$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c6cc9340-ddd2-333c-b59c-f5d510a08422.roa File: c6cc9340-ddd2-333c-b59c-f5d510a08422.roa (raw, json) Hash identifier: vDD+dC012Nf/erFwDzTsc0ViG9hRzKrYuZpx22UfYNc= Subject key identifier: 71:2C:12:77:20:3D:C3:24:DA:D6:73:5B:70:40:47:09:61:93:63:88 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D32D4D404E0CC034042016220 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c6cc9340-ddd2-333c-b59c-f5d510a08422.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 23473 IP address blocks: 153.33.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:d4:04:e0:cc:03:40:42:01:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=76980331-d9b6-448a-aa71-9a46ecb8bbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:78:b9:0c:43:7a:f5:6c:71:b6:97:30:f0: 7c:29:d4:32:23:b7:94:99:8d:43:1b:bb:8a:0a:17: d1:4c:88:8c:4f:cd:68:46:88:1f:58:31:fc:a8:e3: 49:f5:23:df:1a:0a:8a:5a:60:14:09:3f:d4:fb:e2: 7e:82:b0:34:b3:cd:aa:00:1d:39:5d:6b:66:35:67: b5:e5:78:8d:e0:f4:6d:c8:a3:fc:0f:49:2d:82:51: 7b:24:01:e6:7d:76:90:bf:98:04:03:d4:a5:dc:f2: 0e:86:12:97:42:bb:71:87:64:7c:8c:8e:3a:cd:fb: 61:1a:74:4d:cb:c1:8b:e0:41:9d:f9:cc:b6:ab:f6: b7:6e:56:83:fc:ca:44:70:07:42:d8:d9:a9:3e:c6: 07:d8:1d:d3:55:03:8a:06:0a:4e:d4:eb:2c:54:fa: e4:49:6c:af:cf:31:c1:4d:6e:e1:71:7b:3d:86:55: 8e:8f:ec:8b:ff:fe:4b:22:70:3e:39:ea:a8:e9:2f: 73:2b:a5:e0:7a:ac:eb:24:6b:c9:df:21:fa:b8:90: 60:40:c8:5d:48:00:36:28:2b:32:37:43:5c:c4:ad: 36:28:0d:ed:38:43:15:8e:12:5b:2f:03:95:4b:ed: b9:23:e7:66:84:35:b0:90:28:7e:c0:37:48:1c:3f: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2C:12:77:20:3D:C3:24:DA:D6:73:5B:70:40:47:09:61:93:63:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c6cc9340-ddd2-333c-b59c-f5d510a08422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d6:5f:77:ef:ef:8c:fb:75:39:50:c3:68:41:76:09:93:7c: 4c:ba:7d:da:61:70:26:44:8f:22:96:ae:19:46:b1:24:8d:57: 2e:e9:6c:06:f7:87:c6:57:1d:07:0e:ad:1f:ba:21:d2:34:35: 02:e3:2f:71:0e:22:00:ca:24:5b:fc:90:58:74:54:56:54:93: 9b:56:d0:18:a3:50:e0:dd:dd:9a:b5:1b:61:da:38:4c:3a:b7: ef:7b:db:29:10:cf:fa:0a:a4:1a:f0:3b:56:97:01:52:dd:91: 6b:03:1f:3e:01:0f:ed:22:9b:e2:1c:98:a9:ea:5c:c1:93:13: b6:53:d9:ca:08:84:b0:c4:fc:3c:ca:1e:ea:fc:6e:f6:e7:09: 74:fc:d2:73:00:6e:38:0d:af:64:5c:14:61:e3:98:87:31:00: 85:00:12:1f:57:96:65:54:d7:ab:b0:00:38:8c:0b:0e:43:8b: 03:2c:9e:4c:a3:aa:f4:83:30:b0:46:18:08:a7:a3:b8:9d:d8: 82:7c:ea:ec:9b:7f:cd:d4:02:20:86:52:45:4c:8b:fd:d4:87: b4:af:4d:10:7d:1f:ef:ad:24:05:e7:60:fd:f3:aa:ad:d4:ae: 48:71:d2:23:ba:57:04:c8:e8:2e:b9:2e:48:b5:42:2b:c4:0f: fd:7b:d2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1NQE4MwDQEIBYiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk NzY5ODAzMzEtZDliNi00NDhhLWFhNzEtOWE0NmVjYjhiYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3B4uQxDevVscbaXMPB8KdQyI7eUmY1DG7uK ChfRTIiMT81oRogfWDH8qONJ9SPfGgqKWmAUCT/U++J+grA0s82qAB05XWtmNWe1 5XiN4PRtyKP8D0ktglF7JAHmfXaQv5gEA9Sl3PIOhhKXQrtxh2R8jI46zfthGnRN y8GL4EGd+cy2q/a3blaD/MpEcAdC2NmpPsYH2B3TVQOKBgpO1OssVPrkSWyvzzHB TW7hcXs9hlWOj+yL//5LInA+Oeqo6S9zK6XgeqzrJGvJ3yH6uJBgQMhdSAA2KCsy N0NcxK02KA3tOEMVjhJbLwOVS+25I+dmhDWwkCh+wDdIHD9zmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEsEncgPcMk2tZzW3BARwlhk2OIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYzZjYzkzNDAtZGRkMi0z MzNjLWI1OWMtZjVkNTEwYTA4NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPWX3fv74z7dTlQw2hBdgmTfEy6fdphcCZEjyKWrhlGsSSNVy7pbAb3 h8ZXHQcOrR+6IdI0NQLjL3EOIgDKJFv8kFh0VFZUk5tW0BijUODd3Zq1G2HaOEw6 t+972ykQz/oKpBrwO1aXAVLdkWsDHz4BD+0im+IcmKnqXMGTE7ZT2coIhLDE/DzK Hur8bvbnCXT80nMAbjgNr2RcFGHjmIcxAIUAEh9XlmVU16uwADiMCw5DiwMsnkyj qvSDMLBGGAino7id2IJ86uybf83UAiCGUkVMi/3Uh7SvTRB9H++tJAXnYP3zqq3U rkhx0iO6VwTI6C65Lki1QivED/170v0= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:50 2026 by rpki-client