$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa File: dba58025-2a8f-3dfd-87db-07fd507151e0.roa (raw, json) Hash identifier: n03bxPKhCkBTGYGlrclKOB/W2Y6hs/ZgdqA7r3yIyRI= Subject key identifier: B8:99:8B:7C:29:6D:EF:1E:C0:E4:8E:FA:F7:C2:65:AC:E1:DD:A5:DD Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D2644C09A26F0E8A6368BDD80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c0:9a:26:f0:e8:a6:36:8b:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=ff562c9f-2281-4e2c-bb30-1a273289dce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:e6:1a:93:2f:b8:61:b7:e1:79:68:0f:15: b5:c2:46:9f:e5:03:37:09:05:f2:c4:92:3e:57:a0: 66:74:af:64:49:0a:16:1f:d7:2a:4d:9e:61:96:29: 7d:e5:c3:78:30:ee:25:dd:0d:10:85:31:f3:79:1c: b4:d3:f9:99:12:bd:7d:e6:6b:1c:e4:69:f9:16:f6: 32:cc:3a:42:d7:7f:92:0d:64:18:5e:af:61:74:73: a7:46:45:6e:3b:1e:de:ea:87:cd:2f:a1:f1:f2:c1: d8:a7:ad:10:ff:c7:ff:a0:bc:c3:7c:0b:ec:2e:3c: aa:3a:ee:06:b6:ab:c1:f5:e4:9f:77:db:79:55:42: 8b:02:97:a3:37:1d:a2:59:64:ab:14:a7:c3:20:0f: 80:9f:11:e9:05:32:2c:ce:27:32:6f:c7:bc:70:71: 76:d3:00:8c:d4:4d:e5:aa:23:ef:d5:9d:11:31:12: 2d:96:72:c0:d8:6c:a7:e7:e8:d4:78:2b:a1:78:2f: f1:24:36:f9:0d:55:b9:dd:fa:fd:d6:a2:76:b8:00: 3c:f1:5d:57:3f:1d:2f:49:52:7e:07:a1:4a:61:84: f2:06:f0:26:95:63:ca:ee:3d:6e:97:e7:47:e5:87: 6b:a8:b0:92:52:c1:cc:16:82:de:37:d9:07:10:d9: 8f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:99:8B:7C:29:6D:EF:1E:C0:E4:8E:FA:F7:C2:65:AC:E1:DD:A5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:34:be:20:80:4e:13:35:51:71:98:9e:33:43:ac:32:97:2d: d0:fe:02:a5:cb:a5:3e:47:30:dc:7d:aa:63:a7:07:15:ef:a6: 31:e4:4b:7d:02:e7:92:17:31:de:f9:d9:37:a4:d3:9c:98:47: 7f:6a:d1:55:d4:bc:de:09:fc:b5:3d:4c:0e:f7:9c:a9:33:eb: 81:52:94:45:06:7d:35:79:2b:a8:1b:9e:87:33:9f:fb:49:f0: 38:2a:2b:77:f2:eb:38:1c:c9:b2:b8:7c:ef:1a:9d:8e:f1:f1: 20:8d:f6:55:55:e3:e1:bb:ed:d0:49:d9:2d:44:9b:8e:e5:e8: e1:f6:8c:c4:22:97:6d:89:a5:73:05:28:0b:36:3d:54:8e:45: d9:c6:ee:06:30:08:99:5a:ee:97:c6:33:e0:c5:3f:d8:b1:d9: d4:e7:ec:50:7f:e9:0e:70:65:cd:f1:ff:33:02:d8:94:e1:ca: 80:cc:30:7a:8f:3b:bf:e7:bf:63:a6:0c:9f:18:69:47:83:ff: 46:91:b1:f2:cf:18:2c:ad:83:f1:d4:07:7c:88:a6:14:92:b8: 40:c2:bb:66:ed:16:93:30:bd:5f:71:68:b4:49:d1:fb:7d:7b: c2:af:70:de:52:97:89:24:e4:f4:78:de:83:d3:89:d6:2e:a0: 8d:05:ef:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRMCaJvDopjaL3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZmY1NjJjOWYtMjI4MS00ZTJjLWJiMzAtMWEyNzMyODlkY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswvmGpMvuGG34XloDxW1wkaf5QM3CQXyxJI+ V6BmdK9kSQoWH9cqTZ5hlil95cN4MO4l3Q0QhTHzeRy00/mZEr195msc5Gn5FvYy zDpC13+SDWQYXq9hdHOnRkVuOx7e6ofNL6Hx8sHYp60Q/8f/oLzDfAvsLjyqOu4G tqvB9eSfd9t5VUKLApejNx2iWWSrFKfDIA+AnxHpBTIszicyb8e8cHF20wCM1E3l qiPv1Z0RMRItlnLA2Gyn5+jUeCuheC/xJDb5DVW53fr91qJ2uAA88V1XPx0vSVJ+ B6FKYYTyBvAmlWPK7j1ul+dH5YdrqLCSUsHMFoLeN9kHENmPQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiZi3wpbe8ewOSO+vfCZazh3aXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGJhNTgwMjUtMmE4Zi0z ZGZkLTg3ZGItMDdmZDUwNzE1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU0viCAThM1UXGYnjNDrDKXLdD+AqXLpT5HMNx9qmOnBxXvpjHkS30C 55IXMd752Tek05yYR39q0VXUvN4J/LU9TA73nKkz64FSlEUGfTV5K6gbnoczn/tJ 8DgqK3fy6zgcybK4fO8anY7x8SCN9lVV4+G77dBJ2S1Em47l6OH2jMQil22JpXMF KAs2PVSORdnG7gYwCJla7pfGM+DFP9ix2dTn7FB/6Q5wZc3x/zMC2JThyoDMMHqP O7/nv2OmDJ8YaUeD/0aRsfLPGCytg/HUB3yIphSSuEDCu2btFpMwvV9xaLRJ0ft9 e8KvcN5Sl4kk5PR43oPTidYuoI0F70I= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:26 2026 by rpki-client