$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa File: a27b0c7f-535b-3562-9e07-fa1249713a49.roa (raw, json) Hash identifier: lmqHo0V9fO13onh1DDxrVviBGlVZb8OQlbbBHIR7HNc= Subject key identifier: 0A:B8:1A:50:76:3A:DE:FB:5C:A9:DD:D7:A8:AD:B6:F4:35:CF:88:5B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF7F6B6B4FE55A62654880 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7f:6b:6b:4f:e5:5a:62:65:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=549c18e6-708f-42d7-8cb4-ad7ec52d0e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:05:b8:29:ec:32:2c:45:04:0a:71:32:39:28: bf:25:79:d9:1a:68:cd:7d:54:10:65:73:e0:2e:31: ef:7b:ab:e1:e3:df:95:b9:06:5b:42:aa:48:d7:d6: 3a:c7:ac:ce:13:22:44:aa:f2:db:79:4b:0d:5d:57: 64:37:ba:b0:3e:43:cf:ef:86:69:dd:cb:74:4d:72: 92:bd:68:53:3a:6c:df:53:ba:83:ae:f3:0f:52:07: 1f:0f:39:bb:5e:4d:93:20:34:46:2d:2d:61:24:60: 57:c9:c6:8b:23:2a:41:4c:9f:4d:6a:d7:68:20:6a: e1:53:c7:24:e7:90:13:6f:85:93:e7:f8:98:32:be: 0a:c0:bb:b1:9f:fd:40:de:94:8b:94:1f:79:e6:dd: a4:9a:a6:48:47:9a:f8:8b:00:21:8a:a8:6e:95:7d: f5:e2:59:d3:e5:25:a8:c5:e0:af:19:50:2b:2c:43: 4f:d3:fd:e1:2d:08:71:c2:b9:8a:5c:e9:9a:5b:2d: f0:0b:e9:5d:b0:03:55:05:8e:6d:27:1b:37:ca:ef: e0:57:39:23:4d:5c:d6:dc:02:01:76:74:e8:7c:15: bb:d1:b8:ce:00:34:5b:18:92:5d:3f:da:d0:60:61: 25:a7:39:02:cb:e7:a3:0c:ab:d9:c1:20:c1:77:76: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B8:1A:50:76:3A:DE:FB:5C:A9:DD:D7:A8:AD:B6:F4:35:CF:88:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0c:dd:dd:66:06:16:82:5a:7f:a0:07:44:02:8c:97:2d:4e: 86:cc:9f:16:c0:49:90:d8:cb:c6:38:f3:77:27:11:e6:84:fe: 66:d7:14:1d:d0:3d:c4:b6:e0:b1:e7:39:b0:fa:a8:3a:52:9c: b5:72:a8:df:fd:c1:ac:62:59:bd:fa:69:55:e7:8f:bd:d4:b7: 7e:13:cc:bf:ea:82:de:9a:0a:66:f8:63:51:04:11:e7:e0:3f: 82:32:1b:49:6d:8a:20:55:94:46:58:d7:2c:59:a1:9d:88:35: e8:a8:53:69:43:8d:7b:b5:6d:ab:74:d5:18:99:67:46:1f:78: cf:ec:10:23:9f:f2:47:68:22:5a:21:84:0f:59:7c:a6:50:99: cb:ab:34:17:ea:42:2b:5d:80:a4:76:3e:ba:75:0c:97:2c:72: bc:b6:57:b7:d4:29:b2:a4:79:79:98:e7:2c:54:8e:ae:be:f2: ea:81:ee:82:f9:64:f7:54:d6:b3:d3:30:44:90:40:a1:60:a8: 8e:8c:0b:58:3a:29:ee:b7:8d:4f:79:77:84:3d:6d:03:4d:81: 53:cb:0f:2b:37:61:fd:6f:17:d9:08:df:52:a8:c0:f6:3d:c4: ce:94:b6:f4:f9:96:73:35:11:36:5e:b9:ad:fe:56:59:e1:a1: 9f:a4:12:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z39ra0/lWmJlSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NTQ5YzE4ZTYtNzA4Zi00MmQ3LThjYjQtYWQ3ZWM1MmQwZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigW4KewyLEUECnEyOSi/JXnZGmjNfVQQZXPg LjHve6vh49+VuQZbQqpI19Y6x6zOEyJEqvLbeUsNXVdkN7qwPkPP74Zp3ct0TXKS vWhTOmzfU7qDrvMPUgcfDzm7Xk2TIDRGLS1hJGBXycaLIypBTJ9NatdoIGrhU8ck 55ATb4WT5/iYMr4KwLuxn/1A3pSLlB955t2kmqZIR5r4iwAhiqhulX314lnT5SWo xeCvGVArLENP0/3hLQhxwrmKXOmaWy3wC+ldsANVBY5tJxs3yu/gVzkjTVzW3AIB dnTofBW70bjOADRbGJJdP9rQYGElpzkCy+ejDKvZwSDBd3ZtIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAq4GlB2Ot77XKnd16ittvQ1z4hbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTI3YjBjN2YtNTM1Yi0z NTYyLTllMDctZmExMjQ5NzEzYTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwM3d1mBhaCWn+gB0QCjJctTobMnxbASZDYy8Y483cnEeaE/mbXFB3Q PcS24LHnObD6qDpSnLVyqN/9waxiWb36aVXnj73Ut34TzL/qgt6aCmb4Y1EEEefg P4IyG0ltiiBVlEZY1yxZoZ2INeioU2lDjXu1bat01RiZZ0YfeM/sECOf8kdoIloh hA9ZfKZQmcurNBfqQitdgKR2Prp1DJcscry2V7fUKbKkeXmY5yxUjq6+8uqB7oL5 ZPdU1rPTMESQQKFgqI6MC1g6Ke63jU95d4Q9bQNNgVPLDys3Yf1vF9kI31KowPY9 xM6UtvT5lnM1ETZeua3+VlnhoZ+kEiQ= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:54 2026 by rpki-client