$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af8b33ad-2af6-38b4-923f-ea011f121357.roa File: af8b33ad-2af6-38b4-923f-ea011f121357.roa (raw, json) Hash identifier: MPXer9WWvTH3gz7gKowRsVtLUkWg/mUtL1j+vx1HS2Y= Subject key identifier: B2:61:2A:EF:F7:18:FF:82:8C:30:C8:2B:27:0B:40:27:E1:15:EB:2A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D32D4DC43D17844498356F9E0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af8b33ad-2af6-38b4-923f-ea011f121357.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 23473 IP address blocks: 153.33.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:dc:43:d1:78:44:49:83:56:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=ae8d819a-33fa-4e32-b271-98ed106ad58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:3c:c3:3b:45:0b:48:55:df:0a:39:bd:5b: 4f:81:2a:3c:58:06:82:62:26:6d:17:a1:1f:cd:f1: 70:44:9f:5a:c3:cc:33:7d:94:c8:41:c8:8d:e8:80: aa:01:b4:e6:5a:f8:78:fe:57:59:bc:cc:10:6a:bf: 1d:02:04:c9:3a:6a:09:47:39:25:03:9c:df:59:f2: f3:48:ab:b7:6c:df:49:d6:6a:aa:24:de:4c:80:e2: e7:42:eb:ed:38:50:84:04:9f:89:01:48:7b:1a:9d: 58:d8:54:bb:63:12:12:b5:6c:60:b0:75:b0:14:a5: 2a:48:6c:36:e2:36:84:09:e3:a8:67:70:13:22:f9: 10:77:66:2a:a6:2f:69:e4:ca:27:89:97:35:f8:d1: d1:16:cf:9a:de:59:40:2c:e3:75:a3:7c:78:4e:01: be:ca:76:39:87:5c:c0:2f:e5:84:c9:a8:3f:bd:22: 18:c3:38:f9:cb:2f:23:e5:dc:cc:b4:3a:88:f0:95: 47:5b:4e:61:96:d5:32:4a:c6:a0:bc:1b:bd:f3:d3: 7f:d6:91:7a:c5:8e:e6:7c:51:e2:90:9d:27:b9:88: 2e:8f:c3:4d:74:fa:a5:aa:45:0c:37:53:f1:cb:04: 5b:5f:75:d1:77:2a:8e:a5:6c:d0:4c:a3:7d:35:dc: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:61:2A:EF:F7:18:FF:82:8C:30:C8:2B:27:0B:40:27:E1:15:EB:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af8b33ad-2af6-38b4-923f-ea011f121357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b2:4a:1f:aa:3a:ba:90:c2:8f:55:11:6c:87:68:0f:2a:f9: ad:83:90:81:a4:59:69:89:79:65:c4:fd:49:de:5c:10:46:1b: de:dc:90:90:ab:d0:ac:16:fb:b1:dc:e6:74:5d:c6:53:f5:59: fe:76:a7:fe:0b:28:4e:e1:f6:45:ff:d3:52:05:73:f2:4e:df: 69:1d:ac:c4:10:25:bc:30:a7:d0:38:b5:05:04:57:71:3f:cb: 31:dd:f3:83:3c:4b:dc:93:5c:98:f4:f8:cd:29:f8:db:4f:23: c9:ee:84:74:e0:b9:39:aa:46:d5:65:89:b8:9f:7a:46:4d:11: b0:ef:1d:64:28:c5:d7:8f:e5:a9:84:24:71:0e:9a:3c:67:d3: 14:04:77:b2:9a:36:d1:42:d5:52:7d:42:42:1b:91:9b:36:71: 5c:b5:1d:ca:32:83:d2:09:f9:7b:28:e0:00:a2:77:1d:9f:32: ab:01:71:42:e0:0c:14:a5:30:3b:3d:5a:72:70:7b:fe:97:f3: 98:21:f9:d7:17:88:58:2c:09:71:51:7b:27:bc:72:ef:a0:a5: 5e:7d:ff:52:e3:b7:72:9a:7c:c9:d4:c3:48:5e:4c:4b:82:25: 6d:27:cb:77:02:a7:5e:1a:d1:ed:a2:c4:0d:dd:fe:57:82:0e: a1:8a:33:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1NxD0XhESYNW+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk YWU4ZDgxOWEtMzNmYS00ZTMyLWIyNzEtOThlZDEwNmFkNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Y8wztFC0hV3wo5vVtPgSo8WAaCYiZtF6Ef zfFwRJ9aw8wzfZTIQciN6ICqAbTmWvh4/ldZvMwQar8dAgTJOmoJRzklA5zfWfLz SKu3bN9J1mqqJN5MgOLnQuvtOFCEBJ+JAUh7Gp1Y2FS7YxIStWxgsHWwFKUqSGw2 4jaECeOoZ3ATIvkQd2Yqpi9p5MoniZc1+NHRFs+a3llALON1o3x4TgG+ynY5h1zA L+WEyag/vSIYwzj5yy8j5dzMtDqI8JVHW05hltUySsagvBu989N/1pF6xY7mfFHi kJ0nuYguj8NNdPqlqkUMN1PxywRbX3XRdyqOpWzQTKN9NdzK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJhKu/3GP+CjDDIKycLQCfhFesqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWY4YjMzYWQtMmFmNi0z OGI0LTkyM2YtZWEwMTFmMTIxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2ySh+qOrqQwo9VEWyHaA8q+a2DkIGkWWmJeWXE/UneXBBGG97ckJCr 0KwW+7Hc5nRdxlP1Wf52p/4LKE7h9kX/01IFc/JO32kdrMQQJbwwp9A4tQUEV3E/ yzHd84M8S9yTXJj0+M0p+NtPI8nuhHTguTmqRtVlibifekZNEbDvHWQoxdeP5amE JHEOmjxn0xQEd7KaNtFC1VJ9QkIbkZs2cVy1Hcoyg9IJ+Xso4ACidx2fMqsBcULg DBSlMDs9WnJwe/6X85gh+dcXiFgsCXFReye8cu+gpV59/1Ljt3KafMnUw0heTEuC JW0ny3cCp14a0e2ixA3d/leCDqGKM0E= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:25 2026 by rpki-client