$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5ec3f6ec-6a1a-3817-8316-e0dc27d00448.roa File: 5ec3f6ec-6a1a-3817-8316-e0dc27d00448.roa (raw, json) Hash identifier: hQJH7yRF1qUVnJNlkK4QaSwPhYv/x6WnwOE0Zhoy2K8= Subject key identifier: 6A:C6:E8:8E:D0:E7:0E:7B:46:67:93:0A:4F:22:65:7D:E5:34:26:E4 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF8753A7C89248389FDD80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5ec3f6ec-6a1a-3817-8316-e0dc27d00448.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:87:53:a7:c8:92:48:38:9f:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=c7c50aca-679e-4640-a3e4-1bfaaa81a84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:d0:89:52:5f:8e:4e:68:76:29:dc:de:56: 9a:fb:e4:3f:bd:da:f1:4b:3d:b3:49:4a:45:f2:8d: c7:11:bd:1a:03:b4:0d:9f:e7:41:77:4c:47:dc:d3: e0:65:c8:a1:4c:d9:ee:4d:e0:94:df:36:80:f9:90: 0d:68:e6:6e:a3:44:4b:7b:1b:19:b7:00:01:a4:48: 38:ca:eb:b2:01:79:23:52:92:3b:8d:4b:84:df:90: 03:69:ff:fa:d0:0f:bc:f2:8c:11:d0:aa:a3:26:47: a3:bf:03:02:6e:64:c7:02:16:da:75:e1:62:f6:5c: 3e:00:35:16:0b:6b:34:23:1d:ff:92:ed:60:fc:29: 42:02:67:fd:25:1d:63:df:09:5c:1e:e7:79:2f:0e: 2e:64:8d:06:b0:3c:c2:52:60:c4:78:62:c7:cd:3d: 21:7e:bc:2d:fc:7a:f3:3f:a8:cb:1d:49:ec:fc:f5: 4d:ff:6e:ad:db:d4:79:19:c0:a3:4a:09:ba:53:2d: fb:15:df:07:18:0e:a6:ea:ba:f0:43:64:e2:5b:b8: b9:c1:0c:cd:91:56:40:6e:43:04:18:aa:1a:20:7a: ea:f6:b2:87:5d:cc:f0:87:64:c9:ea:8d:87:2b:da: 58:ec:e4:c8:67:d0:c4:b6:b9:0a:87:e8:37:2e:30: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C6:E8:8E:D0:E7:0E:7B:46:67:93:0A:4F:22:65:7D:E5:34:26:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5ec3f6ec-6a1a-3817-8316-e0dc27d00448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a9:d4:be:d7:56:27:6d:c5:48:3c:1a:52:ac:7f:25:26:54: 74:f7:e8:18:99:b5:f3:f4:e4:8e:02:a2:90:c4:41:a5:2c:01: 35:0e:6c:37:32:62:57:b9:bb:ae:59:87:aa:cc:6c:0e:26:a1: ee:e7:46:f4:9f:a0:16:94:37:26:ab:7f:95:b2:c8:0b:a0:16: 65:65:f4:20:21:2b:11:b2:a9:84:c5:21:47:40:e1:7f:c6:bd: 61:17:56:ab:f9:16:b5:f9:2f:90:54:c4:fc:e9:40:0f:06:22: 21:14:c5:a2:06:a5:62:19:22:21:ed:bb:2b:c2:b1:12:0f:b2: 3d:55:68:b4:60:30:8c:bc:98:0c:83:6b:4e:41:37:56:06:49: 3c:0b:c5:22:1b:30:8d:94:6d:1e:a1:15:52:ff:a2:c3:e6:69: 5d:5b:93:00:24:6d:c5:ea:53:cd:91:8f:83:5a:b9:be:64:b2: cc:40:f0:4d:8a:6c:70:98:7e:43:52:c2:e3:fe:89:5e:b1:8b: 1d:87:2f:72:5d:8e:b7:31:ec:84:55:54:88:0e:16:6d:fa:d8: 06:21:08:66:f4:05:ba:57:d3:5e:96:1d:ba:96:cd:b7:1b:7c: 5f:aa:65:51:3e:23:77:7a:a9:cb:a3:be:ed:50:8b:09:5d:be: a6:bc:56:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4dTp8iSSDif3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YzdjNTBhY2EtNjc5ZS00NjQwLWEzZTQtMWJmYWFhODFhODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbPQiVJfjk5odinc3laa++Q/vdrxSz2zSUpF 8o3HEb0aA7QNn+dBd0xH3NPgZcihTNnuTeCU3zaA+ZANaOZuo0RLexsZtwABpEg4 yuuyAXkjUpI7jUuE35ADaf/60A+88owR0KqjJkejvwMCbmTHAhbadeFi9lw+ADUW C2s0Ix3/ku1g/ClCAmf9JR1j3wlcHud5Lw4uZI0GsDzCUmDEeGLHzT0hfrwt/Hrz P6jLHUns/PVN/26t29R5GcCjSgm6Uy37Fd8HGA6m6rrwQ2TiW7i5wQzNkVZAbkME GKoaIHrq9rKHXczwh2TJ6o2HK9pY7OTIZ9DEtrkKh+g3LjDRgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrG6I7Q5w57RmeTCk8iZX3lNCbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWVjM2Y2ZWMtNmExYS0z ODE3LTgzMTYtZTBkYzI3ZDAwNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6p1L7XVidtxUg8GlKsfyUmVHT36BiZtfP05I4CopDEQaUsATUObDcy Yle5u65Zh6rMbA4moe7nRvSfoBaUNyarf5WyyAugFmVl9CAhKxGyqYTFIUdA4X/G vWEXVqv5FrX5L5BUxPzpQA8GIiEUxaIGpWIZIiHtuyvCsRIPsj1VaLRgMIy8mAyD a05BN1YGSTwLxSIbMI2UbR6hFVL/osPmaV1bkwAkbcXqU82Rj4Naub5kssxA8E2K bHCYfkNSwuP+iV6xix2HL3Jdjrcx7IRVVIgOFm362AYhCGb0BbpX016WHbqWzbcb fF+qZVE+I3d6qcujvu1Qiwldvqa8VjY= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:14 2026 by rpki-client