$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7abba210-a4eb-3be7-b495-780c2dae2e1e.roa File: 7abba210-a4eb-3be7-b495-780c2dae2e1e.roa (raw, json) Hash identifier: 2M/fuB+QH+Ji25aal2pGnM03dbh2lGpQ43RWVpGArNI= Subject key identifier: C9:97:A5:A6:9A:73:B3:6B:07:85:5C:03:F8:65:E1:20:38:76:B3:26 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D3704BB9C2FED6B9A7ED16A00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7abba210-a4eb-3be7-b495-780c2dae2e1e.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:bb:9c:2f:ed:6b:9a:7e:d1:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=a85513dc-890c-4f95-8e36-ee1394fbe74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:96:35:56:6c:6a:91:5c:79:70:61:08:52: 4e:72:ab:43:2d:02:28:6b:5c:72:12:0b:ae:4e:75: 2a:58:80:d4:f7:a2:6f:77:17:36:bf:a8:7c:ca:2c: ab:2b:7b:9f:ea:4d:be:0a:a7:de:bd:28:b9:7d:ce: f5:6c:66:cd:e3:54:63:0c:fa:f9:69:06:7c:03:94: 53:56:38:2f:81:e7:70:85:7f:1f:3b:43:ee:2e:24: 20:c1:b7:e7:f4:33:ef:14:1b:28:da:f0:b2:57:f0: 17:78:8e:1e:f2:15:c6:4c:15:61:18:c0:a9:00:45: 15:ca:5b:80:c9:83:9a:bc:55:54:e4:e0:38:78:a1: 7e:cb:c0:98:29:58:8e:e5:89:e9:79:1e:17:0f:08: aa:f4:2c:28:56:33:04:eb:eb:d1:97:59:55:4f:ac: 96:3d:30:0d:a0:ab:6f:17:b3:4d:46:7a:65:27:f6: 88:9d:55:8d:b6:1c:a1:71:f6:8a:5b:d9:b1:d2:d0: 2a:ac:98:81:37:0b:40:25:96:70:38:8a:cc:5c:23: 03:59:f6:32:8c:14:f2:e6:7d:8e:d8:35:55:9e:54: a5:fe:8b:eb:49:0d:46:63:fe:6e:70:c1:75:66:8a: 02:c6:96:84:e0:19:99:14:be:75:95:8f:a3:58:cb: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:A5:A6:9A:73:B3:6B:07:85:5C:03:F8:65:E1:20:38:76:B3:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7abba210-a4eb-3be7-b495-780c2dae2e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:8a:30:3b:76:37:ef:b5:44:3c:12:53:45:2f:b2:19:26:6e: d5:05:46:80:b7:62:d9:46:1b:98:0d:6e:80:59:74:93:0f:85: cb:ea:0f:77:73:6a:eb:41:06:de:43:36:7a:4c:46:f7:ab:ca: fa:14:03:d8:fa:31:b5:29:28:d0:e8:5e:c3:0e:35:51:01:da: 1d:6d:33:36:40:0a:e3:86:05:0d:48:f9:a2:2e:c4:a2:4d:aa: a0:ff:75:97:1a:c8:05:e7:96:4b:97:8c:8a:b5:f4:14:99:6a: 56:52:cd:6e:76:53:54:e5:69:23:6e:e1:ce:6f:64:57:ad:52: 35:49:e4:a2:d3:d3:8c:2f:96:c9:30:e0:e8:9d:36:dc:1f:e7: 91:ad:c2:28:ef:3c:27:0a:bd:b0:ab:b2:93:d3:fd:f4:68:b6: a7:b3:20:b2:dd:41:d6:64:75:4c:90:3e:25:7b:ce:c0:05:9a: 94:e9:4c:08:05:7c:cb:86:35:71:07:15:e0:a7:ac:ac:c9:42: 31:ee:dd:78:f7:7d:c4:78:ae:1f:40:c4:66:3e:db:70:ff:ab: a5:e9:fc:11:bb:92:a2:38:49:96:f5:f9:d9:46:f9:7a:c9:3c: 24:65:85:79:01:9a:de:48:7c:a5:26:b5:ee:11:8a:08:b8:93: d6:78:e6:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BLucL+1rmn7RagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk YTg1NTEzZGMtODkwYy00Zjk1LThlMzYtZWUxMzk0ZmJlNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1aWNVZsapFceXBhCFJOcqtDLQIoa1xyEguu TnUqWIDU96Jvdxc2v6h8yiyrK3uf6k2+CqfevSi5fc71bGbN41RjDPr5aQZ8A5RT VjgvgedwhX8fO0PuLiQgwbfn9DPvFBso2vCyV/AXeI4e8hXGTBVhGMCpAEUVyluA yYOavFVU5OA4eKF+y8CYKViO5YnpeR4XDwiq9CwoVjME6+vRl1lVT6yWPTANoKtv F7NNRnplJ/aInVWNthyhcfaKW9mx0tAqrJiBNwtAJZZwOIrMXCMDWfYyjBTy5n2O 2DVVnlSl/ovrSQ1GY/5ucMF1ZooCxpaE4BmZFL51lY+jWMtJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmXpaaac7NrB4VcA/hl4SA4drMmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvN2FiYmEyMTAtYTRlYi0z YmU3LWI0OTUtNzgwYzJkYWUyZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOKMDt2N++1RDwSU0UvshkmbtUFRoC3YtlGG5gNboBZdJMPhcvqD3dz autBBt5DNnpMRveryvoUA9j6MbUpKNDoXsMONVEB2h1tMzZACuOGBQ1I+aIuxKJN qqD/dZcayAXnlkuXjIq19BSZalZSzW52U1TlaSNu4c5vZFetUjVJ5KLT04wvlskw 4OidNtwf55GtwijvPCcKvbCrspPT/fRotqezILLdQdZkdUyQPiV7zsAFmpTpTAgF fMuGNXEHFeCnrKzJQjHu3Xj3fcR4rh9AxGY+23D/q6Xp/BG7kqI4SZb1+dlG+XrJ PCRlhXkBmt5IfKUmte4Rigi4k9Z45h4= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:22 2026 by rpki-client