$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc144d4b-4954-3ba2-bb99-9fc533cc20f6.roa File: dc144d4b-4954-3ba2-bb99-9fc533cc20f6.roa (raw, json) Hash identifier: sZC3l+bDD638nJIgVp2g5tGA7M7V7lEkeHKhADSuzVE= Subject key identifier: 91:9A:4F:62:BB:BB:E2:15:6D:E6:A0:4A:DE:F4:8E:4B:10:78:31:61 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F549D5B47C3D01DE22AB9E1C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc144d4b-4954-3ba2-bb99-9fc533cc20f6.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5b:47:c3:d0:1d:e2:2a:b9:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2f3cb072-85be-4163-852f-8a6f7ebcfc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ab:58:9a:a1:93:39:ef:4c:31:2f:33:63:64: 04:42:fc:4b:99:3a:95:64:25:d7:a2:39:9a:18:9b: d4:6e:80:46:26:be:94:28:1a:fa:e0:05:49:36:67: 55:6d:18:48:a2:3c:80:3f:66:99:96:7d:a6:8b:c8: c0:27:00:dd:3e:b1:bc:cc:aa:f9:e6:83:60:45:f1: 7d:58:d8:53:03:c2:2f:71:7e:e2:a0:a4:be:d9:d4: 65:7d:64:63:ea:52:a7:b5:46:ca:d1:16:87:a3:8e: 53:cd:3c:bc:5a:06:23:80:c5:7d:2e:4a:26:5f:66: 6a:2b:52:e8:65:24:17:bf:16:93:32:2d:34:90:8c: f0:d1:5e:90:c1:c3:00:64:cb:b9:13:94:67:ff:d6: 4b:eb:15:be:a0:c1:f8:cc:a7:01:7d:f6:8a:69:3d: b0:90:a7:ab:01:2c:83:e6:e0:84:8d:b2:16:1e:85: 3b:d4:54:9c:60:06:23:b3:8d:96:ba:14:36:e7:56: 0c:9a:b0:c4:ff:aa:8f:98:76:d3:58:f9:99:08:e5: 92:8c:5c:38:e7:46:0d:c3:be:f6:a1:e4:a6:5e:c6: 3a:53:e1:3b:a1:de:3c:d1:0c:4c:7b:64:59:63:68: 19:fd:86:6a:45:d9:dc:59:0c:d9:9c:7d:40:b7:0d: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9A:4F:62:BB:BB:E2:15:6D:E6:A0:4A:DE:F4:8E:4B:10:78:31:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc144d4b-4954-3ba2-bb99-9fc533cc20f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:40:83:af:48:04:dc:b1:6a:93:ec:04:db:d3:41:67:6e:22: 9f:93:e1:f6:aa:f3:79:1d:d6:c0:2c:1e:ca:9d:03:ef:7d:57: 23:e6:b2:9c:cb:6f:e1:38:4d:54:92:ef:b9:c8:c3:89:88:9c: cb:bd:87:51:48:37:78:ea:ac:d9:67:70:2e:19:e1:f0:99:0d: f0:16:2c:0e:e5:8d:5d:ba:68:63:18:e2:bb:be:85:22:3b:bf: d9:a2:e4:72:ee:4e:f8:dc:82:60:2d:07:3a:6a:9c:fa:a1:da: 4b:64:bd:d9:db:5d:13:cb:2a:0f:a1:92:7b:38:e0:26:a5:5b: 75:28:d6:e8:b7:f0:39:95:86:9a:dc:6b:46:9f:65:09:ab:33: 11:e0:c6:17:38:68:f0:a0:86:11:5e:84:27:34:67:6b:52:57: 93:db:cc:69:62:3b:b2:4f:20:5b:92:e5:d2:fb:d2:23:d8:7f: 12:a8:cb:97:99:f5:df:94:ff:58:79:52:41:3d:0d:2f:58:57: 92:f4:f2:7b:63:47:e1:dd:4b:94:1b:4b:d5:6a:c1:05:e9:55: e7:43:e2:7a:90:19:f4:cf:61:9d:8a:ac:34:ff:e0:00:ab:d7: 1c:9d:dc:cf:01:af:a0:c1:01:28:a9:04:44:01:50:41:bc:97: 26:33:5a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVtHw9Ad4iq54cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmYzY2IwNzItODViZS00MTYzLTg1MmYtOGE2ZjdlYmNmYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgatYmqGTOe9MMS8zY2QEQvxLmTqVZCXXojma GJvUboBGJr6UKBr64AVJNmdVbRhIojyAP2aZln2mi8jAJwDdPrG8zKr55oNgRfF9 WNhTA8IvcX7ioKS+2dRlfWRj6lKntUbK0RaHo45TzTy8WgYjgMV9LkomX2ZqK1Lo ZSQXvxaTMi00kIzw0V6QwcMAZMu5E5Rn/9ZL6xW+oMH4zKcBffaKaT2wkKerASyD 5uCEjbIWHoU71FScYAYjs42WuhQ251YMmrDE/6qPmHbTWPmZCOWSjFw450YNw772 oeSmXsY6U+E7od480QxMe2RZY2gZ/YZqRdncWQzZnH1Atw1KUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGaT2K7u+IVbeagSt70jksQeDFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGMxNDRkNGItNDk1NC0z YmEyLWJiOTktOWZjNTMzY2MyMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJAg69IBNyxapPsBNvTQWduIp+T4faq83kd1sAsHsqdA+99VyPmspzL b+E4TVSS77nIw4mInMu9h1FIN3jqrNlncC4Z4fCZDfAWLA7ljV26aGMY4ru+hSI7 v9mi5HLuTvjcgmAtBzpqnPqh2ktkvdnbXRPLKg+hkns44CalW3Uo1ui38DmVhprc a0afZQmrMxHgxhc4aPCghhFehCc0Z2tSV5PbzGliO7JPIFuS5dL70iPYfxKoy5eZ 9d+U/1h5UkE9DS9YV5L08ntjR+HdS5QbS9VqwQXpVedD4nqQGfTPYZ2KrDT/4ACr 1xyd3M8Br6DBASipBEQBUEG8lyYzWgI= -----END CERTIFICATE-----Generated at Tue Oct 6 18:11:39 2026 by rpki-client