$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6f43e4f3-0e4d-3f8e-8c28-8baaee5409f4.roa File: 6f43e4f3-0e4d-3f8e-8c28-8baaee5409f4.roa (raw, json) Hash identifier: OtnfanTKzrBaaidOG+cYvew4Up7R+mmCfiDNbv6q9aY= Subject key identifier: 67:87:E5:34:C6:12:6C:31:3B:9C:65:38:4A:D8:F6:4C:88:CF:15:78 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D3704C11C04543035445EFD00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6f43e4f3-0e4d-3f8e-8c28-8baaee5409f4.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:c1:1c:04:54:30:35:44:5e:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=c932db07-6590-4667-b753-029fa021096e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:90:40:e3:c6:57:c9:ce:e5:04:d9:d9:6a:dc: 90:1f:96:ff:8f:0c:ec:97:9e:44:32:f0:96:10:55: fe:20:0b:02:d6:1a:b6:94:d7:1f:ca:24:f1:71:89: 58:3c:58:e3:b9:bd:0c:5f:33:72:0b:24:2f:27:af: 2f:da:1d:cb:b0:d6:a1:12:61:3c:9b:c4:4e:9a:9e: 41:a1:81:a8:69:c2:a7:9d:b5:ac:cc:f9:9a:37:00: e8:b4:5f:f8:99:12:73:2d:db:3f:2f:19:6a:a9:7d: 44:f3:4b:e7:ca:fb:2c:e9:72:26:56:61:16:86:13: 55:f5:16:9f:6b:1a:4e:71:98:60:6c:8d:c6:61:04: a1:c5:02:f3:ef:ec:57:44:b9:b1:92:9f:c5:fa:68: e3:56:f1:16:6c:6c:41:5d:23:27:66:42:45:8f:96: 5d:aa:a0:7e:8f:ef:e6:da:d7:1d:b3:7c:74:30:61: 21:f0:40:90:c3:93:2f:94:cb:d8:bf:13:4d:16:d8: 70:a5:94:8a:4b:25:5a:dd:47:d4:d5:18:b0:81:a8: 76:ca:1d:0a:f4:88:b4:23:e1:b0:86:30:35:15:32: 96:ff:e1:b0:5c:f9:c2:b4:c6:e6:10:34:c2:21:8a: 53:a0:f8:09:2c:d5:19:e4:0a:92:80:d7:d5:d6:da: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:87:E5:34:C6:12:6C:31:3B:9C:65:38:4A:D8:F6:4C:88:CF:15:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6f43e4f3-0e4d-3f8e-8c28-8baaee5409f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ef:df:38:d7:47:55:ab:d8:19:27:18:4c:8a:7f:8e:60:79: 78:d2:16:ea:19:34:61:59:96:0f:c3:b4:0a:75:30:eb:c9:47: ab:03:7e:c2:72:b8:90:01:67:37:a1:9e:4a:0d:0d:54:c5:b8: 79:66:78:fe:75:1a:b5:c3:45:ed:5a:ab:07:92:2e:89:90:75: 98:cc:e0:94:ef:57:b1:5d:8f:c9:73:26:75:cc:19:44:c1:b7: 5e:30:b0:b3:8a:81:74:fe:b8:fb:e7:f1:6b:e3:96:16:e5:44: 50:35:c4:9a:2f:1c:05:90:0d:b5:e1:29:bd:b9:a4:ba:7b:8e: ef:7e:2a:4d:e9:74:4b:4e:d4:a2:e0:71:68:3d:0a:02:2b:11: 45:c7:47:e0:07:b1:f6:c1:0d:1f:54:a1:06:ae:6a:1e:63:af: b5:a3:d3:57:52:b6:00:e1:9f:47:e4:0b:ad:f2:e1:2d:83:31: ab:45:91:62:2b:4a:57:c0:e3:90:b7:b5:93:f2:ae:88:1a:af: e4:5d:22:6e:ce:58:cc:3d:e8:dc:92:28:4f:e0:f0:6d:6c:11: 09:ed:ff:40:c5:9d:db:39:bd:4d:df:ac:fd:a5:ef:54:2d:08: 20:e1:76:3a:23:a7:a4:3f:6b:af:4a:21:8e:04:d1:cf:f9:aa: d6:4d:be:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BMEcBFQwNURe/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk YzkzMmRiMDctNjU5MC00NjY3LWI3NTMtMDI5ZmEwMjEwOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZBA48ZXyc7lBNnZatyQH5b/jwzsl55EMvCW EFX+IAsC1hq2lNcfyiTxcYlYPFjjub0MXzNyCyQvJ68v2h3LsNahEmE8m8ROmp5B oYGoacKnnbWszPmaNwDotF/4mRJzLds/LxlqqX1E80vnyvss6XImVmEWhhNV9Raf axpOcZhgbI3GYQShxQLz7+xXRLmxkp/F+mjjVvEWbGxBXSMnZkJFj5ZdqqB+j+/m 2tcds3x0MGEh8ECQw5MvlMvYvxNNFthwpZSKSyVa3UfU1Riwgah2yh0K9Ii0I+Gw hjA1FTKW/+GwXPnCtMbmEDTCIYpToPgJLNUZ5AqSgNfV1tr9tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeH5TTGEmwxO5xlOErY9kyIzxV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNmY0M2U0ZjMtMGU0ZC0z ZjhlLThjMjgtOGJhYWVlNTQwOWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArv3zjXR1Wr2BknGEyKf45geXjSFuoZNGFZlg/DtAp1MOvJR6sDfsJy uJABZzehnkoNDVTFuHlmeP51GrXDRe1aqweSLomQdZjM4JTvV7Fdj8lzJnXMGUTB t14wsLOKgXT+uPvn8WvjlhblRFA1xJovHAWQDbXhKb25pLp7ju9+Kk3pdEtO1KLg cWg9CgIrEUXHR+AHsfbBDR9UoQauah5jr7Wj01dStgDhn0fkC63y4S2DMatFkWIr SlfA45C3tZPyrogar+RdIm7OWMw96NySKE/g8G1sEQnt/0DFnds5vU3frP2l71Qt CCDhdjojp6Q/a69KIY4E0c/5qtZNvtU= -----END CERTIFICATE-----Generated at Sat Mar 21 20:53:11 2026 by rpki-client