$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f08e83cb-3912-3831-853a-65a819402309.roa File: f08e83cb-3912-3831-853a-65a819402309.roa (raw, json) Hash identifier: q0jrnp0oVQJgsfTipzusSkgN/8thv9Zr4no2B8EZg1M= Subject key identifier: FF:1F:36:B8:A1:82:FB:CD:FA:0F:D6:D8:95:58:8E:FB:57:38:97:A8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D316F69068DF01AB4B53AE1C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f08e83cb-3912-3831-853a-65a819402309.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:69:06:8d:f0:1a:b4:b5:3a:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=c9628db1-3657-4a19-bb1d-dea391db178d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:fc:e2:3c:94:ee:c7:a3:64:58:66:f7:98: 82:a7:5a:8d:41:0e:ca:b7:db:78:de:e1:94:fa:14: 78:e1:66:c3:87:34:0b:10:6b:43:d2:24:dc:19:a8: b0:51:9c:89:2f:39:7c:bc:e0:01:d0:cb:73:d5:45: 91:8a:85:f9:f7:1b:53:c5:99:bb:ae:b8:08:df:7d: 99:e4:ab:5f:62:ff:d1:77:64:b9:e3:7c:06:10:66: 17:31:04:f9:3e:a7:65:39:f7:9e:70:11:5d:88:25: 91:1b:d2:1a:d4:c7:e8:af:75:79:d0:e1:b8:5a:03: 52:6e:02:e4:20:f9:75:c2:e9:27:1a:7b:9c:b6:aa: f3:d5:6b:e1:ed:85:1d:0b:fb:95:29:74:99:61:e0: 52:fa:c0:8d:ab:1d:63:d4:66:92:9c:ea:50:91:9b: 41:ed:00:93:5f:f4:6d:a4:85:45:46:c3:10:82:c0: 2a:2c:67:19:04:0f:d7:7b:2a:3e:00:94:17:34:33: a1:76:95:f1:11:06:99:6f:53:57:e3:f4:53:d0:52: a2:25:8a:66:41:26:40:ac:15:65:0a:17:7e:96:a7: 19:97:d3:c9:be:fa:3d:72:62:5f:e2:df:f5:31:f7: 1e:d8:61:6c:2c:73:72:4f:6d:56:1e:ff:33:b5:d3: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1F:36:B8:A1:82:FB:CD:FA:0F:D6:D8:95:58:8E:FB:57:38:97:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f08e83cb-3912-3831-853a-65a819402309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a2:c2:ac:d4:68:e3:37:40:d8:44:f8:b0:c5:94:5a:77:f6: fc:44:d0:ca:c0:d4:51:58:df:8e:b3:49:7d:68:e3:f7:70:31: a6:9f:9c:b1:7c:ac:1f:ce:94:8b:90:19:be:25:85:6d:8e:d8: 59:e8:6e:65:50:89:39:95:4f:1d:91:07:91:d2:44:d0:11:95: e5:37:a5:13:9f:7f:a0:10:a8:3c:05:8b:08:e8:0c:f4:62:11: cd:f0:9b:4f:e0:5b:24:b1:ab:d2:11:6d:b3:05:97:f4:5a:4e: b8:f8:e4:24:b3:eb:98:83:3a:ea:0f:68:a0:22:4f:4a:94:c1: c3:c2:4f:dd:b9:09:c9:07:2b:a3:fb:01:fb:bf:5a:49:25:a5: 07:76:0f:be:a8:82:95:13:6f:e1:0a:e8:fc:e5:44:27:99:94: 6b:c5:ec:ef:61:d1:09:77:99:cc:be:de:ae:23:83:ba:ab:95: 98:c8:af:a8:b7:ed:c5:a0:f2:9f:52:4d:50:f7:0b:2c:6c:c5: 11:84:00:53:3d:16:b4:d6:c4:db:c6:a4:12:9c:ca:ea:0d:eb: 32:37:55:0e:72:77:aa:61:86:9b:54:3d:1d:5c:07:0f:9b:db: 98:da:e3:f8:1a:49:d7:a1:50:55:32:f0:af:60:f6:fc:b5:c8: 8f:94:48:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2kGjfAatLU64cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk Yzk2MjhkYjEtMzY1Ny00YTE5LWJiMWQtZGVhMzkxZGIxNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQT84jyU7sejZFhm95iCp1qNQQ7Kt9t43uGU +hR44WbDhzQLEGtD0iTcGaiwUZyJLzl8vOAB0Mtz1UWRioX59xtTxZm7rrgI332Z 5KtfYv/Rd2S543wGEGYXMQT5PqdlOfeecBFdiCWRG9Ia1Mfor3V50OG4WgNSbgLk IPl1wuknGnuctqrz1Wvh7YUdC/uVKXSZYeBS+sCNqx1j1GaSnOpQkZtB7QCTX/Rt pIVFRsMQgsAqLGcZBA/Xeyo+AJQXNDOhdpXxEQaZb1NX4/RT0FKiJYpmQSZArBVl Chd+lqcZl9PJvvo9cmJf4t/1Mfce2GFsLHNyT21WHv8ztdN7nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8fNrihgvvN+g/W2JVYjvtXOJeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjA4ZTgzY2ItMzkxMi0z ODMxLTg1M2EtNjVhODE5NDAyMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaiwqzUaOM3QNhE+LDFlFp39vxE0MrA1FFY346zSX1o4/dwMaafnLF8 rB/OlIuQGb4lhW2O2FnobmVQiTmVTx2RB5HSRNARleU3pROff6AQqDwFiwjoDPRi Ec3wm0/gWySxq9IRbbMFl/RaTrj45CSz65iDOuoPaKAiT0qUwcPCT925CckHK6P7 Afu/WkklpQd2D76ogpUTb+EK6PzlRCeZlGvF7O9h0Ql3mcy+3q4jg7qrlZjIr6i3 7cWg8p9STVD3CyxsxRGEAFM9FrTWxNvGpBKcyuoN6zI3VQ5yd6phhptUPR1cBw+b 25ja4/gaSdehUFUy8K9g9vy1yI+USOc= -----END CERTIFICATE-----Generated at Sat Mar 21 20:58:52 2026 by rpki-client