$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/904aa8fc-7cd9-35c1-827c-8f3c022df480.roa File: 904aa8fc-7cd9-35c1-827c-8f3c022df480.roa (raw, json) Hash identifier: 67bHuyjER5XAdREyoKuS3dK7EsDFZ5tfUMQjAeV/Z/M= Subject key identifier: F7:C2:30:DC:B2:88:57:78:A3:83:A2:EB:25:CB:09:C2:DA:46:9E:F3 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D3704BB079BF51A45B3E4A910 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/904aa8fc-7cd9-35c1-827c-8f3c022df480.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:bb:07:9b:f5:1a:45:b3:e4:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=e582c679-3c6f-4055-88a7-7f528e37c249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3b:bb:1b:d3:db:2d:07:b5:93:7e:c2:aa:3f: b0:61:29:9d:c5:a1:cd:32:d1:aa:98:9c:4b:5d:c0: 62:81:43:0b:f1:5e:76:57:9a:7c:28:f3:35:cf:67: b2:71:34:53:06:96:03:50:53:8a:50:8e:68:20:96: 84:e4:87:a3:69:49:a8:33:88:59:03:c3:ee:24:5e: d5:1e:ee:f9:f0:85:f4:9f:19:5b:fb:bc:51:a4:98: eb:02:2f:e3:92:ba:a1:e5:e6:9f:7f:42:9a:91:4f: 7d:d9:37:9c:dc:98:f7:08:e4:dc:84:f8:0f:ed:8d: 15:5a:99:fa:98:59:d9:7d:d7:46:e6:ee:7e:f2:30: 39:55:e7:9f:b2:ec:77:1b:d5:33:81:c4:04:9d:0f: f5:ae:17:dd:8a:2d:50:56:bc:14:57:8e:3c:a8:16: 9b:7b:08:5a:ca:ae:5b:2c:9d:d9:45:de:02:4f:bb: 1d:d0:02:8b:0c:06:8b:3a:ea:1d:16:45:2c:40:5e: ea:d8:f6:ba:8b:14:4c:f3:2f:22:95:b4:89:29:62: fb:dc:81:8e:38:8a:61:09:a5:92:90:dd:22:a1:5e: e0:eb:98:c6:47:51:c2:1c:b7:ad:6b:46:30:cf:cb: 9c:1a:1c:66:86:74:f0:6b:69:79:21:52:0b:f9:a0: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C2:30:DC:B2:88:57:78:A3:83:A2:EB:25:CB:09:C2:DA:46:9E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/904aa8fc-7cd9-35c1-827c-8f3c022df480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:84:7f:e0:71:60:e2:e5:3d:ff:8e:d0:13:56:df:39:57:34: d4:1f:31:7d:88:e2:d1:5c:a7:2b:9f:9a:2c:3e:7d:e3:e1:7a: 7d:a0:d7:f9:be:55:aa:e2:5a:8b:f0:56:f3:b3:46:29:ad:08: a8:d8:d9:52:99:c1:82:29:6a:0f:0a:37:b0:c5:c8:52:a2:c0: 95:04:0f:a0:97:a5:41:12:f9:08:0b:69:67:e9:70:53:92:eb: 09:c8:08:2d:d7:46:bc:7f:51:6b:89:96:2c:07:52:ba:5b:7b: ed:83:7f:d4:b0:50:b0:a1:71:ec:b6:4a:76:82:2f:3e:b1:90: 85:c7:16:41:64:ca:44:9c:9c:05:4f:ac:22:b1:56:39:68:48: eb:6b:dc:a5:a7:32:05:70:9d:bd:04:6d:a8:49:50:ef:12:fc: df:74:6e:52:42:a4:f6:86:db:f2:8d:8f:0b:7b:30:14:f9:97: b5:71:89:3c:90:4a:22:3f:7c:49:e6:50:11:05:f1:f3:8c:ea: b1:1d:c8:c3:da:8b:83:96:77:78:5a:b9:40:6a:d2:cd:7d:6f: 5d:86:72:3a:6c:1f:96:dc:3d:f3:40:f3:f4:c7:2e:d6:65:cb: ff:7b:e6:15:54:d9:fb:e4:b2:d9:35:05:30:27:51:ec:eb:ab: a5:51:b4:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BLsHm/UaRbPkqRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk ZTU4MmM2NzktM2M2Zi00MDU1LTg4YTctN2Y1MjhlMzdjMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTu7G9PbLQe1k37Cqj+wYSmdxaHNMtGqmJxL XcBigUML8V52V5p8KPM1z2eycTRTBpYDUFOKUI5oIJaE5IejaUmoM4hZA8PuJF7V Hu758IX0nxlb+7xRpJjrAi/jkrqh5eaff0KakU992Tec3Jj3COTchPgP7Y0VWpn6 mFnZfddG5u5+8jA5Veefsux3G9UzgcQEnQ/1rhfdii1QVrwUV448qBabewhayq5b LJ3ZRd4CT7sd0AKLDAaLOuodFkUsQF7q2Pa6ixRM8y8ilbSJKWL73IGOOIphCaWS kN0ioV7g65jGR1HCHLeta0Ywz8ucGhxmhnTwa2l5IVIL+aDvIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfCMNyyiFd4o4Oi6yXLCcLaRp7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTA0YWE4ZmMtN2NkOS0z NWMxLTgyN2MtOGYzYzAyMmRmNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaEf+BxYOLlPf+O0BNW3zlXNNQfMX2I4tFcpyufmiw+fePhen2g1/m+ VariWovwVvOzRimtCKjY2VKZwYIpag8KN7DFyFKiwJUED6CXpUES+QgLaWfpcFOS 6wnICC3XRrx/UWuJliwHUrpbe+2Df9SwULChcey2SnaCLz6xkIXHFkFkykScnAVP rCKxVjloSOtr3KWnMgVwnb0EbahJUO8S/N90blJCpPaG2/KNjwt7MBT5l7VxiTyQ SiI/fEnmUBEF8fOM6rEdyMPai4OWd3hauUBq0s19b12GcjpsH5bcPfNA8/THLtZl y/975hVU2fvkstk1BTAnUezrq6VRtMs= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:14 2026 by rpki-client