$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd23d12c-d686-395c-ab94-64a7966c1e53.roa File: cd23d12c-d686-395c-ab94-64a7966c1e53.roa (raw, json) Hash identifier: IIJq2HoQU82oSXkverShAryNrB4XShsq4YzXSISk4yw= Subject key identifier: 4A:58:0B:BE:2A:E1:5E:63:B4:67:9D:65:57:92:77:11:61:24:5E:1B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D300A3A503E02B7DE9C71AA80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd23d12c-d686-395c-ab94-64a7966c1e53.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 23473 IP address blocks: 153.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3a:50:3e:02:b7:de:9c:71:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bc0a3388-2f79-406c-acf6-8ccfd59cb583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f3:10:47:58:c0:e6:e4:58:49:e9:78:f9:8f: 05:72:8e:c8:7c:bf:6e:c9:d0:3b:96:dd:d0:2b:28: 83:4d:e2:d1:f3:5b:d2:4b:d5:8c:6b:70:ea:85:a5: 0c:f4:6c:9c:60:45:13:2b:da:60:bb:9a:c3:d3:19: 30:9a:b8:23:48:49:c1:29:9c:2b:cd:53:84:22:ee: ad:cd:49:4c:fb:2e:6a:b5:e3:1e:d0:ef:19:69:a1: 24:fb:ac:a6:61:d3:86:ed:36:1d:2a:56:68:c7:d6: f0:94:e9:b1:18:7a:b9:ce:b6:f5:43:31:53:fe:71: 33:24:54:1a:84:5e:b8:8c:ed:bc:89:67:24:7f:a0: af:e0:40:ae:13:91:ee:27:52:ed:56:d1:a9:7f:d5: 66:cc:1b:d4:14:f7:ef:9f:b3:3e:c8:5a:71:42:5b: 17:c5:bc:11:41:ac:1d:a1:db:93:5d:9b:12:d6:2e: 64:53:9f:f5:db:de:09:10:7d:e7:63:34:df:2f:aa: 3a:fa:32:73:70:32:45:be:33:0e:1e:33:00:7c:10: 47:dd:85:8f:91:78:03:78:66:73:53:0d:f9:bc:4e: 81:a0:42:e0:0a:cb:d1:6f:89:bf:57:fa:06:97:f3: 3b:21:05:ef:ee:66:9b:82:85:7d:15:e2:62:dd:57: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:0B:BE:2A:E1:5E:63:B4:67:9D:65:57:92:77:11:61:24:5E:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd23d12c-d686-395c-ab94-64a7966c1e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:56:56:19:94:57:42:c7:de:77:20:70:f1:7c:0b:f7:39:0e: 32:17:e8:15:65:61:62:f8:0c:df:2a:1e:41:f7:95:16:86:a5: 17:5e:80:8f:34:b7:d1:ee:bb:75:d4:68:76:d6:5f:02:bb:5c: 9c:ab:c0:10:fa:25:6b:75:a1:d1:af:4e:a0:86:44:8e:2f:3e: 86:4a:8e:49:e5:72:17:8c:04:29:11:f5:bf:e3:1b:04:2f:3f: cf:ee:54:c4:83:d8:14:da:e9:d0:dc:bd:26:be:93:15:4b:7c: a2:51:a1:48:cf:40:96:95:86:08:4b:03:3e:75:0d:9a:44:ad: 72:dc:c4:0e:36:cd:fd:ba:b0:03:0e:53:7a:e0:ff:8c:bc:ec: 74:8c:52:ba:ae:76:14:dc:57:26:da:86:28:da:9e:78:3e:b6: 1e:3e:71:94:92:c7:ce:1d:75:58:9f:43:3e:55:62:dc:c4:9f: da:71:07:98:a2:87:7b:cf:35:cc:c3:27:fa:4a:65:97:5d:67: db:3a:d5:92:0a:47:ff:f4:b4:e9:f9:62:93:96:a9:77:77:b0: 46:3c:e5:ca:4e:12:0e:78:e4:4e:94:5f:fd:b4:8c:2a:bb:3e: 5c:eb:bc:28:de:3e:8b:8d:0a:de:3d:d5:38:9e:63:93:f2:94: 4f:0a:2f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjpQPgK33pxxqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmMwYTMzODgtMmY3OS00MDZjLWFjZjYtOGNjZmQ1OWNiNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPMQR1jA5uRYSel4+Y8Fco7IfL9uydA7lt3Q KyiDTeLR81vSS9WMa3DqhaUM9GycYEUTK9pgu5rD0xkwmrgjSEnBKZwrzVOEIu6t zUlM+y5qteMe0O8ZaaEk+6ymYdOG7TYdKlZox9bwlOmxGHq5zrb1QzFT/nEzJFQa hF64jO28iWckf6Cv4ECuE5HuJ1LtVtGpf9VmzBvUFPfvn7M+yFpxQlsXxbwRQawd oduTXZsS1i5kU5/1294JEH3nYzTfL6o6+jJzcDJFvjMOHjMAfBBH3YWPkXgDeGZz Uw35vE6BoELgCsvRb4m/V/oGl/M7IQXv7mabgoV9FeJi3Ve9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpYC74q4V5jtGedZVeSdxFhJF4bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2QyM2QxMmMtZDY4Ni0z OTVjLWFiOTQtNjRhNzk2NmMxZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANWVhmUV0LH3ncgcPF8C/c5DjIX6BVlYWL4DN8qHkH3lRaGpRdegI80 t9Huu3XUaHbWXwK7XJyrwBD6JWt1odGvTqCGRI4vPoZKjknlcheMBCkR9b/jGwQv P8/uVMSD2BTa6dDcvSa+kxVLfKJRoUjPQJaVhghLAz51DZpErXLcxA42zf26sAMO U3rg/4y87HSMUrqudhTcVybahijanng+th4+cZSSx84ddVifQz5VYtzEn9pxB5ii h3vPNczDJ/pKZZddZ9s61ZIKR//0tOn5YpOWqXd3sEY85cpOEg545E6UX/20jCq7 PlzrvCjePouNCt491TieY5PylE8KLwY= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:23 2026 by rpki-client