$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa File: 99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa (raw, json) Hash identifier: 4i9mG/4tXvBpiB62FhwX/oRqkY7tY/PM543CqD4/+qA= Subject key identifier: 6B:5D:06:F9:95:B8:E0:B9:BA:08:25:9E:55:02:20:B5:FF:80:EE:17 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF9B42FF7521F64446F580 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9b:42:ff:75:21:f6:44:46:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=40b8ed1d-b704-4085-b278-6ab9eb9c0eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:ff:18:bc:27:e9:3c:ba:7f:66:9c:69:87: 8f:2a:bd:f4:b0:41:49:80:33:89:88:4b:c7:8f:9d: 3b:55:ff:b3:9c:da:8a:8a:2c:6f:6d:4c:88:2b:ff: fa:ad:f1:4e:3e:4d:7b:3b:a8:81:4a:d8:f2:34:4c: 4e:d7:c3:fc:3e:b3:82:b9:92:39:92:a1:de:4c:ce: 4f:38:db:7d:85:93:5b:bf:78:6c:41:6f:f5:19:74: d6:c7:9c:06:fc:a6:b2:53:e7:a5:fa:94:0e:8d:f9: 42:12:a0:41:ae:ea:f9:31:5b:c3:50:df:66:1c:e0: 07:67:08:86:99:24:ff:b9:e5:ff:e3:32:cc:82:ae: 8b:41:dc:21:42:41:d3:1f:f3:e0:65:ed:fc:04:87: 03:5a:d1:33:93:f2:25:53:fc:a2:9b:41:68:00:c7: e7:75:d8:81:4f:a4:8e:f6:1d:7d:b2:be:ea:c0:cc: 8d:ce:c1:9e:c1:fd:5f:cc:6b:0d:74:c1:e9:b1:c5: 17:54:2d:50:d1:e9:4b:e9:da:0b:5c:d1:5a:f9:f0: 67:02:5e:84:7d:41:cc:24:ac:42:ec:b3:ff:04:f1: 2c:e8:74:ad:a4:07:35:dc:72:6d:67:29:07:b6:f5: e3:59:01:21:7e:39:d3:bf:59:0d:1a:ee:c8:53:63: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5D:06:F9:95:B8:E0:B9:BA:08:25:9E:55:02:20:B5:FF:80:EE:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b5:c2:c0:ca:f3:da:b8:fb:d4:06:2c:b4:d3:5a:44:97:dc: cd:01:98:a4:97:6d:8c:d7:d8:1b:80:d5:2c:2f:03:f3:63:74: 90:64:de:1f:e3:7a:2a:ba:b4:75:54:af:2e:88:6a:fa:8a:fb: a4:4e:c2:4b:7e:ee:c4:93:d0:ba:3b:fe:c3:e8:89:f6:8d:82: 1e:c4:c3:be:74:49:8d:8e:99:1d:77:93:49:9b:2f:b2:9e:7e: ba:56:29:4e:96:2f:8a:c2:4d:de:f7:a0:31:7a:ab:ac:2a:da: d9:3a:e7:c8:69:3f:dc:c7:be:1b:a6:15:85:57:0e:d2:7c:73: 71:64:cd:45:c6:42:5e:af:96:52:6b:a1:50:c1:92:dc:9f:97: 3e:b1:03:4f:02:31:19:3c:bf:8b:9b:c7:2f:b7:0d:8c:8e:0d: 0c:83:26:8f:b8:c5:75:a6:ca:a0:42:17:b9:a7:d0:68:c2:17: c4:56:42:f2:c9:a5:bb:36:65:60:ac:a3:b1:98:15:06:13:58: 7a:79:88:04:7a:6a:f2:ac:25:4f:63:ae:e5:ab:6d:35:26:e4: 95:ec:09:c9:19:31:4a:38:39:98:31:f6:be:ee:ac:e4:a9:de: 5f:e3:31:3b:1d:5e:d2:63:c7:2e:1e:0f:08:94:a7:73:ef:0b: ce:6f:0b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5tC/3Uh9kRG9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NDBiOGVkMWQtYjcwNC00MDg1LWIyNzgtNmFiOWViOWMwZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1z/GLwn6Ty6f2acaYePKr30sEFJgDOJiEvH j507Vf+znNqKiixvbUyIK//6rfFOPk17O6iBStjyNExO18P8PrOCuZI5kqHeTM5P ONt9hZNbv3hsQW/1GXTWx5wG/KayU+el+pQOjflCEqBBrur5MVvDUN9mHOAHZwiG mST/ueX/4zLMgq6LQdwhQkHTH/PgZe38BIcDWtEzk/IlU/yim0FoAMfnddiBT6SO 9h19sr7qwMyNzsGewf1fzGsNdMHpscUXVC1Q0elL6doLXNFa+fBnAl6EfUHMJKxC 7LP/BPEs6HStpAc13HJtZykHtvXjWQEhfjnTv1kNGu7IU2PftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtdBvmVuOC5ugglnlUCILX/gO4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTlkOWRmNTYtMjkyMS0z ZTM5LWFiNGItZmIxYWZhZjZjMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq1wsDK89q4+9QGLLTTWkSX3M0BmKSXbYzX2BuA1SwvA/NjdJBk3h/j eiq6tHVUry6IavqK+6ROwkt+7sST0Lo7/sPoifaNgh7Ew750SY2OmR13k0mbL7Ke frpWKU6WL4rCTd73oDF6q6wq2tk658hpP9zHvhumFYVXDtJ8c3FkzUXGQl6vllJr oVDBktyflz6xA08CMRk8v4ubxy+3DYyODQyDJo+4xXWmyqBCF7mn0GjCF8RWQvLJ pbs2ZWCso7GYFQYTWHp5iAR6avKsJU9jruWrbTUm5JXsCckZMUo4OZgx9r7urOSp 3l/jMTsdXtJjxy4eDwiUp3PvC85vCxQ= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:48 2026 by rpki-client