$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ab8ad28d-0d43-3d74-b0cd-c2c26d0e58d2.roa File: ab8ad28d-0d43-3d74-b0cd-c2c26d0e58d2.roa (raw, json) Hash identifier: +pTD7ujPvceoKCZEdA9aVbSb5dpKU3othIC09HpSsDY= Subject key identifier: A7:74:7C:11:9B:FA:DB:7C:73:8F:76:88:38:67:A0:A6:44:EF:1F:1E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D300A410C1A7E5022F32DE5C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ab8ad28d-0d43-3d74-b0cd-c2c26d0e58d2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 23473 IP address blocks: 153.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:41:0c:1a:7e:50:22:f3:2d:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=17cf0ff9-6829-4ed2-ae88-1300fe7eb8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:67:a9:88:78:66:d6:7f:2a:58:19:23:ea: 23:a7:bb:df:50:09:5f:87:a5:d9:48:95:68:09:59: ce:45:ab:d2:4a:13:43:fe:8a:b3:3a:29:24:27:da: ea:8a:06:6d:09:ef:af:0a:47:09:55:86:c1:4e:0b: 2c:db:ff:ce:dc:be:37:1a:59:90:94:2a:7c:42:3b: 7c:4a:12:31:83:d9:75:2b:8a:40:83:e5:d2:77:90: af:95:77:34:ad:eb:cc:8e:a2:87:7b:df:73:c8:41: 0f:18:36:75:43:55:ca:12:b8:47:d1:35:47:d0:e2: 88:e1:cc:a2:79:fb:69:24:ef:02:b9:87:20:f4:b8: 81:2d:80:c0:52:17:76:1c:f4:3e:0c:9a:1b:7a:0d: 70:52:f1:53:63:6a:ad:93:16:8f:24:28:a7:84:33: c9:3c:2a:22:75:dc:6b:22:b3:4f:6d:dc:4f:e4:06: ee:db:6b:6c:0a:f6:ef:29:31:1c:4f:5d:e5:07:95: a8:26:f8:dd:7e:e8:48:de:5b:60:43:85:66:f9:40: 4d:f1:04:f9:3b:b5:15:07:22:56:fe:73:55:35:d9: 7c:5f:cd:e3:53:4e:bf:3d:6b:7a:57:1f:f9:95:93: 75:27:e5:08:c0:1b:4b:51:e0:c1:a2:94:66:53:83: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:74:7C:11:9B:FA:DB:7C:73:8F:76:88:38:67:A0:A6:44:EF:1F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ab8ad28d-0d43-3d74-b0cd-c2c26d0e58d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f3:95:5d:bb:4c:06:d9:21:5f:5c:fa:80:7e:9c:0e:62:62: a7:13:5a:a7:cd:63:52:ac:ad:5c:39:ae:4e:4f:97:97:ba:cf: b1:2a:1b:1b:08:d1:38:e0:5e:be:d4:6b:b7:d2:38:5d:6b:3b: 69:4f:ae:1c:06:00:89:64:e7:51:0b:db:44:72:1e:0b:74:4b: e0:cf:06:fa:cd:a5:3d:10:90:80:ab:96:7d:22:3a:75:95:35: 26:7e:75:70:fd:43:37:d1:bb:16:56:b9:24:58:f6:49:b8:b2: f9:30:52:ed:dd:cc:ff:0d:02:d6:ba:e7:11:f0:4e:2e:3a:cf: bb:48:eb:ba:bd:93:e1:3b:41:b9:f7:79:4a:14:cd:73:b3:15: 01:61:29:22:74:9b:1a:4e:c7:fa:f2:89:3a:dc:c8:9b:ea:ed: 72:0b:ec:d0:93:80:65:3e:d1:93:7b:44:ce:f2:8a:59:d6:3e: 4f:b1:e1:a4:85:63:8e:16:52:d8:fb:17:04:77:fc:a1:07:e4: e7:51:95:2e:88:bd:7e:aa:b1:33:a7:b0:e5:d7:5d:ba:ed:e0: bb:3c:d3:4b:f6:ec:6a:80:33:7a:93:1c:4d:b6:7e:e3:c2:67: c2:49:07:eb:cd:15:da:7e:cc:fb:d3:2c:48:93:c0:ea:a5:58: f1:b6:3d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkEMGn5QIvMt5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTdjZjBmZjktNjgyOS00ZWQyLWFlODgtMTMwMGZlN2ViOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ5nqYh4ZtZ/KlgZI+ojp7vfUAlfh6XZSJVo CVnORavSShND/oqzOikkJ9rqigZtCe+vCkcJVYbBTgss2//O3L43GlmQlCp8Qjt8 ShIxg9l1K4pAg+XSd5CvlXc0revMjqKHe99zyEEPGDZ1Q1XKErhH0TVH0OKI4cyi eftpJO8CuYcg9LiBLYDAUhd2HPQ+DJobeg1wUvFTY2qtkxaPJCinhDPJPCoiddxr IrNPbdxP5Abu22tsCvbvKTEcT13lB5WoJvjdfuhI3ltgQ4Vm+UBN8QT5O7UVByJW /nNVNdl8X83jU06/PWt6Vx/5lZN1J+UIwBtLUeDBopRmU4MpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd0fBGb+tt8c492iDhnoKZE7x8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWI4YWQyOGQtMGQ0My0z ZDc0LWIwY2QtYzJjMjZkMGU1OGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTzlV27TAbZIV9c+oB+nA5iYqcTWqfNY1KsrVw5rk5Pl5e6z7EqGxsI 0TjgXr7Ua7fSOF1rO2lPrhwGAIlk51EL20RyHgt0S+DPBvrNpT0QkICrln0iOnWV NSZ+dXD9QzfRuxZWuSRY9km4svkwUu3dzP8NAta65xHwTi46z7tI67q9k+E7Qbn3 eUoUzXOzFQFhKSJ0mxpOx/ryiTrcyJvq7XIL7NCTgGU+0ZN7RM7yilnWPk+x4aSF Y44WUtj7FwR3/KEH5OdRlS6IvX6qsTOnsOXXXbrt4Ls800v27GqAM3qTHE22fuPC Z8JJB+vNFdp+zPvTLEiTwOqlWPG2Pfk= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:33 2026 by rpki-client