$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a4687d3f-15ac-35b8-99e4-79e32497bd21.roa File: a4687d3f-15ac-35b8-99e4-79e32497bd21.roa (raw, json) Hash identifier: NYy0j6LbUm0k/g9hAJqCIL1PFP4fqg5ZaGpgGiEtz54= Subject key identifier: 36:3C:08:69:D3:65:C7:87:B3:6B:3D:35:01:B4:08:72:84:39:98:E3 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D2644D6D1DF34C83F8E15B2C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a4687d3f-15ac-35b8-99e4-79e32497bd21.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:d6:d1:df:34:c8:3f:8e:15:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=3f9c01c7-060c-45ee-b03a-cc050d0eb246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:08:1c:96:3c:d7:fc:6b:7e:cc:71:1f:a4: fe:b7:b0:43:f4:1f:36:49:df:74:30:aa:eb:e5:cc: b3:81:36:af:7d:d8:47:32:14:ec:c8:d8:d0:2f:18: bf:8d:39:96:ea:a5:e7:e6:25:2e:a9:8d:94:11:be: 32:46:7c:31:08:8e:e0:67:bc:30:11:8c:90:ce:8c: a1:02:dc:3a:aa:f6:5b:b1:dc:d0:7a:ee:03:8e:e4: 9e:61:87:49:7e:e4:02:30:bb:fe:a9:9d:ff:a1:00: dc:15:b9:d2:f5:14:67:c1:a3:90:05:2c:fa:77:ff: 6c:44:38:46:fa:fc:80:2d:41:1b:6c:f8:94:25:91: 01:05:6b:e5:fb:0d:d9:21:3f:99:fe:63:b6:42:57: 93:91:54:83:cd:ab:07:1c:e7:28:28:73:e8:be:db: 7c:4d:e5:22:16:84:fc:c9:d5:87:0b:d8:89:5c:49: 08:31:e7:dd:03:78:6b:8a:aa:7c:53:2f:3d:1c:2a: 08:3e:ab:bf:72:db:52:f7:5a:a4:be:e9:88:1b:d4: 76:63:3c:0b:33:f2:c0:6e:6a:29:9a:5d:60:87:50: cd:82:b9:bf:ed:e8:2e:ab:be:6c:0c:3f:03:ef:4e: f3:fd:b9:1e:4b:57:f0:7e:f6:c5:b9:ae:f8:5b:a0: 57:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:08:69:D3:65:C7:87:B3:6B:3D:35:01:B4:08:72:84:39:98:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a4687d3f-15ac-35b8-99e4-79e32497bd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4b:8a:0c:33:de:d1:d3:60:c0:3b:69:31:9e:32:9e:d8:37: 82:93:31:bc:22:e1:e4:13:c5:17:aa:e4:aa:11:11:3f:62:6b: 15:9c:da:af:7e:a2:81:d6:16:e7:51:b4:11:d9:e5:6a:fd:44: dc:90:18:38:9d:54:cf:52:11:53:1f:fa:38:50:95:25:cb:32: fe:b4:bf:1c:cd:5a:38:48:82:f3:eb:7f:91:d4:c2:ac:c9:4b: dc:66:1b:3d:d5:f4:36:9f:5d:51:5b:82:e8:7e:bf:1c:09:58: be:67:ab:b9:9d:be:6c:5b:f4:f6:cf:27:e0:dc:29:42:66:11: 23:98:79:22:ff:9f:ef:ee:25:d8:18:bf:5e:94:a9:8a:b7:92: 87:92:b6:5f:5b:4d:9f:56:2d:de:d2:33:4a:73:87:f6:a6:6c: b6:b7:48:2b:7f:26:9a:9f:bb:bf:2b:9c:46:60:c4:22:ab:05: 09:18:4b:5b:49:e5:21:69:b5:6e:71:3f:1e:65:de:b2:d9:28: 79:b3:ae:1b:75:2c:8c:0b:a6:7d:15:da:fb:ac:8f:be:75:01: d2:2c:dc:17:b3:c2:5c:f9:b8:1b:3e:91:eb:fe:49:d1:69:59: d1:3b:bb:74:e0:9e:98:6f:61:0d:a0:71:51:e6:c3:a2:69:46: 51:6b:69:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRNbR3zTIP44VssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk M2Y5YzAxYzctMDYwYy00NWVlLWIwM2EtY2MwNTBkMGViMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjcIHJY81/xrfsxxH6T+t7BD9B82Sd90MKrr 5cyzgTavfdhHMhTsyNjQLxi/jTmW6qXn5iUuqY2UEb4yRnwxCI7gZ7wwEYyQzoyh Atw6qvZbsdzQeu4DjuSeYYdJfuQCMLv+qZ3/oQDcFbnS9RRnwaOQBSz6d/9sRDhG +vyALUEbbPiUJZEBBWvl+w3ZIT+Z/mO2QleTkVSDzasHHOcoKHPovtt8TeUiFoT8 ydWHC9iJXEkIMefdA3hriqp8Uy89HCoIPqu/cttS91qkvumIG9R2YzwLM/LAbmop ml1gh1DNgrm/7eguq75sDD8D707z/bkeS1fwfvbFua74W6BXrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY8CGnTZceHs2s9NQG0CHKEOZjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTQ2ODdkM2YtMTVhYy0z NWI4LTk5ZTQtNzllMzI0OTdiZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSELMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBLigwz3tHTYMA7aTGeMp7YN4KTMbwi4eQTxReq5KoRET9iaxWc2q9+ ooHWFudRtBHZ5Wr9RNyQGDidVM9SEVMf+jhQlSXLMv60vxzNWjhIgvPrf5HUwqzJ S9xmGz3V9DafXVFbguh+vxwJWL5nq7mdvmxb9PbPJ+DcKUJmESOYeSL/n+/uJdgY v16UqYq3koeStl9bTZ9WLd7SM0pzh/ambLa3SCt/Jpqfu78rnEZgxCKrBQkYS1tJ 5SFptW5xPx5l3rLZKHmzrht1LIwLpn0V2vusj751AdIs3Bezwlz5uBs+kev+SdFp WdE7u3TgnphvYQ2gcVHmw6JpRlFrafs= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:24 2026 by rpki-client