$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b2998d56-7686-366d-b1a3-802e3df22ab1.roa File: b2998d56-7686-366d-b1a3-802e3df22ab1.roa (raw, json) Hash identifier: V+1vq96bKxNCtNqgVT21tKHs4eLe0aJdvKCNOk7Yxtg= Subject key identifier: 34:F4:29:C1:A9:8C:98:51:04:A8:68:5E:14:D8:C3:CB:BC:0C:FA:0E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F549DA2D104783897376417AC Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b2998d56-7686-366d-b1a3-802e3df22ab1.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a2:d1:04:78:38:97:37:64:17:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=f4065e49-d3d6-4fc4-bde4-9d110c3fee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:b4:79:57:fb:ce:e1:5b:8a:1e:85:b5:be: 78:ce:9d:c7:86:90:de:c2:1c:5b:28:0c:df:e6:63: e6:5d:db:ec:34:8e:0a:ca:27:2d:83:76:9f:e7:cb: c3:a1:54:4c:fc:3f:79:41:ee:82:16:af:34:46:26: 97:4b:15:cf:ce:e2:90:99:1c:d4:35:df:5f:50:00: d0:48:64:be:9b:e2:c6:1e:83:fc:e0:e0:9b:bd:2c: 16:36:f8:40:3b:53:ad:c6:87:07:5f:e8:63:a3:84: 52:b3:e5:81:ee:98:79:5e:a2:57:7c:a5:cc:a8:35: c1:42:73:e6:7b:95:4c:01:4e:83:b8:4c:33:f8:a6: 69:4f:1b:76:e0:4b:fe:89:d1:4b:28:40:1f:3f:d0: a8:4f:1f:bf:da:22:e4:7b:5f:05:79:54:37:64:6f: c3:30:3a:6b:52:85:6d:0d:49:a8:3b:c5:20:65:ad: 32:9f:6d:dc:b9:b5:de:8c:9a:c6:07:28:34:5c:7a: 69:99:4f:f9:21:8b:02:2a:60:2b:8e:10:ee:b8:dd: 45:59:8e:45:6d:84:4b:bb:24:7f:7b:e6:cb:ee:ef: 51:ed:c3:7f:e8:ea:16:f4:ac:c3:1c:88:9e:ee:d7: d6:1b:5a:c1:a1:a6:67:fa:b2:11:28:de:da:84:b8: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:29:C1:A9:8C:98:51:04:A8:68:5E:14:D8:C3:CB:BC:0C:FA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b2998d56-7686-366d-b1a3-802e3df22ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:dd:4a:c3:00:e2:ef:92:d4:48:76:e2:65:cd:ec:9d:9d:ef: 40:b7:64:7f:ff:51:fe:24:0a:8b:42:ae:6c:9f:38:9c:7f:9d: b6:57:8e:6f:87:a0:7f:44:0b:ce:85:a3:94:44:42:19:38:dc: ac:1e:d8:30:b0:ad:e9:d6:5e:45:43:42:41:50:2a:ab:04:07: 4b:64:30:96:d1:1c:67:db:fb:0a:84:5a:ba:87:d1:21:e3:ef: b3:c6:d7:cf:17:8b:5e:58:5e:57:3b:b4:e8:22:7a:1a:6d:d9: cb:2f:ca:d5:c3:f1:e0:14:04:31:0c:77:b3:2a:88:de:64:d4: 51:9f:bb:3b:e4:e1:90:bd:3b:36:33:a7:5d:6a:39:ed:1b:89: 65:15:82:44:0c:2b:ce:76:1b:2e:23:c9:a2:02:27:01:de:72: 38:9a:49:56:59:b0:ea:db:3e:cd:0a:24:4e:68:e9:94:29:26: 93:61:1c:de:7f:6e:b4:9c:ab:cd:02:dc:dc:b1:6e:e5:ed:dc: f7:eb:c3:21:79:88:c9:74:6e:5b:c7:42:24:f3:5f:6a:c6:9f: 11:64:cc:5a:1c:92:48:cd:a3:b2:4c:8b:67:00:6e:81:e8:bd: 2a:33:7d:f4:cb:03:81:dc:fe:b0:af:9b:7e:70:e8:cc:e0:3f: 24:1a:dd:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaLRBHg4lzdkF6wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZjQwNjVlNDktZDNkNi00ZmM0LWJkZTQtOWQxMTBjM2ZlZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF60eVf7zuFbih6Ftb54zp3HhpDewhxbKAzf 5mPmXdvsNI4Kyictg3af58vDoVRM/D95Qe6CFq80RiaXSxXPzuKQmRzUNd9fUADQ SGS+m+LGHoP84OCbvSwWNvhAO1OtxocHX+hjo4RSs+WB7ph5XqJXfKXMqDXBQnPm e5VMAU6DuEwz+KZpTxt24Ev+idFLKEAfP9CoTx+/2iLke18FeVQ3ZG/DMDprUoVt DUmoO8UgZa0yn23cubXejJrGByg0XHppmU/5IYsCKmArjhDuuN1FWY5FbYRLuyR/ e+bL7u9R7cN/6OoW9KzDHIie7tfWG1rBoaZn+rIRKN7ahLiM6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT0KcGpjJhRBKhoXhTYw8u8DPoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYjI5OThkNTYtNzY4Ni0z NjZkLWIxYTMtODAyZTNkZjIyYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvdSsMA4u+S1Eh24mXN7J2d70C3ZH//Uf4kCotCrmyfOJx/nbZXjm+H oH9EC86Fo5REQhk43Kwe2DCwrenWXkVDQkFQKqsEB0tkMJbRHGfb+wqEWrqH0SHj 77PG188Xi15YXlc7tOgiehpt2csvytXD8eAUBDEMd7MqiN5k1FGfuzvk4ZC9OzYz p11qOe0biWUVgkQMK852Gy4jyaICJwHecjiaSVZZsOrbPs0KJE5o6ZQpJpNhHN5/ brScq80C3NyxbuXt3PfrwyF5iMl0blvHQiTzX2rGnxFkzFockkjNo7JMi2cAboHo vSozffTLA4Hc/rCvm35w6MzgPyQa3Vg= -----END CERTIFICATE-----Generated at Sun Oct 4 21:32:08 2026 by rpki-client