$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cdfa6fe5-513e-38b7-a1a6-e034dc17fab8.roa File: cdfa6fe5-513e-38b7-a1a6-e034dc17fab8.roa (raw, json) Hash identifier: QQTHHH/zH3jJAXfuS5T7c6db+297t22aHf1HBxubSG4= Subject key identifier: 9A:03:6F:79:B2:37:1E:40:4F:4E:B2:59:1A:32:08:AC:0A:FB:26:DB Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D3704C3046C068FB9699D0680 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cdfa6fe5-513e-38b7-a1a6-e034dc17fab8.roa Signing time: Thu 19 Mar 2026 01:00:31 +0000 ROA not before: Thu 19 Mar 2026 01:00:31 +0000 ROA not after: Wed 17 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:37:04:c3:04:6c:06:8f:b9:69:9d:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 19 01:00:31 2026 GMT Not After : Jun 17 01:00:31 2026 GMT Subject: CN=cee3a5b8-7426-4fd6-85c0-52c9f5990dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1b:67:47:06:a1:64:90:6c:76:9d:af:fe:65: 27:56:3b:b8:cb:34:db:a6:5b:12:f5:69:e8:d8:95: 78:45:3b:72:02:e3:11:93:26:e0:42:5d:32:9c:20: b7:71:70:c8:94:53:62:07:6c:55:06:9a:d4:93:1a: b4:29:91:e2:cc:41:3c:a1:19:4c:42:93:88:2b:31: 4e:9f:ea:55:8d:fe:66:76:01:38:9a:14:c1:80:95: 00:fa:e3:d1:0d:43:71:03:7e:7a:dc:11:8e:30:77: ab:d7:28:30:4a:8b:a6:9a:19:fa:c8:6c:17:46:af: bd:75:3f:b0:7d:94:87:fd:e0:84:8b:dc:8f:e5:8f: 9a:20:ef:b3:76:f6:65:9f:12:2f:fc:3c:8a:14:0c: 3c:85:2a:61:4c:52:bb:f5:0e:2d:ab:19:6f:e0:c0: 9f:dc:5e:1e:da:89:de:89:3e:f7:6c:15:36:53:2d: 76:d6:6f:24:92:a9:ff:e5:ac:17:1c:32:d6:9f:b8: c2:21:cb:65:60:26:d3:bc:d8:c3:1c:60:67:c5:f5: 6b:64:b3:66:8e:dd:19:30:61:5f:b0:1d:3d:e3:e0: 72:30:0e:4b:2e:85:6e:cb:07:45:50:ec:ed:a3:36: 9b:44:eb:31:42:1f:44:8b:ec:3a:00:02:c4:42:68: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:03:6F:79:B2:37:1E:40:4F:4E:B2:59:1A:32:08:AC:0A:FB:26:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cdfa6fe5-513e-38b7-a1a6-e034dc17fab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:46:d3:4a:c8:5d:88:52:e3:2f:8c:f0:7f:23:be:5c:e0:be: ce:69:2c:9c:66:96:15:71:93:2c:8a:0f:85:6f:08:dc:a3:d2: 31:c3:a1:f6:ea:1d:e2:96:de:e4:3f:bc:da:d6:64:89:39:79: 73:b3:d0:33:2a:68:a5:32:a2:e6:c7:1d:39:fc:85:99:f8:c9: 4c:2a:36:d0:6e:a8:5f:1a:7d:cf:26:92:3c:f8:17:e8:45:1d: e2:a9:ca:1b:fc:41:e6:c7:d2:de:32:56:59:76:51:71:ba:b0: 03:9d:3f:2c:1a:44:ef:38:e7:e1:de:62:00:ff:69:2e:d8:a6: 30:df:7b:13:e9:40:95:07:89:e8:5e:21:af:af:1d:28:db:2f: 37:21:f3:c3:53:ab:29:d6:66:13:3d:2c:6e:12:a8:66:96:98: 6e:ae:ee:76:03:b0:a0:71:16:b3:7a:ae:96:2d:4c:d9:65:5c: 87:0b:7e:9b:a2:4c:cf:2e:25:6f:c0:5d:27:42:bf:39:5a:98: d2:71:d0:62:1b:7a:d3:ee:8d:a8:60:78:ed:70:d8:b6:97:ab: da:35:64:37:8b:3e:c4:de:76:e1:3a:bd:0e:40:08:3e:ee:99: 88:3e:c0:cf:48:3c:3c:b8:1a:76:b0:37:0e:26:b5:be:42:77: c1:7f:a7:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE03BMMEbAaPuWmdBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxOTAxMDAzMVoXDTI2MDYxNzAxMDAzMVowLzEtMCsGA1UEAxMk Y2VlM2E1YjgtNzQyNi00ZmQ2LTg1YzAtNTJjOWY1OTkwZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRtnRwahZJBsdp2v/mUnVju4yzTbplsS9Wno 2JV4RTtyAuMRkybgQl0ynCC3cXDIlFNiB2xVBprUkxq0KZHizEE8oRlMQpOIKzFO n+pVjf5mdgE4mhTBgJUA+uPRDUNxA3563BGOMHer1ygwSoummhn6yGwXRq+9dT+w fZSH/eCEi9yP5Y+aIO+zdvZlnxIv/DyKFAw8hSphTFK79Q4tqxlv4MCf3F4e2one iT73bBU2Uy121m8kkqn/5awXHDLWn7jCIctlYCbTvNjDHGBnxfVrZLNmjt0ZMGFf sB094+ByMA5LLoVuywdFUOztozabROsxQh9Ei+w6AALEQmjLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoDb3myNx5AT06yWRoyCKwK+ybbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2RmYTZmZTUtNTEzZS0z OGI3LWExYTYtZTAzNGRjMTdmYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdG00rIXYhS4y+M8H8jvlzgvs5pLJxmlhVxkyyKD4VvCNyj0jHDofbq HeKW3uQ/vNrWZIk5eXOz0DMqaKUyoubHHTn8hZn4yUwqNtBuqF8afc8mkjz4F+hF HeKpyhv8QebH0t4yVll2UXG6sAOdPywaRO845+HeYgD/aS7YpjDfexPpQJUHiehe Ia+vHSjbLzch88NTqynWZhM9LG4SqGaWmG6u7nYDsKBxFrN6rpYtTNllXIcLfpui TM8uJW/AXSdCvzlamNJx0GIbetPujahgeO1w2LaXq9o1ZDeLPsTeduE6vQ5ACD7u mYg+wM9IPDy4GnawNw4mtb5Cd8F/p8Y= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:27 2026 by rpki-client