$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/86a1a501-2fd5-3e7f-a575-a2c4de17ca2b.roa File: 86a1a501-2fd5-3e7f-a575-a2c4de17ca2b.roa (raw, json) Hash identifier: NulFryKBBSVnWbnu+DO5U3XatEm1EUotRhHVJUa/Mq8= Subject key identifier: AD:8A:38:42:60:EB:A5:44:36:BC:1D:BE:7E:29:44:18:2B:4B:F0:9E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D32D4C90CCAE1702B8AEEB100 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/86a1a501-2fd5-3e7f-a575-a2c4de17ca2b.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 23473 IP address blocks: 153.33.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:c9:0c:ca:e1:70:2b:8a:ee:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=2a8de424-af4f-49f4-82ab-7652424a1044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:71:aa:72:27:4e:e1:71:c1:24:7b:87:c6: 70:e8:ef:d4:7a:07:0c:02:b7:d9:e8:ab:82:0a:12: 6d:54:46:6b:2e:e0:a4:6c:e0:2e:4f:e9:2a:22:42: b8:8d:88:00:31:0b:cb:e9:2e:2b:bb:fd:d1:cc:47: e2:ce:70:d8:49:48:f1:81:46:64:0b:1d:5e:9e:46: bd:c1:42:74:54:89:aa:a4:56:aa:c4:49:78:b2:02: 5d:d7:28:5d:62:44:ec:a5:62:7b:9d:2b:00:49:a3: 91:5a:e1:46:2d:c0:80:47:33:34:71:63:c5:65:2c: 0b:d7:cd:cd:d4:63:55:23:2a:52:60:37:ae:f7:fd: f2:43:df:7a:0e:70:93:9b:c3:df:26:c6:d5:4e:7a: 75:60:6a:96:ed:c1:ec:3e:ff:cd:b7:01:68:de:8f: fc:0d:8e:ce:d5:9c:e2:3e:91:c2:05:d4:82:d9:55: 21:e4:6e:b2:ca:1d:d5:1e:9c:41:0b:80:7d:d5:18: aa:94:61:9f:1b:a3:80:22:bc:2a:16:16:04:4e:05: 6e:57:37:b3:9f:20:ec:5b:b3:73:ad:00:72:0e:5e: 83:25:94:65:f6:cf:f0:79:f8:d2:c1:b5:0e:c5:58: cc:fe:d8:68:6a:0f:2b:d2:1d:e6:5f:db:dc:7c:b6: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8A:38:42:60:EB:A5:44:36:BC:1D:BE:7E:29:44:18:2B:4B:F0:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/86a1a501-2fd5-3e7f-a575-a2c4de17ca2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5d:d9:e1:0d:a0:c7:ed:f3:0a:c9:8a:4a:18:72:12:af:72: 5b:52:1f:fd:17:cd:f7:8c:4b:ff:c6:bc:22:3c:af:ab:8b:1c: 03:68:f6:c5:f9:32:9f:08:24:30:f5:fb:59:66:f3:4f:84:17: f2:06:f1:6c:cb:01:03:63:28:b6:e0:4c:de:29:8a:96:e5:8a: 7b:21:cc:48:ba:b8:66:9a:14:1f:77:04:43:50:a5:d3:32:7f: 9c:fa:c1:29:fd:c4:46:15:8f:82:c4:c7:c1:92:32:1d:fe:77: 29:de:17:8e:2d:0a:be:e2:b6:2b:ee:72:ca:a5:9b:10:b2:99: b7:0e:bd:76:c9:8d:0e:b3:3a:bb:c4:da:65:8f:36:cc:e4:15: 51:00:98:21:4e:76:86:02:86:94:8b:a5:7b:ab:99:32:30:3d: ed:89:e3:ce:69:0a:48:94:52:7b:17:c8:19:a5:4e:c4:a5:22: 9c:8d:73:6a:21:9a:b0:04:34:22:47:03:72:a8:dd:cd:31:44: 0a:eb:ec:df:34:d8:11:3b:41:01:32:74:f5:65:d0:1c:95:fa: e8:f4:69:0e:03:99:c8:1c:1d:db:ce:ec:02:02:58:af:71:f4: d1:74:ab:f2:c0:0b:43:ed:ed:6f:2c:c8:92:e8:27:28:26:47: 06:14:6f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1MkMyuFwK4rusQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk MmE4ZGU0MjQtYWY0Zi00OWY0LTgyYWItNzY1MjQyNGExMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g5xqnInTuFxwSR7h8Zw6O/UegcMArfZ6KuC ChJtVEZrLuCkbOAuT+kqIkK4jYgAMQvL6S4ru/3RzEfiznDYSUjxgUZkCx1enka9 wUJ0VImqpFaqxEl4sgJd1yhdYkTspWJ7nSsASaORWuFGLcCARzM0cWPFZSwL183N 1GNVIypSYDeu9/3yQ996DnCTm8PfJsbVTnp1YGqW7cHsPv/NtwFo3o/8DY7O1Zzi PpHCBdSC2VUh5G6yyh3VHpxBC4B91RiqlGGfG6OAIrwqFhYETgVuVzeznyDsW7Nz rQByDl6DJZRl9s/wefjSwbUOxVjM/thoag8r0h3mX9vcfLYh0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2KOEJg66VENrwdvn4pRBgrS/CeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODZhMWE1MDEtMmZkNS0z ZTdmLWE1NzUtYTJjNGRlMTdjYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9d2eENoMft8wrJikoYchKvcltSH/0XzfeMS//GvCI8r6uLHANo9sX5 Mp8IJDD1+1lm80+EF/IG8WzLAQNjKLbgTN4pipblinshzEi6uGaaFB93BENQpdMy f5z6wSn9xEYVj4LEx8GSMh3+dyneF44tCr7itivucsqlmxCymbcOvXbJjQ6zOrvE 2mWPNszkFVEAmCFOdoYChpSLpXurmTIwPe2J485pCkiUUnsXyBmlTsSlIpyNc2oh mrAENCJHA3Ko3c0xRArr7N802BE7QQEydPVl0ByV+uj0aQ4DmcgcHdvO7AICWK9x 9NF0q/LAC0Pt7W8syJLoJygmRwYUb1M= -----END CERTIFICATE-----Generated at Sat Mar 21 20:53:10 2026 by rpki-client