$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991fb43d-159e-3eca-805f-38c7ba72120b.roa File: 991fb43d-159e-3eca-805f-38c7ba72120b.roa (raw, json) Hash identifier: uF0WtZrqmo8OZBPjK/g8Ko2JyWeYp3hv2RdT/rKXfmI= Subject key identifier: 8C:C2:8E:5A:05:4F:AD:8F:2D:77:36:01:E5:9B:DE:21:ED:B4:74:A9 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D3704B9711369A8FC5BC5D480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991fb43d-159e-3eca-805f-38c7ba72120b.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:b9:71:13:69:a8:fc:5b:c5:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=f9a4d358-9c48-453a-b287-0d67741834f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:de:1e:94:bb:be:96:24:6f:c3:ce:0e:6c: 29:ab:07:13:bf:f1:f1:53:ad:31:04:3d:bd:34:72: 4c:2f:ff:e1:12:4d:c2:b7:ba:33:4d:70:56:ea:67: d6:db:35:7e:0e:77:5b:70:8b:c4:ab:10:ae:ad:0c: d0:b4:22:23:73:27:04:19:23:c7:71:e3:b1:1b:63: f3:cb:7f:f7:64:52:8c:23:7a:8a:76:7e:bb:94:34: 9a:f6:94:81:08:e1:fd:d5:99:73:a6:ba:38:f5:27: cf:34:8f:f6:1c:87:bf:bc:c8:7b:89:b2:d0:60:26: 72:d3:9b:74:03:40:cc:59:1e:b8:7d:dc:37:d3:9b: c5:34:ee:cb:6a:14:b5:14:02:76:e1:b1:1a:00:3a: 9e:7d:66:15:50:f0:f1:df:9e:f9:89:d2:7b:65:78: 15:67:e5:c9:e5:3c:f0:f0:6d:5c:a4:70:73:63:d6: 2c:6f:a8:41:fb:30:17:24:3e:28:c3:fd:22:01:81: 53:0d:df:80:ed:cf:bb:34:fa:cf:92:b5:76:1b:7c: a8:c3:66:ca:2b:37:0f:8e:a2:16:0e:c5:cf:1c:39: 20:3e:be:f6:f2:52:a9:22:f0:a5:87:53:82:f1:b5: 66:a4:75:77:b3:dc:19:94:ee:33:af:ef:ae:a8:cb: 9d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C2:8E:5A:05:4F:AD:8F:2D:77:36:01:E5:9B:DE:21:ED:B4:74:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991fb43d-159e-3eca-805f-38c7ba72120b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:26:99:30:da:58:57:5f:41:be:e9:86:c8:8c:52:79:84:4d: a9:29:25:be:d8:d2:e4:fa:36:18:c9:95:d1:e0:7f:0b:a6:a1: 6b:cf:54:29:de:7e:f5:a5:6a:3d:e4:a3:81:eb:89:00:b7:21: 61:47:52:df:4a:58:8a:b1:e3:c3:fb:92:d9:ed:fa:bc:fd:d4: d7:fc:c5:b9:e7:cf:85:77:42:1f:71:b4:50:0c:54:5f:46:99: 33:d4:2f:b7:8f:03:d0:18:81:ac:d7:69:33:bf:38:6a:46:16: 15:94:21:38:b1:64:84:5a:72:de:b1:22:4f:2f:06:a5:a2:88: fe:a9:59:0b:fe:05:8e:57:71:b9:32:0a:da:3d:3a:0e:23:ed: 26:77:0d:6f:e0:fa:30:d8:83:35:1c:70:85:87:a3:90:cc:c6: 83:cb:82:be:2f:14:b9:e2:18:fe:f1:e5:7f:ef:18:cd:ab:f4: ff:d6:51:22:a0:63:f6:fb:bb:90:c3:79:3e:fa:70:67:04:d3: b4:5f:d8:87:77:4a:8a:d6:3e:12:9d:ee:70:d8:8a:1f:35:56: 49:f4:1f:64:58:17:e9:05:59:01:e4:94:aa:98:b6:1a:95:4f: a4:57:74:d0:5d:63:88:ee:95:17:ab:fd:17:aa:70:f6:4f:1d: fc:f6:d0:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BLlxE2mo/FvF1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk ZjlhNGQzNTgtOWM0OC00NTNhLWIyODctMGQ2Nzc0MTgzNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn7eHpS7vpYkb8PODmwpqwcTv/HxU60xBD29 NHJML//hEk3Ct7ozTXBW6mfW2zV+DndbcIvEqxCurQzQtCIjcycEGSPHceOxG2Pz y3/3ZFKMI3qKdn67lDSa9pSBCOH91Zlzpro49SfPNI/2HIe/vMh7ibLQYCZy05t0 A0DMWR64fdw305vFNO7LahS1FAJ24bEaADqefWYVUPDx3575idJ7ZXgVZ+XJ5Tzw 8G1cpHBzY9Ysb6hB+zAXJD4ow/0iAYFTDd+A7c+7NPrPkrV2G3yow2bKKzcPjqIW DsXPHDkgPr728lKpIvClh1OC8bVmpHV3s9wZlO4zr++uqMud/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzCjloFT62PLXc2AeWb3iHttHSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTkxZmI0M2QtMTU5ZS0z ZWNhLTgwNWYtMzhjN2JhNzIxMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUmmTDaWFdfQb7phsiMUnmETakpJb7Y0uT6NhjJldHgfwumoWvPVCne fvWlaj3ko4HriQC3IWFHUt9KWIqx48P7ktnt+rz91Nf8xbnnz4V3Qh9xtFAMVF9G mTPUL7ePA9AYgazXaTO/OGpGFhWUITixZIRact6xIk8vBqWiiP6pWQv+BY5Xcbky Cto9Og4j7SZ3DW/g+jDYgzUccIWHo5DMxoPLgr4vFLniGP7x5X/vGM2r9P/WUSKg Y/b7u5DDeT76cGcE07Rf2Id3SorWPhKd7nDYih81Vkn0H2RYF+kFWQHklKqYthqV T6RXdNBdY4julRer/ReqcPZPHfz20LI= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:57 2026 by rpki-client