$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e474205b-7b67-35a2-b998-9b9e09d63d91.roa File: e474205b-7b67-35a2-b998-9b9e09d63d91.roa (raw, json) Hash identifier: uKTVm2jeYzc94KGfZgGLcRf0S3gDNYGuXPvqQZXqC5c= Subject key identifier: 97:50:23:BB:3C:13:B6:E5:9B:EB:33:77:B8:C1:E3:09:F1:A6:21:04 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D1DE4909E81779A1D5FDDA640 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e474205b-7b67-35a2-b998-9b9e09d63d91.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:90:9e:81:77:9a:1d:5f:dd:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=688d06aa-c371-4f6d-a8b0-bd124b1552b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:86:5d:3c:a8:1f:1a:42:4f:f5:b1:a0:68: 3e:2d:a7:5d:2c:86:79:ac:33:5e:14:ed:e1:51:9f: e7:20:b4:57:82:d4:55:1a:f9:2b:67:58:53:7a:4b: 9f:c3:9c:91:37:8a:5b:4a:15:7a:ff:83:3d:dc:60: 9b:4f:94:d3:f2:f8:de:fc:88:e0:14:50:72:d8:d7: f9:54:24:05:f8:c7:0b:06:cb:e2:65:f8:96:df:ea: 04:0e:22:cd:fd:1c:ef:c9:3a:4d:5e:73:89:93:93: 66:96:42:a6:f5:b7:e7:39:67:ab:bd:f4:a6:d2:05: c6:fa:54:94:7b:f6:33:03:17:e5:cd:d9:bc:d8:c5: 48:ae:c1:60:0b:c6:ed:01:60:6f:50:4d:bb:cf:f6: 8f:05:c4:6a:64:86:a7:35:8d:16:fd:02:94:c9:f4: 29:b7:e6:38:a7:12:14:68:06:f5:83:7e:f4:58:38: 6a:35:35:db:d4:06:8b:67:e6:31:0f:95:68:8e:00: ab:bf:b8:29:67:a9:1c:05:8f:ee:ca:8f:e8:2c:0a: bb:8d:af:50:c7:03:3d:e2:22:c6:4c:c1:6b:72:e9: 36:da:26:a0:b8:cc:58:9c:7f:41:c0:fe:3e:f7:95: b8:b1:e3:b0:9a:bc:5b:48:84:89:33:3f:a8:c4:48: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:50:23:BB:3C:13:B6:E5:9B:EB:33:77:B8:C1:E3:09:F1:A6:21:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e474205b-7b67-35a2-b998-9b9e09d63d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:61:40:c5:97:6d:c9:69:91:e0:b6:78:c8:21:91:f0:da:dd: 15:a5:2b:bb:ae:64:bc:b2:07:41:e9:b6:e3:0b:60:20:06:a4: 8c:4e:1b:e8:06:b5:ef:e1:68:c0:9a:f2:00:e0:19:ca:45:d7: ac:5c:5b:4e:92:85:e5:07:9a:b0:e5:a4:4e:07:4a:58:31:69: 74:92:aa:e4:53:56:41:70:c5:05:cb:9a:8f:c4:de:7d:44:ce: ec:55:da:88:e9:52:eb:eb:25:71:95:24:22:83:6b:72:85:0e: 2d:34:36:79:8c:8d:7e:3a:18:79:e4:2d:80:41:85:3c:4d:22: d6:27:91:9a:35:f3:74:09:1c:44:c8:7c:59:83:d4:25:20:b9: 1d:7a:50:91:98:13:03:69:7f:c3:cf:23:35:58:1e:94:0e:dc: a4:84:7f:d1:f8:84:e7:77:b9:07:70:7d:bb:d5:d1:1b:28:5a: 9b:be:11:05:58:7c:e6:6d:f1:fd:43:1c:a1:d4:36:00:74:85: 2b:1d:15:7b:4c:61:05:39:60:5d:50:2d:a6:de:85:fc:d3:93: c0:66:2a:52:04:21:5a:5d:e0:c9:dc:89:4b:6b:53:5b:20:88: 45:a2:f1:3c:ff:21:75:d3:2c:9b:a5:e5:4e:f0:d7:5f:a3:a2: 9c:e5:13:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0d5JCegXeaHV/dpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk Njg4ZDA2YWEtYzM3MS00ZjZkLWE4YjAtYmQxMjRiMTU1MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQeGXTyoHxpCT/WxoGg+LaddLIZ5rDNeFO3h UZ/nILRXgtRVGvkrZ1hTekufw5yRN4pbShV6/4M93GCbT5TT8vje/IjgFFBy2Nf5 VCQF+McLBsviZfiW3+oEDiLN/RzvyTpNXnOJk5NmlkKm9bfnOWervfSm0gXG+lSU e/YzAxflzdm82MVIrsFgC8btAWBvUE27z/aPBcRqZIanNY0W/QKUyfQpt+Y4pxIU aAb1g370WDhqNTXb1AaLZ+YxD5VojgCrv7gpZ6kcBY/uyo/oLAq7ja9QxwM94iLG TMFrcuk22iaguMxYnH9BwP4+95W4seOwmrxbSISJMz+oxEiM4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdQI7s8E7blm+szd7jB4wnxpiEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZTQ3NDIwNWItN2I2Ny0z NWEyLWI5OTgtOWI5ZTA5ZDYzZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9hQMWXbclpkeC2eMghkfDa3RWlK7uuZLyyB0HptuMLYCAGpIxOG+gG te/haMCa8gDgGcpF16xcW06SheUHmrDlpE4HSlgxaXSSquRTVkFwxQXLmo/E3n1E zuxV2ojpUuvrJXGVJCKDa3KFDi00NnmMjX46GHnkLYBBhTxNItYnkZo183QJHETI fFmD1CUguR16UJGYEwNpf8PPIzVYHpQO3KSEf9H4hOd3uQdwfbvV0RsoWpu+EQVY fOZt8f1DHKHUNgB0hSsdFXtMYQU5YF1QLabehfzTk8BmKlIEIVpd4MnciUtrU1sg iEWi8Tz/IXXTLJul5U7w11+jopzlEwY= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:38 2026 by rpki-client