$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1124615-3e1e-3089-9bd2-3dd1aaebe0cd.roa File: f1124615-3e1e-3089-9bd2-3dd1aaebe0cd.roa (raw, json) Hash identifier: 8CB1I4lMlwOwkQZkE5nhl3lDO6Y94bxxHMcD1wAYkas= Subject key identifier: 52:40:3F:E6:21:4A:4F:40:CA:BF:35:2B:16:28:1E:63:F9:4A:E8:7F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D2644A8A77EC39DD4B333CB13 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1124615-3e1e-3089-9bd2-3dd1aaebe0cd.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:a8:a7:7e:c3:9d:d4:b3:33:cb:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=b5913636-294f-410e-abd3-a18a5d4aa6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:a2:d7:46:11:2e:fa:c9:8a:16:1b:01:60: 33:05:1e:d2:3f:ff:ad:33:62:92:6f:e4:19:80:f0: ec:fe:f2:08:b0:fe:d2:92:fd:59:01:d3:db:a0:fb: fd:2f:21:38:c3:e3:45:b0:5a:ab:33:64:de:50:0d: 24:b4:de:dc:57:2e:9d:37:10:cf:de:22:12:b1:50: bf:1d:6f:cc:26:8a:0f:77:d3:a9:28:5a:3b:f7:53: 34:2c:25:cf:c2:dd:c5:05:e7:5c:35:f2:94:51:b4: de:9c:13:0b:e2:f7:6d:31:98:f9:0c:82:f4:39:6b: 42:f6:b1:ad:ce:11:3a:f3:57:aa:5d:66:b7:76:0a: a4:a4:06:e5:c4:ab:5b:89:97:1a:f3:93:05:ac:ef: 88:5d:05:93:b6:31:ef:5f:ea:27:e3:20:77:6e:e5: ab:e8:21:20:e7:61:92:e4:8f:91:b2:1f:2d:9a:73: 01:b2:4c:8e:d6:18:da:25:45:6c:8b:29:59:a7:d9: b7:83:7c:86:e0:df:e1:3c:c1:a8:11:21:d6:46:e2: ba:2e:5e:7c:6b:c9:78:5f:37:16:84:80:30:f6:ea: 42:63:07:b8:8f:80:25:68:21:5c:9b:2c:15:6d:2d: f7:0c:40:bf:3b:c8:ed:9f:dc:6c:85:e9:5d:4b:fa: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:40:3F:E6:21:4A:4F:40:CA:BF:35:2B:16:28:1E:63:F9:4A:E8:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f1124615-3e1e-3089-9bd2-3dd1aaebe0cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:34:39:53:c2:21:eb:6b:72:4e:57:9e:8d:1e:a2:22:59:62: 07:5f:26:36:c3:85:02:7f:9c:f1:a6:bd:06:03:c2:ec:0e:38: 9a:3b:5a:c7:43:5a:2b:e0:03:cb:9d:78:0c:95:6e:22:a3:9f: e3:d7:57:b8:4b:50:67:52:8a:9f:60:b7:7b:d3:03:ae:e8:72: ca:19:0a:27:18:ef:60:22:87:0c:4a:01:45:24:fc:72:9f:47: f3:97:54:f5:01:51:d5:1d:6a:e9:94:9f:63:21:cd:23:62:6d: aa:9f:37:b4:e9:21:83:0d:4a:c3:68:73:92:63:2d:c4:7c:b3: 7b:ef:a0:25:4c:a6:39:07:c4:96:94:d5:41:59:a9:e0:0e:a8: a5:3b:06:08:fa:13:ce:39:18:7d:c5:0b:c4:cb:6e:1a:aa:e7: 99:f3:0c:55:62:8d:0c:09:69:bf:7f:c1:ab:19:d4:92:ba:7d: 8a:8a:00:bf:2f:30:e2:51:b8:da:ea:f6:3c:e8:75:21:01:2a: f2:20:95:0e:0f:da:c4:00:f6:c8:c9:39:89:71:63:ba:4d:94: a9:62:cd:29:b4:9c:59:b8:ce:00:d4:8e:ac:75:fb:ec:fc:10: f5:55:72:a5:d7:2d:2d:8e:0b:ee:ca:22:b2:34:4b:89:1c:bc: 26:5d:75:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRKinfsOd1LMzyxMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YjU5MTM2MzYtMjk0Zi00MTBlLWFiZDMtYTE4YTVkNGFhNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokmi10YRLvrJihYbAWAzBR7SP/+tM2KSb+QZ gPDs/vIIsP7Skv1ZAdPboPv9LyE4w+NFsFqrM2TeUA0ktN7cVy6dNxDP3iISsVC/ HW/MJooPd9OpKFo791M0LCXPwt3FBedcNfKUUbTenBML4vdtMZj5DIL0OWtC9rGt zhE681eqXWa3dgqkpAblxKtbiZca85MFrO+IXQWTtjHvX+on4yB3buWr6CEg52GS 5I+Rsh8tmnMBskyO1hjaJUVsiylZp9m3g3yG4N/hPMGoESHWRuK6Ll58a8l4XzcW hIAw9upCYwe4j4AlaCFcmywVbS33DEC/O8jtn9xsheldS/ovEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJAP+YhSk9Ayr81KxYoHmP5Suh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjExMjQ2MTUtM2UxZS0z MDg5LTliZDItM2RkMWFhZWJlMGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo0OVPCIetrck5Xno0eoiJZYgdfJjbDhQJ/nPGmvQYDwuwOOJo7WsdD WivgA8udeAyVbiKjn+PXV7hLUGdSip9gt3vTA67ocsoZCicY72AihwxKAUUk/HKf R/OXVPUBUdUdaumUn2MhzSNibaqfN7TpIYMNSsNoc5JjLcR8s3vvoCVMpjkHxJaU 1UFZqeAOqKU7Bgj6E845GH3FC8TLbhqq55nzDFVijQwJab9/wasZ1JK6fYqKAL8v MOJRuNrq9jzodSEBKvIglQ4P2sQA9sjJOYlxY7pNlKlizSm0nFm4zgDUjqx1++z8 EPVVcqXXLS2OC+7KIrI0S4kcvCZddd8= -----END CERTIFICATE-----Generated at Sat Mar 21 20:52:33 2026 by rpki-client