed:89:10:83:59:b7:21:7f:5d:12:d9: af:2e:8d:73:cf:1b:c2:ca:f5:03:10:11:d7:01:37:17:ba:fa: b1:09:86:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1NNv1tpODjMUM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZTdjODMwYTQtZmFiNC00NGE3LWIwZjYtZWY0Y2Q3MmEyNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzxPagmMVxhGFsIROzwbysfuB+oub72J8vYF SkSiPqpIMv7RqWfqVNlyyoJTTJuYI6INjDRzerFJ6mW++ID7ct/tL2RC28OoZHjP 3ZDbdbtfObh539uQRlgksDFRvGV1kQOPk6YM4DjSeZvtod4JZuHx1sGNkUDWI31W fnGqNxnhQoMkTo54QjRUuPAOvOZMrJV1mqyDdWR6Q4NlkZEu2j2q+tiliTh02Cd2 DflgrCSehfFrtiBxAfTTiqoGBS3QMZhcrsfSBnsWqgy9iI7Q/FZ1ApkJT7MlWKwe J7kKUZnXBZTsMm3WduY1uBZ0IAbxVAYzMcqLCsc7kxDSjzTbGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoO4gR9/22Ma/Oby+KpiN9ghD6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNTg5ZjU1NjItMjlhNi0z ZjQ4LThmYmEtMjYzN2FjYjUzODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJvyahVR9B/gmPdb0AkpW2HOe3rWU6LYIbjgaiGn74NY5FmgNuti9ch WCFVgVY+c5v3ZKFKsoGAjGFyQ1hZYIg1Y6HsdbHIayJmhPFgDjeYlX2REJRqjVIg pfZl7o6nkAmBVrbvb+k18Y8d7m6HOTlQWzw3ugtg05FuiyxbwptmGcRACNzdIBuW pu/N2gA+ucd4sn23xvidZ0aUP9adR/5EecceX+SPANNaSWEx7kzHP03ES9srDjcg MEccvtvLcwkduJFYKhD8vWC0Ux5NN9L4n3yKJ5IFwaM0g8zfAJvtiRCDWbchf10S 2a8ujXPPG8LK9QMQEdcBNxe6+rEJhig= -----END CERTIFICATE-----Generated at Sat Mar 21 20:56:48 2026 by rpki-client