$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/96071e4d-94e8-3e9a-b9c4-c8d5be49b5ee.roa File: 96071e4d-94e8-3e9a-b9c4-c8d5be49b5ee.roa (raw, json) Hash identifier: J0dyCADuiR8a/5NcIEJS+XUvRZq7TznLjyVwAXFnfW8= Subject key identifier: 80:C1:54:9C:2A:A5:14:05:A8:C8:07:A0:0A:ED:65:2F:29:4B:11:FA Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D316F69797A19E6641CC61180 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/96071e4d-94e8-3e9a-b9c4-c8d5be49b5ee.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:69:79:7a:19:e6:64:1c:c6:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=08aee969-b963-4a3c-af6a-31b488f32697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:91:0e:1d:42:d1:d1:b8:62:4b:f6:fe:b2: 8e:8e:4a:73:51:7b:6b:1b:aa:82:8c:17:b4:dc:90: 7f:1d:ba:47:c3:56:25:bb:3a:b6:34:ce:6e:79:b1: 4d:08:28:1c:02:53:9c:1e:7d:66:88:50:69:69:04: 67:fb:53:1f:81:95:e0:e9:da:21:c5:2a:6e:7e:d4: 87:c2:1b:e8:11:ca:31:42:42:b7:7d:62:d2:83:60: af:98:65:7a:81:e6:da:df:f6:84:50:b5:ce:3c:41: a3:d5:7c:ad:d7:ad:3c:56:7e:e0:ad:aa:f7:a4:d2: f1:3b:c2:4b:05:79:c2:94:75:74:b1:c6:32:8a:fc: fd:bf:54:a4:b9:6b:bf:ee:1f:d5:1d:81:9d:61:37: db:80:0e:57:85:22:43:9f:fd:e3:6c:b2:e7:7d:69: fc:bd:18:50:88:d2:7d:43:30:ae:44:3a:3c:f4:c0: 65:2d:d1:a6:ea:91:37:d8:79:fb:53:2d:a3:08:53: b9:a2:cc:86:41:a6:b0:51:ad:7b:dd:98:bf:37:cc: ab:96:ee:22:4b:a9:fd:ea:fb:fe:d6:c7:2c:4e:2b: f8:74:a3:b7:29:bb:e7:4d:7e:6a:0e:1c:42:46:4c: c2:60:85:23:f4:62:18:09:74:6e:ee:eb:03:4a:00: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C1:54:9C:2A:A5:14:05:A8:C8:07:A0:0A:ED:65:2F:29:4B:11:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/96071e4d-94e8-3e9a-b9c4-c8d5be49b5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:1e:2e:43:d3:0a:f4:96:a0:39:62:70:7a:90:88:4a:b9:f2: 77:21:b1:2f:3e:67:d1:10:bf:e1:f2:e0:3c:b5:bd:9d:6c:12: b9:bf:fd:03:8d:6d:fa:f6:6b:7f:e2:ac:c0:12:cc:ce:0b:d9: 13:ce:c2:5a:b5:c5:95:46:44:5b:d8:fc:b1:01:20:aa:80:c6: 46:be:1f:fa:8f:00:d2:5d:1a:d5:ad:f7:5f:52:98:fc:9b:37: 6b:42:57:e8:bd:a7:ea:55:d5:fa:e9:96:32:cd:1e:c5:01:31: 0b:a7:4d:1c:ac:ab:78:77:a9:e3:dd:e8:65:66:f6:e6:cb:02: d6:a4:40:e8:96:36:e5:e1:fb:5d:3b:1e:ee:38:0b:16:dc:bd: 97:b9:7e:95:f8:da:bb:7d:39:f9:a3:4b:f2:ae:fb:90:36:e5: 34:14:85:b9:10:0f:ce:a2:cf:2d:2f:f2:e2:a2:aa:15:8e:1a: 56:8e:9f:31:ce:14:f2:07:6c:2b:c1:22:53:01:8f:99:2c:09: c4:4e:73:6b:de:8c:d3:97:42:94:92:74:4d:da:42:68:28:3f: 0f:3f:18:51:ff:d6:18:48:4c:68:92:cc:34:a9:e2:61:6a:1c: d3:99:12:97:10:dd:2a:de:48:a7:5d:cf:50:6d:5a:4f:6b:e9: e3:27:42:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2l5ehnmZBzGEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MDhhZWU5NjktYjk2My00YTNjLWFmNmEtMzFiNDg4ZjMyNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdSRDh1C0dG4Ykv2/rKOjkpzUXtrG6qCjBe0 3JB/HbpHw1Yluzq2NM5uebFNCCgcAlOcHn1miFBpaQRn+1MfgZXg6dohxSpuftSH whvoEcoxQkK3fWLSg2CvmGV6geba3/aEULXOPEGj1Xyt1608Vn7grar3pNLxO8JL BXnClHV0scYyivz9v1SkuWu/7h/VHYGdYTfbgA5XhSJDn/3jbLLnfWn8vRhQiNJ9 QzCuRDo89MBlLdGm6pE32Hn7Uy2jCFO5osyGQaawUa173Zi/N8yrlu4iS6n96vv+ 1scsTiv4dKO3KbvnTX5qDhxCRkzCYIUj9GIYCXRu7usDSgC3RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDBVJwqpRQFqMgHoArtZS8pSxH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTYwNzFlNGQtOTRlOC0z ZTlhLWI5YzQtYzhkNWJlNDliNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0eLkPTCvSWoDlicHqQiEq58nchsS8+Z9EQv+Hy4Dy1vZ1sErm//QON bfr2a3/irMASzM4L2RPOwlq1xZVGRFvY/LEBIKqAxka+H/qPANJdGtWt919SmPyb N2tCV+i9p+pV1frpljLNHsUBMQunTRysq3h3qePd6GVm9ubLAtakQOiWNuXh+107 Hu44CxbcvZe5fpX42rt9OfmjS/Ku+5A25TQUhbkQD86izy0v8uKiqhWOGlaOnzHO FPIHbCvBIlMBj5ksCcROc2vejNOXQpSSdE3aQmgoPw8/GFH/1hhITGiSzDSp4mFq HNOZEpcQ3SreSKddz1BtWk9r6eMnQsI= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:29 2026 by rpki-client