$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa File: a27b0c7f-535b-3562-9e07-fa1249713a49.roa (raw, json) Hash identifier: XSyiWXHOpG+NYz7D+96gpuFpk9Mbou7TAlwjAfXZD5k= Subject key identifier: 66:5D:2E:0C:E1:50:D9:A2:17:5A:4C:3A:D5:F1:75:B4:99:21:BE:25 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F5E62E2B3670AA0F39D676CA0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 23473 IP address blocks: 153.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e2:b3:67:0a:a0:f3:9d:67:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=c43c2ea9-feeb-4b1d-85fc-f8c5ab98fdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:f3:e3:c2:69:7a:e8:67:11:69:f8:11:7d: 70:6d:a7:49:8d:4a:f4:6d:7b:36:37:07:e8:c9:56: 81:a8:ed:00:7c:31:0a:80:df:62:8e:9e:1e:bc:66: 64:17:8f:6e:f8:6e:72:31:54:0b:0b:8a:47:48:a0: a4:df:38:df:96:cc:c0:c2:93:52:2e:a9:78:8b:ef: 75:44:fb:6a:52:c4:65:9a:87:0d:a6:29:a4:6b:3e: 63:1c:76:71:0e:b5:66:e3:f3:d0:8c:17:78:93:1c: a7:13:8e:2a:46:83:84:69:08:ef:6d:6b:00:54:72: f8:e7:13:b4:d5:72:d7:43:99:5b:41:79:72:a0:70: 04:f9:5f:1e:e0:89:2d:ee:6e:77:1d:82:e7:0b:2e: be:7c:1a:c1:3c:54:20:7f:57:af:50:1d:b8:5b:93: ff:b1:cb:0d:3f:0a:e7:10:40:a9:95:b9:b3:f6:11: c1:5e:26:15:c7:c3:aa:dc:77:ac:d3:9a:39:dd:1e: f5:06:e4:4a:f7:cf:34:ca:8a:31:bc:95:0d:21:69: 28:91:57:6b:e5:21:a2:17:26:a5:b7:04:2b:d3:24: 0a:93:06:75:72:98:92:4b:5a:21:72:85:fb:e6:21: 25:d6:08:76:d7:9d:71:aa:5a:1f:58:bf:7c:14:77: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5D:2E:0C:E1:50:D9:A2:17:5A:4C:3A:D5:F1:75:B4:99:21:BE:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d3:03:3a:94:e1:5f:33:b8:9f:3a:cc:ff:b2:35:15:40:8f: 6a:90:bc:18:dd:39:5d:e5:47:46:05:e8:7c:2b:45:11:be:68: 38:f3:fb:f4:e7:94:f3:2e:3d:03:fe:88:52:de:57:f5:16:7a: 1b:91:d3:b8:ce:47:e5:39:c4:6b:30:68:27:02:03:d8:78:50: 46:fd:8d:90:54:6e:7f:d2:dc:53:f5:d9:80:d1:3d:9a:bf:54: 6b:c1:a5:4d:b2:ec:1e:5a:c3:4c:e5:ad:d7:0f:ac:66:cd:3f: ee:ef:08:6c:b7:24:2e:f2:d3:02:18:17:0b:55:e3:fd:e5:60: 1d:63:52:28:a4:9b:a0:60:1e:1d:37:cb:ee:27:28:c8:61:b7: b8:fc:6d:ec:92:e6:b8:ee:97:49:7f:57:05:2d:9a:06:9d:c6: 5c:c7:cf:88:13:2e:0e:99:da:5a:21:9a:25:ee:76:55:d3:24: 3f:84:e1:b6:3f:cf:dc:cb:d0:d1:24:bc:5d:5e:91:4a:1c:c9: 2b:90:d7:41:e5:7c:ce:67:02:94:21:2f:30:6b:63:6d:a3:d3: 48:1e:5d:44:7b:ef:6b:50:4c:c0:f8:59:cd:af:8d:3a:ab:dd: b4:f1:47:15:62:0b:75:9f:2f:f6:9e:03:66:39:fc:6f:1b:e4: b1:66:45:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuKzZwqg851nbKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YzQzYzJlYTktZmVlYi00YjFkLTg1ZmMtZjhjNWFiOThmZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Dz48JpeuhnEWn4EX1wbadJjUr0bXs2Nwfo yVaBqO0AfDEKgN9ijp4evGZkF49u+G5yMVQLC4pHSKCk3zjflszAwpNSLql4i+91 RPtqUsRlmocNpimkaz5jHHZxDrVm4/PQjBd4kxynE44qRoOEaQjvbWsAVHL45xO0 1XLXQ5lbQXlyoHAE+V8e4Ikt7m53HYLnCy6+fBrBPFQgf1evUB24W5P/scsNPwrn EECplbmz9hHBXiYVx8Oq3Hes05o53R71BuRK9880yooxvJUNIWkokVdr5SGiFyal twQr0yQKkwZ1cpiSS1ohcoX75iEl1gh2151xqlofWL98FHfh1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZdLgzhUNmiF1pMOtXxdbSZIb4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTI3YjBjN2YtNTM1Yi0z NTYyLTllMDctZmExMjQ5NzEzYTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfTAzqU4V8zuJ86zP+yNRVAj2qQvBjdOV3lR0YF6HwrRRG+aDjz+/Tn lPMuPQP+iFLeV/UWehuR07jOR+U5xGswaCcCA9h4UEb9jZBUbn/S3FP12YDRPZq/ VGvBpU2y7B5aw0zlrdcPrGbNP+7vCGy3JC7y0wIYFwtV4/3lYB1jUiikm6BgHh03 y+4nKMhht7j8beyS5rjul0l/VwUtmgadxlzHz4gTLg6Z2lohmiXudlXTJD+E4bY/ z9zL0NEkvF1ekUocySuQ10HlfM5nApQhLzBrY22j00geXUR772tQTMD4Wc2vjTqr 3bTxRxViC3WfL/aeA2Y5/G8b5LFmReA= -----END CERTIFICATE-----Generated at Sat Oct 10 10:31:21 2026 by rpki-client