$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d2287951-35f6-381a-9d93-d90920af7b66.roa File: d2287951-35f6-381a-9d93-d90920af7b66.roa (raw, json) Hash identifier: Ek8pCXMRzOZ3Yn5Vnb60IoCkA+59PvmaQKZMYXrna4g= Subject key identifier: 3C:0F:06:83:4F:04:A6:E1:2A:14:3E:F7:10:19:E1:6E:FC:EA:5F:D0 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF771DDC68846FCB018C00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d2287951-35f6-381a-9d93-d90920af7b66.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:77:1d:dc:68:84:6f:cb:01:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=ffa36f5c-982a-4e39-9d58-0c14882b2638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:84:32:67:cf:a2:e6:48:fb:d7:4f:6f:5c: 7b:8f:73:3e:07:83:a3:32:b5:98:41:a5:29:4c:1c: e8:cf:b6:06:1e:f3:3b:72:6e:7f:ca:ef:6c:86:b3: 98:b3:9e:87:e7:85:58:1f:6f:47:bc:1d:c9:66:af: 62:23:1e:5e:6d:a3:65:47:fa:47:66:14:32:4b:17: dc:ac:0f:46:41:46:be:b6:ea:af:2e:2a:17:1f:00: 43:fc:ac:a4:5f:0d:66:1b:25:66:d4:1e:7f:7b:84: 13:c5:ac:f3:d6:b0:ed:20:45:de:6a:22:1e:38:91: fc:ff:e3:7a:89:c6:04:73:5a:ed:56:06:15:12:34: 27:2e:f6:eb:bf:01:0d:fe:78:9e:54:e9:f5:e4:d8: 9d:40:95:41:5e:99:ea:93:f6:e8:5d:d8:3a:52:8b: 49:b1:3f:8c:b0:2e:99:15:ab:1f:59:e5:37:31:3c: 4f:5c:11:8b:7b:1a:18:a1:e6:9a:0e:55:d2:6c:d8: ea:b8:c1:95:d2:77:d5:87:11:76:8c:ca:ab:37:03: 4c:4b:fe:ea:7d:c5:90:8b:c4:3f:4a:6b:21:0b:39: 7b:6d:b2:6d:dd:ac:31:9c:52:48:35:c0:c4:74:05: 8b:da:a1:b5:3f:94:e7:fc:30:9f:2d:34:40:35:94: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0F:06:83:4F:04:A6:E1:2A:14:3E:F7:10:19:E1:6E:FC:EA:5F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d2287951-35f6-381a-9d93-d90920af7b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fa:08:77:89:69:41:f2:05:f8:9b:ea:74:69:a2:28:bb:01: eb:f6:31:fd:07:66:88:c6:4b:0c:81:68:e9:50:7a:03:5e:e5: 46:c6:4d:21:7c:7d:73:da:3a:32:8b:c6:31:1f:09:7d:b0:b7: 94:3a:e2:af:fc:f0:13:69:8d:a7:56:0d:30:d3:60:dc:bc:70: 17:d8:5b:1f:ca:c0:60:ec:3c:e6:92:78:76:9f:64:01:c2:2d: 5a:85:c6:6f:c6:88:54:ed:d9:7c:f3:b0:3f:12:6d:c7:33:05: b2:c6:b1:9b:47:b7:67:b8:27:ba:6e:d8:ce:ad:4a:12:23:c8: 7b:ee:2e:70:d5:78:db:3f:e0:a2:d6:c7:0a:6b:ee:dc:6b:36: ce:f1:6f:1c:86:69:95:41:a9:c0:51:c7:94:27:0d:96:9a:65: 3e:c6:33:02:cb:f3:0f:a0:6d:56:85:88:a9:e9:dc:f5:fb:e4: 18:46:03:96:b7:2d:f3:0c:ad:85:f8:45:c3:09:3f:ae:4e:50: 99:4a:88:0b:6b:ff:18:28:fb:ac:ab:88:e7:b5:41:88:eb:9d: 12:1f:85:d8:38:70:4c:f0:c7:87:3d:48:7c:03:90:ae:06:8a: 45:1b:75:91:3b:70:86:8a:e8:d7:bb:8f:95:eb:b3:ae:e0:b5: 61:9a:e0:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3cd3GiEb8sBjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZmZhMzZmNWMtOTgyYS00ZTM5LTlkNTgtMGMxNDg4MmIyNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wWEMmfPouZI+9dPb1x7j3M+B4OjMrWYQaUp TBzoz7YGHvM7cm5/yu9shrOYs56H54VYH29HvB3JZq9iIx5ebaNlR/pHZhQySxfc rA9GQUa+tuqvLioXHwBD/KykXw1mGyVm1B5/e4QTxazz1rDtIEXeaiIeOJH8/+N6 icYEc1rtVgYVEjQnLvbrvwEN/nieVOn15NidQJVBXpnqk/boXdg6UotJsT+MsC6Z FasfWeU3MTxPXBGLexoYoeaaDlXSbNjquMGV0nfVhxF2jMqrNwNMS/7qfcWQi8Q/ SmshCzl7bbJt3awxnFJINcDEdAWL2qG1P5Tn/DCfLTRANZRhywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwPBoNPBKbhKhQ+9xAZ4W786l/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDIyODc5NTEtMzVmNi0z ODFhLTlkOTMtZDkwOTIwYWY3YjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr6CHeJaUHyBfib6nRpoii7Aev2Mf0HZojGSwyBaOlQegNe5UbGTSF8 fXPaOjKLxjEfCX2wt5Q64q/88BNpjadWDTDTYNy8cBfYWx/KwGDsPOaSeHafZAHC LVqFxm/GiFTt2XzzsD8SbcczBbLGsZtHt2e4J7pu2M6tShIjyHvuLnDVeNs/4KLW xwpr7txrNs7xbxyGaZVBqcBRx5QnDZaaZT7GMwLL8w+gbVaFiKnp3PX75BhGA5a3 LfMMrYX4RcMJP65OUJlKiAtr/xgo+6yriOe1QYjrnRIfhdg4cEzwx4c9SHwDkK4G ikUbdZE7cIaK6Ne7j5Xrs67gtWGa4Ec= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:50 2026 by rpki-client