$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5b56d346-70f9-33c6-9a88-27cee1cd641c.roa File: 5b56d346-70f9-33c6-9a88-27cee1cd641c.roa (raw, json) Hash identifier: G0PSg7sw6tGFQl85Qi5qcq8SZyGSaz/T9P37ykiuP1M= Subject key identifier: 8C:DB:4D:7E:1A:BC:D0:B6:92:39:AE:6C:45:66:C5:17:73:E2:0E:11 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D316F6929D2602F6D22137A80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5b56d346-70f9-33c6-9a88-27cee1cd641c.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:69:29:d2:60:2f:6d:22:13:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=1d768df6-a3c0-4186-b487-448d83c07aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:ee:cd:51:4f:10:fb:5c:98:cb:c9:05:50: 74:f2:f5:50:5a:af:c6:63:ec:d2:68:07:f0:5d:39: c0:fd:a3:a5:12:85:70:2d:0c:8c:95:bc:6c:d8:67: 45:ee:d0:fc:30:d8:26:25:a3:d2:26:f8:06:5b:a3: f2:91:bd:80:cd:de:30:99:77:eb:18:7f:18:e8:f9: 71:69:40:19:bb:7d:0d:29:57:61:f2:b7:91:21:56: bf:24:9b:05:d3:ea:a3:1d:a2:ab:27:ab:d2:c5:00: 72:eb:65:1d:28:85:0a:b1:78:ba:45:d1:0e:59:ee: 2b:a7:ee:97:ea:0c:ca:57:57:ef:28:27:71:ca:21: 24:b1:6e:5f:6f:4e:bd:9f:c8:f9:a6:cc:42:d7:88: c0:5f:4b:26:d3:f4:6d:99:36:88:15:f8:9f:37:2f: 07:61:5a:87:44:a8:63:7a:5b:f2:ff:7f:cd:c4:9a: 19:4a:fc:05:0c:9c:15:27:69:54:77:14:d5:03:54: 97:95:f4:fa:a0:da:44:7b:02:19:29:53:0a:d6:38: 7c:fe:e7:e3:b0:5d:b6:98:ab:b1:8e:e3:88:b3:e7: a5:dc:9c:6b:9d:a6:29:3c:fd:7d:9d:96:99:f8:6a: c3:0e:3a:a6:30:cc:d6:7d:16:c5:88:a9:3b:3f:ee: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DB:4D:7E:1A:BC:D0:B6:92:39:AE:6C:45:66:C5:17:73:E2:0E:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5b56d346-70f9-33c6-9a88-27cee1cd641c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:17:36:f5:50:28:b2:bd:9f:e3:e3:2f:1f:1b:3f:08:8d:9c: 02:d6:0e:7d:a2:ee:fd:3c:87:08:cb:43:ab:4f:e4:ae:de:5d: 0d:6d:7a:c2:a0:2c:3b:46:4f:ca:cc:14:7e:b1:12:f1:f5:e2: 14:34:81:87:8c:6d:c1:35:61:cd:e5:6c:70:84:4d:71:cc:9a: 37:2d:a8:3c:f1:dd:b3:61:7f:a6:10:8c:8a:d0:77:0f:d2:c1: 5b:15:38:74:ae:f5:e8:73:ac:3b:71:4b:e5:cf:f4:e4:9a:e6: 10:1b:8c:64:7e:98:58:a3:68:ef:b7:2e:a6:1d:2b:fb:75:3d: 4f:93:5f:b5:6d:2c:39:60:a4:07:f8:6d:c2:9b:e8:a3:dc:f2: 1f:d9:7e:8d:52:86:20:14:f2:61:0f:73:32:72:55:b5:a5:78: 75:f8:15:e5:ea:6c:a0:43:7e:9e:a9:a6:09:57:24:71:a3:06: e6:93:6b:6f:72:f7:5b:3d:36:39:ac:87:5f:57:91:90:c5:89: 94:03:f9:07:a5:30:d0:57:c3:ef:99:4c:5f:f7:3d:11:0b:35: 44:1c:b3:1f:d6:d8:a6:b8:4d:7b:4d:ed:05:f6:ab:3a:4c:90: d5:20:d1:74:ff:9b:4a:12:ad:02:78:b6:cd:44:a4:3e:13:77: 11:2c:39:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2kp0mAvbSITeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MWQ3NjhkZjYtYTNjMC00MTg2LWI0ODctNDQ4ZDgzYzA3YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xjuzVFPEPtcmMvJBVB08vVQWq/GY+zSaAfw XTnA/aOlEoVwLQyMlbxs2GdF7tD8MNgmJaPSJvgGW6Pykb2Azd4wmXfrGH8Y6Plx aUAZu30NKVdh8reRIVa/JJsF0+qjHaKrJ6vSxQBy62UdKIUKsXi6RdEOWe4rp+6X 6gzKV1fvKCdxyiEksW5fb069n8j5psxC14jAX0sm0/RtmTaIFfifNy8HYVqHRKhj elvy/3/NxJoZSvwFDJwVJ2lUdxTVA1SXlfT6oNpEewIZKVMK1jh8/ufjsF22mKux juOIs+el3JxrnaYpPP19nZaZ+GrDDjqmMMzWfRbFiKk7P+7yBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzbTX4avNC2kjmubEVmxRdz4g4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWI1NmQzNDYtNzBmOS0z M2M2LTlhODgtMjdjZWUxY2Q2NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsXNvVQKLK9n+PjLx8bPwiNnALWDn2i7v08hwjLQ6tP5K7eXQ1tesKg LDtGT8rMFH6xEvH14hQ0gYeMbcE1Yc3lbHCETXHMmjctqDzx3bNhf6YQjIrQdw/S wVsVOHSu9ehzrDtxS+XP9OSa5hAbjGR+mFijaO+3LqYdK/t1PU+TX7VtLDlgpAf4 bcKb6KPc8h/Zfo1ShiAU8mEPczJyVbWleHX4FeXqbKBDfp6ppglXJHGjBuaTa29y 91s9Njmsh19XkZDFiZQD+QelMNBXw++ZTF/3PRELNUQcsx/W2Ka4TXtN7QX2qzpM kNUg0XT/m0oSrQJ4ts1EpD4TdxEsOdI= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:44 2026 by rpki-client