$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5af641c-a974-38b1-896b-f138e1e2e083.roa File: b5af641c-a974-38b1-896b-f138e1e2e083.roa (raw, json) Hash identifier: QbMwUzzHs2Ih6dsIyX9XiFoh4kliQva/0TqUf5LDaBY= Subject key identifier: 73:D3:DD:67:BE:E0:02:74:B7:4C:66:24:43:F7:6F:85:CF:5F:0B:0D Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF88959FCD1823C6D25280 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5af641c-a974-38b1-896b-f138e1e2e083.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:88:95:9f:cd:18:23:c6:d2:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=53325aa0-63b3-4a27-b236-59ee190bbd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:28:f0:b6:78:5e:0d:82:1c:8b:e2:4e:fb: 34:e5:80:24:2a:e5:c5:31:76:1b:d0:b2:16:bc:cb: f6:93:54:da:ef:e7:2c:b2:25:20:49:f5:c8:ad:60: b7:94:68:cd:76:13:d4:f7:2c:74:ed:29:c6:4f:63: 1a:38:f4:72:a5:01:58:ce:33:6b:31:90:96:92:7b: 88:6e:0c:ba:8a:dd:f3:d5:f8:3a:8e:42:3e:93:c3: e2:a1:a2:06:99:1b:6c:9c:75:ef:94:aa:be:c1:d6: 88:bb:00:37:90:cc:a7:db:f5:5f:9e:e6:62:3f:6c: a0:10:d2:79:cc:b9:ce:80:1c:19:98:35:51:42:df: 75:ff:85:b3:65:ba:1d:56:c0:dc:fc:80:d6:b7:4c: bf:60:e2:7d:ec:e2:1b:ab:c3:9b:17:6f:93:2b:4a: 1e:4f:a6:2d:51:25:35:ef:64:10:5b:0c:cc:f9:95: 86:44:46:f8:31:7b:a1:a4:99:91:d9:79:af:d8:14: 48:22:2d:6c:c2:a2:8f:d1:f7:c2:85:ba:4e:9a:df: 42:6a:ff:0c:fd:ad:2b:2c:a7:e2:6e:c9:e6:9c:13: 78:67:95:60:e6:03:b8:c4:5c:a6:a1:e3:15:35:30: e1:5b:ae:e3:d1:90:f9:80:c6:be:09:34:65:ef:75: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D3:DD:67:BE:E0:02:74:B7:4C:66:24:43:F7:6F:85:CF:5F:0B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b5af641c-a974-38b1-896b-f138e1e2e083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c4:dc:5d:24:04:ce:cd:e8:f2:9d:af:71:86:85:09:2c:98: 0b:fc:9f:bd:b0:d6:92:f3:3c:94:f3:89:b7:37:fc:95:3d:28: 2c:fd:39:14:3f:83:06:20:bf:87:a9:e0:d8:69:b5:37:d4:22: 3b:00:cb:2c:23:3b:51:f8:d3:3b:3a:62:3c:de:bd:f1:68:f0: 16:cd:1d:0c:49:75:be:a8:ed:f9:26:d2:02:a4:06:47:0c:78: 25:3f:7f:b4:c3:4a:d6:15:2a:ae:b5:80:17:0e:bb:ed:28:d1: 6c:3e:1f:cc:fb:94:1e:91:fa:cf:ad:cc:8b:c5:a7:48:68:89: fc:d0:db:52:89:53:76:63:70:df:91:c9:37:ae:6c:bc:24:84: fe:43:91:23:ad:ca:0a:16:fc:09:aa:86:9e:b3:40:c5:c3:c2: 1e:49:bc:ee:7c:9e:85:f4:2b:fd:d5:2d:02:d7:ab:78:cb:15: 2c:71:5e:c4:07:ce:20:2e:8a:b8:38:32:cd:f8:f7:49:e2:be: 27:8a:22:f2:99:d6:25:2a:fc:58:51:58:97:4d:5a:d5:c4:83: 30:5e:03:a9:28:7b:4c:f0:9c:8b:c7:ec:8f:bc:50:44:9b:0e: b2:1b:f4:59:97:e0:c6:8b:ad:59:d8:fe:a9:5e:07:73:14:d5: 49:d8:44:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4iVn80YI8bSUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NTMzMjVhYTAtNjNiMy00YTI3LWIyMzYtNTllZTE5MGJiZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEIo8LZ4Xg2CHIviTvs05YAkKuXFMXYb0LIW vMv2k1Ta7+cssiUgSfXIrWC3lGjNdhPU9yx07SnGT2MaOPRypQFYzjNrMZCWknuI bgy6it3z1fg6jkI+k8PioaIGmRtsnHXvlKq+wdaIuwA3kMyn2/VfnuZiP2ygENJ5 zLnOgBwZmDVRQt91/4WzZbodVsDc/IDWt0y/YOJ97OIbq8ObF2+TK0oeT6YtUSU1 72QQWwzM+ZWGREb4MXuhpJmR2Xmv2BRIIi1swqKP0ffChbpOmt9Cav8M/a0rLKfi bsnmnBN4Z5Vg5gO4xFymoeMVNTDhW67j0ZD5gMa+CTRl73Wo3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPT3We+4AJ0t0xmJEP3b4XPXwsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYjVhZjY0MWMtYTk3NC0z OGIxLTg5NmItZjEzOGUxZTJlMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLE3F0kBM7N6PKdr3GGhQksmAv8n72w1pLzPJTzibc3/JU9KCz9ORQ/ gwYgv4ep4NhptTfUIjsAyywjO1H40zs6YjzevfFo8BbNHQxJdb6o7fkm0gKkBkcM eCU/f7TDStYVKq61gBcOu+0o0Ww+H8z7lB6R+s+tzIvFp0hoifzQ21KJU3ZjcN+R yTeubLwkhP5DkSOtygoW/Amqhp6zQMXDwh5JvO58noX0K/3VLQLXq3jLFSxxXsQH ziAuirg4Ms3490nivieKIvKZ1iUq/FhRWJdNWtXEgzBeA6koe0zwnIvH7I+8UESb DrIb9FmX4MaLrVnY/qleB3MU1UnYRDQ= -----END CERTIFICATE-----Generated at Sat Mar 21 20:56:47 2026 by rpki-client