$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a235c968-8850-348e-844a-c05843d535d7.roa File: a235c968-8850-348e-844a-c05843d535d7.roa (raw, json) Hash identifier: pHRoj3xNvdxXz7bsSlEPpVhiET17LB5aov7ypJovku0= Subject key identifier: 71:5C:53:16:91:80:7B:37:E8:0E:C7:56:60:CD:78:57:8B:33:BB:F9 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF9920903B21E15C930D00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a235c968-8850-348e-844a-c05843d535d7.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:99:20:90:3b:21:e1:5c:93:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=70393f1c-53d3-47a3-a65f-7ff098484db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:0c:6a:fa:a9:8a:d2:28:ec:a8:a8:49:30: 4c:59:b9:49:2b:9e:86:ff:4a:0a:25:27:fd:09:fd: 16:6c:00:66:cb:71:9b:b8:e6:ed:aa:af:a2:7b:58: 9d:1b:ba:4c:ef:4b:6d:75:8b:09:7a:01:72:b6:9f: 81:46:02:80:ba:f4:82:ea:a0:5b:0d:d1:94:46:7f: e5:53:11:d3:d9:f2:0b:3f:53:a5:d8:0c:3e:76:d4: da:bc:68:a0:17:6e:2f:86:c1:e1:dc:ce:04:1a:72: 9b:9d:62:02:bb:01:c1:4f:2a:bb:d9:0c:af:da:f9: 92:b7:57:31:f8:97:b3:e4:9e:4e:7e:8c:65:31:c7: 5e:c4:71:46:07:3b:3d:03:83:ef:26:da:c8:ec:0f: 5b:b9:71:de:b0:14:b1:5a:d5:bc:51:ee:c0:a7:47: 41:d6:7e:80:4d:3a:79:f4:7f:e8:a0:a3:db:4b:71: b2:60:6c:38:6c:dd:d1:47:7b:3e:8a:7e:0b:58:14: 5a:98:f6:34:9e:a2:bd:ec:ca:b9:a9:48:95:46:83: 12:fd:ed:f7:b4:87:a9:e7:f3:0b:73:1f:83:19:a3: 92:96:8e:b7:7c:09:44:31:bf:51:8a:93:13:70:42: 67:f2:70:3c:9c:98:a4:2c:00:11:9a:82:e8:c6:0a: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5C:53:16:91:80:7B:37:E8:0E:C7:56:60:CD:78:57:8B:33:BB:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a235c968-8850-348e-844a-c05843d535d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3e:6b:77:7b:4f:75:47:3e:eb:3c:bb:51:13:07:9e:b5:54: 15:ed:20:78:62:d3:66:1c:5c:54:f4:5b:c4:7d:b7:7f:12:96: 38:3b:ba:eb:e2:0d:e7:4d:06:b2:e2:76:a5:91:6d:a8:ee:ff: e2:34:89:1b:87:b3:35:3b:f0:b9:a9:50:ab:fd:7e:b1:4d:b4: 0a:70:df:4e:01:1e:85:57:5b:f9:a5:aa:55:7f:b5:22:58:2d: dc:5a:20:13:a9:68:f1:88:69:f1:d9:a0:fc:79:ca:4e:4a:7d: 5e:4a:63:74:46:90:84:bd:4f:50:29:2d:38:3b:0e:f0:21:d5: 7e:7a:12:29:eb:bd:67:36:01:b8:91:6b:34:b3:2c:44:e0:46: be:47:77:5f:62:60:c7:0f:41:e5:c2:79:7e:fa:94:7d:4c:81: a3:20:63:da:2e:c8:67:c1:fc:94:c9:66:32:74:a0:a9:36:cb: 00:68:db:29:e2:6c:1e:47:e7:a0:30:3a:1d:90:4e:d2:88:cb: 11:6d:0b:ac:75:05:bc:27:28:42:6f:c5:d1:62:9f:59:19:0c: 2e:88:02:c1:e9:60:24:30:66:79:c0:06:3c:69:1b:53:80:1d: ff:37:f2:2e:8c:03:24:f9:18:b3:1e:24:6b:97:d4:70:5b:34: 37:b9:88:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5kgkDsh4VyTDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NzAzOTNmMWMtNTNkMy00N2EzLWE2NWYtN2ZmMDk4NDg0ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0AMavqpitIo7KioSTBMWblJK56G/0oKJSf9 Cf0WbABmy3GbuObtqq+ie1idG7pM70ttdYsJegFytp+BRgKAuvSC6qBbDdGURn/l UxHT2fILP1Ol2Aw+dtTavGigF24vhsHh3M4EGnKbnWICuwHBTyq72Qyv2vmSt1cx +Jez5J5OfoxlMcdexHFGBzs9A4PvJtrI7A9buXHesBSxWtW8Ue7Ap0dB1n6ATTp5 9H/ooKPbS3GyYGw4bN3RR3s+in4LWBRamPY0nqK97Mq5qUiVRoMS/e33tIep5/ML cx+DGaOSlo63fAlEMb9RipMTcEJn8nA8nJikLAARmoLoxgow8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFcUxaRgHs36A7HVmDNeFeLM7v5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTIzNWM5NjgtODg1MC0z NDhlLTg0NGEtYzA1ODQzZDUzNWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg+a3d7T3VHPus8u1ETB561VBXtIHhi02YcXFT0W8R9t38Sljg7uuvi DedNBrLidqWRbaju/+I0iRuHszU78LmpUKv9frFNtApw304BHoVXW/mlqlV/tSJY LdxaIBOpaPGIafHZoPx5yk5KfV5KY3RGkIS9T1ApLTg7DvAh1X56EinrvWc2AbiR azSzLETgRr5Hd19iYMcPQeXCeX76lH1MgaMgY9ouyGfB/JTJZjJ0oKk2ywBo2yni bB5H56AwOh2QTtKIyxFtC6x1BbwnKEJvxdFin1kZDC6IAsHpYCQwZnnABjxpG1OA Hf838i6MAyT5GLMeJGuX1HBbNDe5iBw= -----END CERTIFICATE-----Generated at Sat Mar 21 20:56:45 2026 by rpki-client