$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa File: a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa (raw, json) Hash identifier: S1fPCBeleOor+SOYX88/YanMzYOMYTyzpxNi5+J4DZ8= Subject key identifier: AD:CF:EC:BB:FB:2B:01:85:8A:41:AB:D2:32:68:E4:D8:31:C6:9D:D9 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F5E62F7F1CC6E6DBFCED44F80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 23473 IP address blocks: 153.33.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f7:f1:cc:6e:6d:bf:ce:d4:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=de929a49-8bb0-44c2-9093-8222c3d12209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:4d:4d:6c:cb:ce:93:45:e3:2a:6d:97:a6: 39:d7:68:5e:01:e6:8e:01:50:e4:aa:8a:d4:a9:96: c2:8b:f4:34:c9:09:85:9a:35:65:5e:d4:2a:01:c4: d4:5e:d3:ce:8e:93:50:b3:d9:8e:f4:97:55:c1:93: 40:d4:0a:3f:33:17:2a:f7:b5:dd:b1:13:a9:73:ce: 18:2f:47:8a:b7:5a:b4:c4:46:d6:b0:36:e6:1c:ac: 4b:d2:20:bb:7a:21:2b:2f:13:e9:4e:7a:f5:7f:ec: 75:22:52:41:32:96:97:28:2b:0f:11:36:f7:27:6e: 49:f3:1f:34:21:36:2f:7f:de:c1:d0:76:b7:55:0e: 88:b2:44:d7:f8:b0:66:12:a8:99:19:b5:c3:4c:fe: bc:1d:db:5f:28:d6:d7:7c:04:56:4d:6f:5b:9d:c3: 05:9d:22:ab:d1:e0:10:1f:d4:7a:fb:79:05:1a:33: 49:b2:32:ba:e0:ab:5f:13:48:62:da:9e:3d:a8:bb: b0:b8:36:c5:88:c7:0b:41:03:d4:23:a4:fb:e7:14: b2:db:05:18:a4:20:5f:98:1a:ea:ea:0a:f9:72:ec: d6:29:f8:99:df:81:55:04:42:6e:19:7c:c1:06:34: bd:33:98:b2:44:15:63:40:16:ed:2e:e6:7a:16:d6: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CF:EC:BB:FB:2B:01:85:8A:41:AB:D2:32:68:E4:D8:31:C6:9D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ce:46:76:7b:cc:d3:3b:0c:6c:19:ad:66:ed:47:8d:eb:8c: d8:1a:b4:c1:4c:06:ce:40:0e:00:de:b6:1a:a5:0e:86:4f:e0: 9c:e0:75:94:96:e8:38:dd:2a:d1:b8:14:a8:36:b4:b9:14:ce: d7:1d:fe:c6:e7:bb:2b:8e:b4:3d:4d:54:ea:02:ef:89:72:74: 65:5a:2d:38:aa:72:61:72:60:58:1b:e5:2a:10:3f:95:9e:7c: a5:44:1e:b4:4b:20:17:68:e8:cf:aa:d3:d6:f7:f7:6f:8a:24: 02:8d:b3:bd:1e:08:b6:c8:f0:ea:db:c3:16:44:7f:bd:05:27: 62:e2:73:8e:0e:f9:49:2b:d9:c3:49:2b:be:5c:d9:b7:23:7d: a7:2c:d2:6f:53:01:4c:af:26:51:08:86:3b:c8:ce:f4:5e:b6: d3:1b:04:ca:9c:28:d7:aa:4b:26:c6:1f:2c:cd:b8:2f:dc:41: a8:23:14:5b:b7:88:60:f7:a4:51:be:82:fa:7a:dd:7f:2e:31: 27:a2:74:9f:5c:b8:98:5e:98:c9:c2:83:2e:06:b5:36:75:f5: 6e:c9:7f:06:ff:70:d0:0c:a4:89:d5:d4:80:e4:71:11:96:b4: 81:8d:90:96:88:2e:cb:c5:46:20:da:b6:d2:45:33:03:09:94: d6:37:95:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYvfxzG5tv87UT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZGU5MjlhNDktOGJiMC00NGMyLTkwOTMtODIyMmMzZDEyMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7RNTWzLzpNF4yptl6Y512heAeaOAVDkqorU qZbCi/Q0yQmFmjVlXtQqAcTUXtPOjpNQs9mO9JdVwZNA1Ao/Mxcq97XdsROpc84Y L0eKt1q0xEbWsDbmHKxL0iC7eiErLxPpTnr1f+x1IlJBMpaXKCsPETb3J25J8x80 ITYvf97B0Ha3VQ6IskTX+LBmEqiZGbXDTP68HdtfKNbXfARWTW9bncMFnSKr0eAQ H9R6+3kFGjNJsjK64KtfE0hi2p49qLuwuDbFiMcLQQPUI6T75xSy2wUYpCBfmBrq 6gr5cuzWKfiZ34FVBEJuGXzBBjS9M5iyRBVjQBbtLuZ6FtZhkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3P7Lv7KwGFikGr0jJo5Ngxxp3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTdiODBiODAtYWNlNi0z YzM4LWJlNTYtYmVkM2Y0ZDZlOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLORnZ7zNM7DGwZrWbtR43rjNgatMFMBs5ADgDethqlDoZP4JzgdZSW 6DjdKtG4FKg2tLkUztcd/sbnuyuOtD1NVOoC74lydGVaLTiqcmFyYFgb5SoQP5We fKVEHrRLIBdo6M+q09b392+KJAKNs70eCLbI8OrbwxZEf70FJ2Lic44O+Ukr2cNJ K75c2bcjfacs0m9TAUyvJlEIhjvIzvRettMbBMqcKNeqSybGHyzNuC/cQagjFFu3 iGD3pFG+gvp63X8uMSeidJ9cuJhemMnCgy4GtTZ19W7Jfwb/cNAMpInV1IDkcRGW tIGNkJaILsvFRiDattJFMwMJlNY3lVc= -----END CERTIFICATE-----Generated at Mon Oct 5 22:45:24 2026 by rpki-client