$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa File: d23d6852-40f1-33ad-aedc-0f42655c7308.roa (raw, json) Hash identifier: Z6ajONycsNGImBM568YMHdNw5yaRndzrzP0pIX2IJzA= Subject key identifier: 10:84:5C:B6:B2:94:15:73:80:41:55:9E:B2:61:CF:1A:C0:AC:BE:C8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF768E2FAD328331EDFD40 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:76:8e:2f:ad:32:83:31:ed:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=c2c970f1-472e-4198-b091-ff8a53b60893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a3:10:be:bf:5a:d9:31:76:50:b7:40:c9:a1: fb:08:98:82:9e:2f:75:b1:79:3c:10:2f:a3:51:8f: c7:4a:d8:9b:57:dd:81:73:67:8d:9d:cc:b5:60:32: f8:e1:cc:5a:01:0e:df:96:0b:b6:75:e9:a6:f1:47: 8a:9e:e2:ad:14:c8:43:72:bb:79:5e:38:7b:75:90: 10:ff:d6:23:83:cc:93:9b:77:6f:80:8d:97:fc:e7: a6:46:a0:92:dc:01:9f:fa:26:f3:f6:af:32:52:e5: a7:b4:88:30:92:5e:63:36:64:7b:26:6a:86:09:6c: eb:6b:71:51:64:da:2c:c3:9e:81:62:6e:ac:87:d7: e6:f2:50:ed:17:cf:21:7b:67:6c:90:7d:bf:2f:c7: 51:ac:bb:b8:31:29:1b:e9:30:80:23:74:c9:1e:db: bc:57:5d:0d:47:54:52:92:26:61:fd:41:11:0f:f6: 76:c6:05:a5:ba:d8:d1:5e:d0:a8:c1:fa:b1:fc:d2: e7:66:da:21:5b:1e:be:e2:93:76:33:a8:8e:0c:6f: ef:bc:00:d8:93:a6:42:88:eb:86:81:48:70:96:43: ca:d9:7a:54:e6:80:fc:c8:b0:66:56:a5:6a:62:f8: db:8e:60:cd:b4:e4:64:14:8c:a0:28:46:f5:35:c4: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:84:5C:B6:B2:94:15:73:80:41:55:9E:B2:61:CF:1A:C0:AC:BE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ee:5f:b6:30:e6:43:4c:d1:c8:c1:22:df:82:c0:eb:3a:00: ae:40:9a:e8:be:83:e2:54:e2:10:27:be:be:0b:92:58:3f:d9: 5a:88:ec:e7:04:6e:d9:89:c2:35:c9:ae:91:6b:70:a3:19:e5: 8b:8b:3f:47:f7:51:73:96:20:27:5d:36:f8:c5:a5:68:8d:07: d6:10:f7:20:2d:30:10:1e:d0:76:83:0e:39:5f:2d:01:b9:84: f0:be:08:d0:31:65:08:33:33:67:1e:f3:eb:03:fc:c7:b3:00: 8c:2a:76:65:da:b7:1f:6a:dd:ba:33:48:35:88:c3:92:c1:1e: 0b:1d:df:ab:52:62:c8:6b:3d:bb:b4:52:51:0d:ff:b3:dd:51: 34:29:a5:81:5c:64:26:47:f4:5e:84:01:ee:b1:f0:27:f0:2d: f6:ac:5f:e7:17:37:ea:06:80:18:fd:60:95:de:b9:50:b7:1d: b0:22:c7:d3:cf:b6:5c:20:66:1a:c1:b7:98:f3:a7:8b:16:3e: 1d:b3:9b:07:bb:39:ba:3a:ad:99:28:6b:e9:e5:5d:ba:73:13: 43:f4:70:6f:51:9d:f1:47:ae:7a:30:d8:ab:36:b3:b1:53:01: 3b:51:96:e3:e8:87:fe:78:b2:bc:6d:8c:58:05:e4:ba:16:6a: ca:8e:d8:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3aOL60ygzHt/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YzJjOTcwZjEtNDcyZS00MTk4LWIwOTEtZmY4YTUzYjYwODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqMQvr9a2TF2ULdAyaH7CJiCni91sXk8EC+j UY/HStibV92Bc2eNncy1YDL44cxaAQ7flgu2demm8UeKnuKtFMhDcrt5Xjh7dZAQ /9Yjg8yTm3dvgI2X/OemRqCS3AGf+ibz9q8yUuWntIgwkl5jNmR7JmqGCWzra3FR ZNosw56BYm6sh9fm8lDtF88he2dskH2/L8dRrLu4MSkb6TCAI3TJHtu8V10NR1RS kiZh/UERD/Z2xgWlutjRXtCowfqx/NLnZtohWx6+4pN2M6iODG/vvADYk6ZCiOuG gUhwlkPK2XpU5oD8yLBmVqVqYvjbjmDNtORkFIygKEb1NcRGyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCEXLaylBVzgEFVnrJhzxrArL7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDIzZDY4NTItNDBmMS0z M2FkLWFlZGMtMGY0MjY1NWM3MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7uX7Yw5kNM0cjBIt+CwOs6AK5Amui+g+JU4hAnvr4Lklg/2VqI7OcE btmJwjXJrpFrcKMZ5YuLP0f3UXOWICddNvjFpWiNB9YQ9yAtMBAe0HaDDjlfLQG5 hPC+CNAxZQgzM2ce8+sD/MezAIwqdmXatx9q3bozSDWIw5LBHgsd36tSYshrPbu0 UlEN/7PdUTQppYFcZCZH9F6EAe6x8CfwLfasX+cXN+oGgBj9YJXeuVC3HbAix9PP tlwgZhrBt5jzp4sWPh2zmwe7Obo6rZkoa+nlXbpzE0P0cG9RnfFHrnow2Ks2s7FT ATtRluPoh/54srxtjFgF5LoWasqO2Jg= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:25 2026 by rpki-client