$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa File: dba58025-2a8f-3dfd-87db-07fd507151e0.roa (raw, json) Hash identifier: sWf5CPDX3s18y6oFKvDHaKbV/JNQ6Ibg0GDtbVa5QFg= Subject key identifier: 82:32:FB:4A:18:B3:A4:93:40:F7:58:70:DB:08:55:D5:05:7A:67:B5 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA8EC4534E84EFE14D9B24180 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 23473 IP address blocks: 153.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:45:34:e8:4e:fe:14:d9:b2:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=cee58957-c2a0-4976-bc91-1c001963fe28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cf:0a:6f:9c:50:9a:51:e7:ec:0a:06:5c:a8: 6c:b0:4a:f6:67:37:eb:12:77:79:10:db:46:26:4f: 96:f1:87:6a:1e:d9:32:c4:f7:5e:29:f1:1c:b6:fe: 82:1f:30:46:76:f4:d9:7f:00:39:6c:f4:63:51:70: b6:eb:56:26:18:ba:ea:53:d1:ab:f4:86:89:d6:b1: 47:cb:8b:3e:c9:a2:c9:75:b7:42:14:df:a9:0e:d3: 78:59:47:13:4d:81:2c:c2:35:e1:19:1a:cf:cd:12: 2f:8d:a7:b6:28:f0:e8:e8:60:eb:81:b5:80:ee:cb: de:56:25:0b:25:81:70:39:27:14:8f:3e:12:83:53: 5c:f5:49:83:9e:3e:7d:52:02:a1:f4:e7:7a:3f:40: 6e:a0:75:ca:96:4b:03:97:90:5f:48:dc:a8:2d:d0: cf:20:c6:ac:d0:76:8f:9d:ff:24:e4:4d:b4:62:20: a0:52:2d:ad:fc:b4:ed:f5:f3:60:bd:51:f9:20:0a: dc:ee:ac:bb:2d:d9:d4:28:04:43:6a:a8:19:4a:4f: 27:32:53:a7:10:da:57:cb:37:d9:73:b8:dc:bb:83: d8:c5:dd:19:f3:9b:b4:83:11:33:9a:7c:5a:84:3c: 10:b5:45:10:81:ed:f4:8f:92:4e:33:d8:87:ad:16: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:FB:4A:18:B3:A4:93:40:F7:58:70:DB:08:55:D5:05:7A:67:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:50:ec:cc:a5:8c:a4:27:fb:99:41:1f:97:a6:88:a7:4b:69: 35:f1:28:35:8b:43:bc:68:53:c1:47:88:62:f1:c3:b7:2f:74: e7:44:92:63:36:77:8a:2c:23:66:86:25:f7:f6:7b:10:26:ec: 52:f7:3b:5f:73:c9:d8:79:3d:a7:96:a0:c2:33:7d:1d:a2:2b: f3:f3:c8:76:38:a3:73:1b:35:83:4b:9f:f1:06:8f:3a:3d:2f: b4:24:60:1a:2d:4e:12:71:0a:de:0b:83:df:7a:e1:f3:e4:68: 80:07:74:19:19:46:0f:53:b4:e0:0b:32:3f:1c:90:1f:2c:01: 8b:1d:83:9f:8f:b3:d5:34:69:da:39:e7:7b:f2:f7:3a:5a:5b: 95:72:6e:6b:95:b3:91:c1:bd:9b:13:b8:1e:64:d0:47:f2:8e: 5f:9e:64:be:37:a0:1e:f5:19:39:f6:0c:31:fe:eb:76:af:9e: 83:29:0e:6e:8c:74:08:8d:c4:07:06:89:fa:af:56:49:9d:33: 87:94:a3:fa:51:a3:91:05:68:88:a9:34:b1:85:81:92:ee:8e: 3b:c9:31:d6:4b:b9:c5:bb:4c:b9:d1:1c:09:e1:e9:1a:fd:96: 98:ef:e2:0a:f3:d3:57:53:3e:4e:5f:cc:df:0b:61:7e:0f:5b: e8:10:66:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7EU06E7+FNmyQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk Y2VlNTg5NTctYzJhMC00OTc2LWJjOTEtMWMwMDE5NjNmZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls8Kb5xQmlHn7AoGXKhssEr2ZzfrEnd5ENtG Jk+W8YdqHtkyxPdeKfEctv6CHzBGdvTZfwA5bPRjUXC261YmGLrqU9Gr9IaJ1rFH y4s+yaLJdbdCFN+pDtN4WUcTTYEswjXhGRrPzRIvjae2KPDo6GDrgbWA7sveViUL JYFwOScUjz4Sg1Nc9UmDnj59UgKh9Od6P0BuoHXKlksDl5BfSNyoLdDPIMas0HaP nf8k5E20YiCgUi2t/LTt9fNgvVH5IArc7qy7LdnUKARDaqgZSk8nMlOnENpXyzfZ c7jcu4PYxd0Z85u0gxEzmnxahDwQtUUQge30j5JOM9iHrRaANwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIy+0oYs6STQPdYcNsIVdUFeme1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGJhNTgwMjUtMmE4Zi0z ZGZkLTg3ZGItMDdmZDUwNzE1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1Q7MyljKQn+5lBH5emiKdLaTXxKDWLQ7xoU8FHiGLxw7cvdOdEkmM2 d4osI2aGJff2exAm7FL3O19zydh5PaeWoMIzfR2iK/PzyHY4o3MbNYNLn/EGjzo9 L7QkYBotThJxCt4Lg9964fPkaIAHdBkZRg9TtOALMj8ckB8sAYsdg5+Ps9U0ado5 53vy9zpaW5VybmuVs5HBvZsTuB5k0Efyjl+eZL43oB71GTn2DDH+63avnoMpDm6M dAiNxAcGifqvVkmdM4eUo/pRo5EFaIipNLGFgZLujjvJMdZLucW7TLnRHAnh6Rr9 lpjv4grz01dTPk5fzN8LYX4PW+gQZiY= -----END CERTIFICATE-----Generated at Sat Aug 15 04:42:02 2026 by rpki-client