$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa File: a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa (raw, json) Hash identifier: Z7mB62FA/zVJ/4d5fcUTrmtugWofKM87QoZUWFn/qus= Subject key identifier: 19:3A:22:EF:D4:C9:F1:02:B1:A6:CE:27:7A:D4:3E:8F:B3:15:79:B2 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CFA140963A91179A152780 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:a1:40:96:3a:91:17:9a:15:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=b02d4840-c286-4f24-be8b-4c300920b753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:29:5d:f6:e6:b9:26:7c:77:61:a0:2f:cf:60: 22:19:15:48:b8:fd:58:2a:d7:dd:d4:9f:d5:99:aa: 38:47:2d:d1:07:16:b8:f5:71:27:81:0a:9c:06:ad: af:ee:1d:f3:45:2d:99:92:f6:18:5c:23:35:b2:47: 28:52:2d:7c:1f:90:0c:eb:3e:aa:fc:b4:9d:ec:62: 70:67:c5:b6:bb:42:76:03:8e:c7:cd:5e:54:4e:41: 5e:7f:c2:5c:a8:e2:e1:a9:89:ee:77:80:03:ce:0f: eb:b5:f3:31:92:ea:99:cf:7a:67:35:a9:99:d6:48: 0d:20:6d:5f:19:69:48:3c:09:2c:a7:ee:f8:b1:e1: a4:23:26:69:e4:16:fd:8a:36:f0:6e:16:b9:8d:dc: 0f:6d:d3:1a:fc:e6:8a:6f:51:e2:da:a0:6f:6f:dc: 50:78:76:c4:6b:a5:3b:a5:77:d1:ae:9c:58:26:c5: 70:12:0b:f9:c2:a1:49:91:22:e7:f6:7d:f3:24:40: 7f:d3:70:4d:81:e8:06:49:05:45:0e:50:99:30:fd: 22:c7:3e:f7:60:74:6c:e7:2e:96:da:33:97:80:de: cc:29:a6:70:5b:51:5b:86:10:f4:c1:46:f4:6e:88: 0d:86:fc:8e:8b:6d:3b:40:6b:9a:fc:ec:05:c7:04: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:22:EF:D4:C9:F1:02:B1:A6:CE:27:7A:D4:3E:8F:B3:15:79:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:75:7c:fe:59:8b:77:68:ef:00:19:9b:94:a5:b3:09:be:0e: 27:0e:20:da:3a:c5:c4:ca:e1:42:7b:66:bc:d5:c3:3b:c3:8f: dd:65:80:5c:94:98:88:aa:89:5a:bb:20:93:f2:15:49:d4:f3: 60:50:4c:a2:be:dc:58:5a:00:69:9e:a7:c1:ac:16:f0:0b:82: 93:b4:ba:75:15:12:b5:7c:03:d7:ac:08:40:d3:ec:22:34:81: ee:cc:42:0c:a8:e9:c3:9a:bf:a2:ec:e1:dc:91:5f:e2:1d:1e: ea:ed:96:6e:32:71:1e:af:51:ff:53:87:6f:f0:8b:92:f6:7e: c1:f2:3e:62:04:1d:ea:f7:ac:2e:f9:bb:d1:0a:20:ef:45:8d: fc:ff:e9:a4:df:07:63:d0:59:97:ad:43:0f:c9:ae:3d:b1:63: 17:5a:08:d9:28:39:32:42:52:3e:14:22:cd:1e:d3:88:ab:b6: 16:49:ab:c3:ca:f7:63:95:00:a4:4f:e0:67:df:a4:fa:34:30: 25:28:32:a1:8f:53:50:4f:20:aa:22:10:81:ee:0c:82:e9:8d: fa:ed:37:e3:53:51:7a:0c:33:a9:ab:20:d5:44:8d:06:5f:59: 2d:fc:2b:cf:d3:5b:ac:0c:df:7b:27:ce:d4:cd:71:a9:22:4c: 2b:0a:47:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z6FAljqRF5oVJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YjAyZDQ4NDAtYzI4Ni00ZjI0LWJlOGItNGMzMDA5MjBiNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxild9ua5Jnx3YaAvz2AiGRVIuP1YKtfd1J/V mao4Ry3RBxa49XEngQqcBq2v7h3zRS2ZkvYYXCM1skcoUi18H5AM6z6q/LSd7GJw Z8W2u0J2A47HzV5UTkFef8JcqOLhqYnud4ADzg/rtfMxkuqZz3pnNamZ1kgNIG1f GWlIPAksp+74seGkIyZp5Bb9ijbwbha5jdwPbdMa/OaKb1Hi2qBvb9xQeHbEa6U7 pXfRrpxYJsVwEgv5wqFJkSLn9n3zJEB/03BNgegGSQVFDlCZMP0ixz73YHRs5y6W 2jOXgN7MKaZwW1FbhhD0wUb0bogNhvyOi207QGua/OwFxwTbowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk6Iu/UyfECsabOJ3rUPo+zFXmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTdiODBiODAtYWNlNi0z YzM4LWJlNTYtYmVkM2Y0ZDZlOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl1fP5Zi3do7wAZm5Slswm+DicOINo6xcTK4UJ7ZrzVwzvDj91lgFyU mIiqiVq7IJPyFUnU82BQTKK+3FhaAGmep8GsFvALgpO0unUVErV8A9esCEDT7CI0 ge7MQgyo6cOav6Ls4dyRX+IdHurtlm4ycR6vUf9Th2/wi5L2fsHyPmIEHer3rC75 u9EKIO9Fjfz/6aTfB2PQWZetQw/Jrj2xYxdaCNkoOTJCUj4UIs0e04irthZJq8PK 92OVAKRP4GffpPo0MCUoMqGPU1BPIKoiEIHuDILpjfrtN+NTUXoMM6mrINVEjQZf WS38K8/TW6wM33snztTNcakiTCsKRx4= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:54 2026 by rpki-client