$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa File: a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa (raw, json) Hash identifier: dBFTCjEba3iY5W5Z6QxuPCkLZ77Aa/YPcyyzZ1QKUis= Subject key identifier: 20:8C:CF:ED:E1:0B:4E:20:C2:4A:52:05:56:C9:F0:9D:E1:CC:9C:E2 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D300A1DD94A68E5D5C277B980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 23473 IP address blocks: 153.33.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:1d:d9:4a:68:e5:d5:c2:77:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9c0f5cd3-2a1a-4e21-808b-89c2eef46e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:91:9f:f9:98:6e:45:a6:27:de:d0:16:56: d8:fe:fb:a3:4a:59:f0:48:29:14:7a:68:cd:aa:15: fe:5c:71:76:83:12:a2:2a:0c:57:27:9c:84:4e:a5: a0:8a:7a:45:4b:8e:05:55:b3:f9:5e:bc:9b:2e:b8: 04:b2:c7:63:96:76:e5:3c:8a:a0:6a:56:20:a8:0e: 58:6c:0f:38:1d:e5:ed:4f:b4:53:75:4e:8b:e2:6d: 3a:2c:1b:64:b5:6b:fd:fa:36:f8:fd:63:95:73:c6: 6c:78:c3:eb:11:53:b7:8e:a1:d2:9c:e3:8a:1d:ec: e1:45:15:c5:3b:53:e8:fa:19:fd:80:ce:f3:97:e0: 9f:59:95:96:88:2e:d3:8f:e4:75:eb:19:ef:0b:06: 20:e9:d4:c1:0f:51:37:8c:a7:cb:5e:69:55:14:71: df:a6:85:07:75:ee:ad:a5:ee:0c:f3:4c:db:d8:ba: d7:67:94:27:34:8a:40:2a:6d:f6:80:19:68:d9:ea: 0f:9e:d8:a4:66:b9:ab:b7:b6:f6:ae:ed:f4:31:e2: 5a:d7:73:27:5b:6c:c2:51:34:d0:a9:f9:19:e2:f3: 76:c3:24:65:66:bd:09:54:b4:25:6d:d9:d4:db:6d: 35:c2:a2:10:0e:e6:06:af:70:df:cc:f5:f6:ca:bb: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8C:CF:ED:E1:0B:4E:20:C2:4A:52:05:56:C9:F0:9D:E1:CC:9C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:dd:02:31:98:c4:ed:87:12:e3:95:03:a5:fd:09:93:86:4f: 30:86:f1:86:d5:72:f1:ba:6d:64:f0:a9:38:48:ac:66:03:99: 8e:66:70:b9:c5:6d:18:b9:dd:47:c3:17:74:e2:f5:9b:64:94: 88:3f:7d:64:c1:65:37:e0:11:f3:b6:c6:aa:45:86:3f:b1:81: 32:b8:97:a3:cb:fe:3d:7f:01:76:4a:78:d6:db:44:55:9d:a1: a7:45:f5:a7:1f:b2:1e:9d:03:8f:25:88:a9:3c:fc:2e:50:92: 29:50:81:32:07:14:a0:bb:46:6b:bd:81:ef:9a:bc:b4:e7:58: 08:87:5a:a9:ea:f6:2c:3f:bc:4e:54:d5:88:09:a8:76:dd:8d: 58:1f:a3:3d:07:5b:48:ab:93:2e:7f:73:6a:b5:7c:f5:0a:5c: 15:54:d0:3d:10:4f:6a:8a:a6:b5:96:98:f2:3f:c2:99:35:5a: 14:e6:c0:13:1a:f4:34:66:1b:19:f0:78:90:41:39:5c:cd:a3: 08:c2:ed:69:27:a2:b8:5f:e8:89:5c:2a:01:cb:c1:3a:d7:38: ef:b2:f8:3a:d2:33:9f:a1:01:89:3b:cd:b5:68:53:49:0d:c1: 68:12:3f:ab:e9:62:3a:70:a2:17:63:a8:f0:fa:35:66:02:be: cb:81:1f:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCh3ZSmjl1cJ3uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OWMwZjVjZDMtMmExYS00ZTIxLTgwOGItODljMmVlZjQ2ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnGRn/mYbkWmJ97QFlbY/vujSlnwSCkUemjN qhX+XHF2gxKiKgxXJ5yETqWginpFS44FVbP5XrybLrgEssdjlnblPIqgalYgqA5Y bA84HeXtT7RTdU6L4m06LBtktWv9+jb4/WOVc8ZseMPrEVO3jqHSnOOKHezhRRXF O1Po+hn9gM7zl+CfWZWWiC7Tj+R16xnvCwYg6dTBD1E3jKfLXmlVFHHfpoUHde6t pe4M80zb2LrXZ5QnNIpAKm32gBlo2eoPntikZrmrt7b2ru30MeJa13MnW2zCUTTQ qfkZ4vN2wyRlZr0JVLQlbdnU2201wqIQDuYGr3DfzPX2yrus1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCMz+3hC04gwkpSBVbJ8J3hzJziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTA1ZTBkYzQtMTNlZC0z ZTE2LWFjNjMtMzAzODZlNTAwNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3dAjGYxO2HEuOVA6X9CZOGTzCG8YbVcvG6bWTwqThIrGYDmY5mcLnF bRi53UfDF3Ti9ZtklIg/fWTBZTfgEfO2xqpFhj+xgTK4l6PL/j1/AXZKeNbbRFWd oadF9acfsh6dA48liKk8/C5QkilQgTIHFKC7Rmu9ge+avLTnWAiHWqnq9iw/vE5U 1YgJqHbdjVgfoz0HW0irky5/c2q1fPUKXBVU0D0QT2qKprWWmPI/wpk1WhTmwBMa 9DRmGxnweJBBOVzNowjC7Wknorhf6IlcKgHLwTrXOO+y+DrSM5+hAYk7zbVoU0kN wWgSP6vpYjpwohdjqPD6NWYCvsuBH6o= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:56 2026 by rpki-client