$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c70ca5b3-0d67-3375-a965-d41712fdd34d.roa File: c70ca5b3-0d67-3375-a965-d41712fdd34d.roa (raw, json) Hash identifier: 76pnXiZqUyBSD6HO4uUoODqIXH1r4rSilvvxWSlB5bU= Subject key identifier: E5:CA:FB:6F:50:1B:3E:6C:ED:DB:B4:D6:91:29:71:C4:CB:F6:AD:0C Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D32D4D48C6C922003E8765200 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c70ca5b3-0d67-3375-a965-d41712fdd34d.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 23473 IP address blocks: 153.33.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:d4:8c:6c:92:20:03:e8:76:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=55d39de2-3ef2-4059-8886-77557c046a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:c6:31:0b:1c:be:cc:f3:f5:e8:17:2a:38: e6:52:27:97:be:92:31:3f:fa:64:a3:cc:c8:94:9d: e5:32:b6:0b:49:b3:3b:32:b9:aa:86:c9:99:78:6e: 7d:38:ff:06:e1:f7:2c:ca:57:e3:e2:68:92:62:83: a9:d9:c7:88:d5:9e:53:a1:dd:0b:7c:91:75:5f:e5: 39:83:60:9b:9b:5e:78:f6:0a:1d:46:31:2f:44:61: 21:ae:10:72:f9:7a:a4:77:51:d4:65:21:c1:a2:dd: 66:b0:78:bb:7f:d1:09:1b:7b:9b:d9:a1:b9:84:13: 89:d1:a9:ed:e1:89:a7:0e:9d:fb:80:f4:81:85:4a: 0b:df:d5:c0:36:37:d7:97:0e:9e:83:9e:3b:fa:09: 22:a5:d0:99:be:54:fd:e2:ab:9c:50:3b:4e:68:e9: 3d:41:3b:2a:39:c4:77:7f:34:f8:5d:98:1f:25:ab: d1:28:ee:eb:85:9b:87:c3:f5:d5:13:30:03:18:24: fb:90:5b:90:69:eb:3f:48:27:83:51:0e:01:93:d6: 20:e9:ff:9d:5c:aa:96:92:d5:cd:44:cb:f4:24:a0: 48:11:e2:9c:58:05:42:49:a2:0b:84:b9:b6:8d:b8: 22:ec:35:96:79:b8:a0:83:69:2b:ed:6f:fa:97:f6: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:FB:6F:50:1B:3E:6C:ED:DB:B4:D6:91:29:71:C4:CB:F6:AD:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c70ca5b3-0d67-3375-a965-d41712fdd34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:45:5c:d4:b8:10:02:5e:e6:d0:27:be:5f:53:46:e8:d2:b2: 9d:3b:2d:1e:e8:16:16:21:93:7f:7b:e7:9f:13:10:80:fb:5b: 5d:0e:c9:24:8d:95:d7:1e:28:84:07:63:54:36:83:1d:31:3f: 38:98:a7:05:de:e3:ea:78:bd:e1:53:f1:1c:26:7e:88:2d:8d: c9:b0:ed:2a:b4:34:d1:9e:ce:c7:9a:ff:d9:e2:23:6a:00:a3: b9:c9:19:86:43:d4:55:7e:e4:57:f6:7d:8f:55:1a:36:47:e3: ba:ff:f0:5b:1c:5b:92:76:31:07:0f:9a:d7:fc:38:17:07:99: 59:68:a4:c7:48:81:8d:37:34:6d:43:91:f5:b9:ab:04:a8:91: 52:96:6a:8f:b4:12:1d:d0:9a:52:47:cd:fa:31:7d:04:9f:3a: a6:dd:42:d5:d9:a8:e9:cf:17:4a:47:4f:56:5d:11:83:10:ca: be:25:01:c4:fe:eb:d2:dc:b6:4a:6a:16:6a:cb:31:2e:f9:23: 60:10:a1:0e:52:8f:7e:01:72:21:44:7b:5d:b0:47:23:2d:0f: 55:5c:c8:a3:5c:e6:9f:87:0f:cd:5b:fb:dc:b3:4b:86:a9:22: dc:7d:98:5c:af:b6:5a:b1:3c:ed:fc:02:d1:be:a2:5a:26:67: 46:91:cc:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y1NSMbJIgA+h2UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk NTVkMzlkZTItM2VmMi00MDU5LTg4ODYtNzc1NTdjMDQ2YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHrGMQscvszz9egXKjjmUieXvpIxP/pko8zI lJ3lMrYLSbM7MrmqhsmZeG59OP8G4fcsylfj4miSYoOp2ceI1Z5Tod0LfJF1X+U5 g2Cbm1549godRjEvRGEhrhBy+Xqkd1HUZSHBot1msHi7f9EJG3ub2aG5hBOJ0ant 4YmnDp37gPSBhUoL39XANjfXlw6eg547+gkipdCZvlT94qucUDtOaOk9QTsqOcR3 fzT4XZgfJavRKO7rhZuHw/XVEzADGCT7kFuQaes/SCeDUQ4Bk9Yg6f+dXKqWktXN RMv0JKBIEeKcWAVCSaILhLm2jbgi7DWWebigg2kr7W/6l/aD8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXK+29QGz5s7du01pEpccTL9q0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYzcwY2E1YjMtMGQ2Ny0z Mzc1LWE5NjUtZDQxNzEyZmRkMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNFXNS4EAJe5tAnvl9TRujSsp07LR7oFhYhk397558TEID7W10OySSN ldceKIQHY1Q2gx0xPziYpwXe4+p4veFT8Rwmfogtjcmw7Sq0NNGezsea/9niI2oA o7nJGYZD1FV+5Ff2fY9VGjZH47r/8FscW5J2MQcPmtf8OBcHmVlopMdIgY03NG1D kfW5qwSokVKWao+0Eh3QmlJHzfoxfQSfOqbdQtXZqOnPF0pHT1ZdEYMQyr4lAcT+ 69LctkpqFmrLMS75I2AQoQ5Sj34BciFEe12wRyMtD1VcyKNc5p+HD81b+9yzS4ap Itx9mFyvtlqxPO38AtG+olomZ0aRzLg= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:18 2026 by rpki-client