$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a2025e09-2d87-34d9-b8f3-5e73b0f13494.roa File: a2025e09-2d87-34d9-b8f3-5e73b0f13494.roa (raw, json) Hash identifier: oPvr4rKSxI3WlZmaHuwJT5Nw+r9HXpjUj/vIPrxCnlk= Subject key identifier: DF:C9:4D:3E:03:75:5D:E5:AA:58:BF:8B:F5:84:DE:1B:27:26:FB:D8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F549D5EBD93DF703B8DC5F900 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a2025e09-2d87-34d9-b8f3-5e73b0f13494.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5e:bd:93:df:70:3b:8d:c5:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=ec0c345a-c393-49e3-846f-b9a0fca3a659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:b8:8b:f4:22:38:34:a9:eb:5c:b6:9a:7e: ea:f4:44:d0:a1:6b:63:ee:5b:18:00:8a:7d:ff:50: ca:5e:b2:89:51:28:73:76:b9:e8:4d:27:3d:36:bb: f3:09:9c:78:11:33:ed:fb:bb:4d:39:ec:08:38:d0: a9:c6:a9:35:ea:39:26:67:d5:33:c2:cb:e6:3a:52: a9:58:62:09:d7:87:1d:38:c4:84:01:38:fa:94:11: 15:56:f0:3b:bb:50:21:4f:65:4f:0e:6c:c0:e6:78: fe:9a:9d:79:09:c2:1b:84:4a:74:33:c8:2c:ea:16: 5d:54:87:8f:d4:68:71:24:a7:57:06:10:16:ed:1d: 8b:0a:88:8a:2f:7e:24:7c:02:fc:37:ec:24:fc:7d: 59:95:d9:4f:9e:fd:82:7e:67:d1:56:b9:05:bd:eb: 87:d0:77:fe:2b:c3:ba:cf:fd:c5:f2:a3:47:f2:5c: c9:60:8b:8b:76:e1:25:c5:86:6b:75:4f:13:70:4b: 85:22:cb:3b:0a:32:fa:7d:d6:dc:db:31:63:19:7c: b4:c4:2b:52:eb:ad:e7:91:e9:3f:1b:4a:56:5d:86: 16:7b:3a:d5:22:fa:af:f1:e7:04:2e:0b:b1:6a:b7: 17:f8:e5:be:0b:5a:0d:67:f3:7e:31:ba:31:93:03: 9a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C9:4D:3E:03:75:5D:E5:AA:58:BF:8B:F5:84:DE:1B:27:26:FB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a2025e09-2d87-34d9-b8f3-5e73b0f13494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:57:fa:63:03:6d:2c:b1:ef:19:be:be:a9:77:89:ff:30:88: 60:15:7e:16:fd:c6:cc:0e:b0:01:23:ba:f9:cf:d1:a2:0d:d0: 07:31:ce:95:49:b0:8f:fc:87:d5:9f:b4:c1:3b:59:de:ed:8a: 77:a6:7f:be:04:08:36:02:2a:7c:52:69:01:48:db:f1:5c:af: 98:b5:f0:93:87:16:10:a9:ea:ed:08:df:c7:5c:95:97:82:86: 67:d0:bb:44:ab:59:17:d7:52:49:95:af:81:12:6a:b7:fb:a2: 0c:e3:a8:0d:af:f0:3f:8f:8b:fb:6e:b5:f8:76:d7:8f:22:ad: db:4a:6a:5d:63:ab:ee:9d:da:8b:28:2f:f5:31:a6:dc:90:fe: f6:87:a3:9e:f5:af:f4:e8:c5:7c:33:c1:33:8f:69:1e:95:b8: a4:85:f9:23:c9:4b:23:e4:14:58:43:7a:1d:2f:e0:cf:73:b0: 79:cb:99:28:5f:1a:9f:c5:2d:ce:f7:b5:88:a2:e8:2e:e8:9e: 06:bd:f2:e4:bf:21:6e:ae:a2:6f:75:65:26:da:b9:32:90:9d: 8f:61:06:da:ad:c8:a9:3a:1d:be:ec:dd:ca:1a:93:e2:20:b7: a4:c2:d4:ce:c1:e3:cf:3b:d5:d0:8e:81:c1:8c:18:0d:a4:60: 5d:dd:49:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnV69k99wO43F+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZWMwYzM0NWEtYzM5My00OWUzLTg0NmYtYjlhMGZjYTNhNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4O4i/QiODSp61y2mn7q9ETQoWtj7lsYAIp9 /1DKXrKJUShzdrnoTSc9NrvzCZx4ETPt+7tNOewIONCpxqk16jkmZ9UzwsvmOlKp WGIJ14cdOMSEATj6lBEVVvA7u1AhT2VPDmzA5nj+mp15CcIbhEp0M8gs6hZdVIeP 1GhxJKdXBhAW7R2LCoiKL34kfAL8N+wk/H1ZldlPnv2CfmfRVrkFveuH0Hf+K8O6 z/3F8qNH8lzJYIuLduElxYZrdU8TcEuFIss7CjL6fdbc2zFjGXy0xCtS663nkek/ G0pWXYYWezrVIvqv8ecELguxarcX+OW+C1oNZ/N+MboxkwOaiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/JTT4DdV3lqli/i/WE3hsnJvvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTIwMjVlMDktMmQ4Ny0z NGQ5LWI4ZjMtNWU3M2IwZjEzNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJX+mMDbSyx7xm+vql3if8wiGAVfhb9xswOsAEjuvnP0aIN0AcxzpVJ sI/8h9WftME7Wd7tinemf74ECDYCKnxSaQFI2/Fcr5i18JOHFhCp6u0I38dclZeC hmfQu0SrWRfXUkmVr4ESarf7ogzjqA2v8D+Pi/tutfh2148irdtKal1jq+6d2oso L/UxptyQ/vaHo571r/ToxXwzwTOPaR6VuKSF+SPJSyPkFFhDeh0v4M9zsHnLmShf Gp/FLc73tYii6C7onga98uS/IW6uom91ZSbauTKQnY9hBtqtyKk6Hb7s3coak+Ig t6TC1M7B48871dCOgcGMGA2kYF3dSbI= -----END CERTIFICATE-----Generated at Sun Oct 4 22:17:13 2026 by rpki-client