$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6e1366b-3dca-369f-96e6-5b61d89ff0a2.roa File: a6e1366b-3dca-369f-96e6-5b61d89ff0a2.roa (raw, json) Hash identifier: MDazAL+cB7B/ygQdFWEJJF9gOrb65dWZvOX+C+p5Mis= Subject key identifier: F3:D0:97:A5:B4:8A:50:7D:7D:D2:FA:A7:EC:49:AE:6D:F7:C8:16:70 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D3704C281C58526490B8702C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6e1366b-3dca-369f-96e6-5b61d89ff0a2.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:c2:81:c5:85:26:49:0b:87:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=034b17ea-2031-4816-9a4d-ab138cb4404d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:ec:31:11:01:d7:4f:d5:fc:e7:a6:d6:b2: b2:ae:bf:44:69:40:f4:a4:1e:d4:28:3f:e4:bc:b1: 16:e8:1d:49:5b:be:0c:47:58:2e:d2:0b:66:df:b1: b9:14:b5:59:93:f4:75:30:7d:31:1f:c4:98:de:93: 50:f9:f7:2e:51:b3:7e:cc:d8:d1:8b:ed:93:43:aa: 57:3c:b5:96:78:05:b4:ef:98:e9:21:16:ad:43:d6: 4a:87:3e:da:a3:b5:ed:5f:a1:8e:97:6f:65:c6:6a: 1b:e8:dd:d8:25:55:a4:5b:66:02:8e:d9:c7:e5:eb: 79:9c:63:91:8c:f4:08:f4:8a:0b:93:58:41:59:e5: 6a:c6:29:e1:06:9b:a4:35:74:51:98:49:93:04:7b: 05:4c:ed:b0:c6:82:f4:a8:bc:47:60:7a:47:cb:dc: 46:b5:39:e4:cb:ba:94:b5:7e:96:aa:eb:ef:dc:d9: c6:a1:01:6d:69:48:c1:f2:4c:51:d8:6b:b8:15:aa: c7:7f:3a:74:89:0c:56:4f:84:d5:cd:1d:c4:fe:3b: 25:63:68:9d:e5:f4:b7:ea:65:85:9e:ed:b7:74:af: 26:c3:9c:a6:73:8c:6d:5a:d7:ed:e6:4e:23:e5:dc: 17:f7:35:58:86:d0:45:5d:c6:3a:28:05:20:a7:ce: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D0:97:A5:B4:8A:50:7D:7D:D2:FA:A7:EC:49:AE:6D:F7:C8:16:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6e1366b-3dca-369f-96e6-5b61d89ff0a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:87:0e:1a:11:00:56:a4:e9:07:84:33:c5:2e:e2:d8:e2:7a: 58:05:1d:1e:2c:79:80:3f:0c:e3:84:3b:e3:fb:e1:64:94:8c: 93:b2:ef:25:d1:a2:4b:b1:19:a4:f3:22:7f:70:c2:4f:1f:1e: 5b:19:e7:35:67:36:20:de:f4:da:4d:e7:9e:03:8a:79:fd:32: 60:72:2e:cf:53:25:31:9d:3a:96:5f:29:1f:96:32:db:a5:f0: 00:ce:1a:15:4f:c5:11:44:99:c3:10:b4:71:ef:c1:43:97:28: 04:a9:22:18:ff:a1:7f:e4:07:ad:dd:cb:7e:bc:68:01:4f:74: 5b:88:ac:f7:0a:11:6e:cc:5e:21:80:06:c3:31:06:ed:ba:e8: 44:03:74:6a:d6:3c:c2:21:7d:a8:09:41:f5:c1:90:47:12:0c: 1c:98:d2:2a:fb:dd:12:e6:47:ba:5a:bf:c3:1c:be:ef:81:fb: da:f5:4f:d7:e7:c6:d7:46:b3:1c:bb:fd:f0:f1:25:03:3d:e0: 41:3a:7d:d8:32:f5:8e:ce:21:8a:aa:1e:c6:2b:15:58:2c:b7: 86:0d:ec:bf:1b:b2:76:54:7c:56:cc:de:58:32:11:bb:ac:5f: 8e:79:92:ee:b1:75:01:23:f2:96:12:7b:b5:be:29:02:ec:16: 39:2b:c3:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BMKBxYUmSQuHAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk MDM0YjE3ZWEtMjAzMS00ODE2LTlhNGQtYWIxMzhjYjQ0MDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF7sMREB10/V/Oem1rKyrr9EaUD0pB7UKD/k vLEW6B1JW74MR1gu0gtm37G5FLVZk/R1MH0xH8SY3pNQ+fcuUbN+zNjRi+2TQ6pX PLWWeAW075jpIRatQ9ZKhz7ao7XtX6GOl29lxmob6N3YJVWkW2YCjtnH5et5nGOR jPQI9IoLk1hBWeVqxinhBpukNXRRmEmTBHsFTO2wxoL0qLxHYHpHy9xGtTnky7qU tX6Wquvv3NnGoQFtaUjB8kxR2Gu4FarHfzp0iQxWT4TVzR3E/jslY2id5fS36mWF nu23dK8mw5ymc4xtWtft5k4j5dwX9zVYhtBFXcY6KAUgp84nTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPQl6W0ilB9fdL6p+xJrm33yBZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTZlMTM2NmItM2RjYS0z NjlmLTk2ZTYtNWI2MWQ4OWZmMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyHDhoRAFak6QeEM8Uu4tjielgFHR4seYA/DOOEO+P74WSUjJOy7yXR okuxGaTzIn9wwk8fHlsZ5zVnNiDe9NpN554Dinn9MmByLs9TJTGdOpZfKR+WMtul 8ADOGhVPxRFEmcMQtHHvwUOXKASpIhj/oX/kB63dy368aAFPdFuIrPcKEW7MXiGA BsMxBu266EQDdGrWPMIhfagJQfXBkEcSDByY0ir73RLmR7pav8Mcvu+B+9r1T9fn xtdGsxy7/fDxJQM94EE6fdgy9Y7OIYqqHsYrFVgst4YN7L8bsnZUfFbM3lgyEbus X455ku6xdQEj8pYSe7W+KQLsFjkrwxk= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:20 2026 by rpki-client