$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f252c4bc-3817-3e10-86ae-8f74789b9b04.roa File: f252c4bc-3817-3e10-86ae-8f74789b9b04.roa (raw, json) Hash identifier: QiI2P2FcrQy6krrBQqa4tAH38HzKMlZzB6imM0+O3G4= Subject key identifier: A4:2E:CE:AA:C6:8D:C1:B6:10:30:36:F4:8F:49:F4:80:B1:E7:A7:D3 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D316F6679E5F7342F10491B00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f252c4bc-3817-3e10-86ae-8f74789b9b04.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:66:79:e5:f7:34:2f:10:49:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=cc9668ce-6bab-4403-a84a-a7e7f3617832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:06:53:ea:83:91:bd:54:7c:69:c5:ad:a5: 34:9a:f1:6d:71:2e:07:7b:6b:1e:5a:0a:f3:cc:ab: 88:f8:9f:a3:84:6f:60:45:58:72:2d:fc:c8:f3:17: 24:4d:d8:28:52:c8:97:6b:06:46:e2:df:87:f7:60: 36:ce:e3:92:e5:13:90:37:02:58:d2:6c:e6:e4:1c: 0d:dd:d8:3d:4e:2a:21:4b:8b:3f:3d:f8:21:ce:c2: ac:95:cb:b6:e0:c9:b5:3a:1b:8b:65:11:73:83:01: a0:af:8e:0a:d5:58:e5:3f:1f:65:ac:32:12:c6:9b: 6b:04:da:c7:54:68:f3:f7:6d:3f:19:29:94:dc:01: 72:94:fe:72:31:e8:a3:54:04:18:53:7b:2b:34:a5: 74:4d:fc:39:c4:da:69:3f:cf:e6:6d:da:6b:2e:e2: 27:7c:01:71:01:2b:f5:e5:25:2e:0c:71:ca:2f:79: 57:ad:b3:13:2b:c5:e6:9c:e8:73:19:01:44:16:71: cb:60:b9:4d:c7:77:b3:d2:e6:34:3f:5d:74:35:77: 7e:20:87:39:92:0e:c4:42:3b:40:95:89:3f:76:54: 86:7a:b1:8f:23:75:8c:69:55:7f:75:60:74:3a:73: 47:fe:a3:9b:f1:9f:6b:73:28:0c:60:50:91:b8:7c: 10:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2E:CE:AA:C6:8D:C1:B6:10:30:36:F4:8F:49:F4:80:B1:E7:A7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f252c4bc-3817-3e10-86ae-8f74789b9b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:11:5a:ec:25:de:5f:9b:30:77:af:59:dd:de:73:7a:c9:16: 9b:e7:8f:15:50:0e:bd:a2:6f:43:08:b4:cd:73:42:00:f0:d8: 98:a7:3b:00:63:e6:8c:32:2d:e8:a0:3d:f3:72:44:46:64:d4: b4:de:45:ee:d2:54:ce:5e:4a:77:b8:b8:4a:91:09:0b:c7:b1: 6b:fe:82:01:bb:5e:18:7f:a0:21:a7:50:5e:b1:af:2b:a8:95: b5:41:02:6f:db:64:7f:51:a6:0f:ef:9f:42:1e:40:78:d4:25: 5c:28:a2:d3:f3:75:21:57:2a:df:12:cd:da:f4:a0:95:ec:8b: 44:83:e4:c6:af:91:94:1a:42:94:e8:d2:2a:c8:34:a8:c3:87: f6:25:35:c8:da:a0:40:eb:c9:7a:3a:3b:17:d0:aa:75:0f:75: ca:12:a6:a4:bc:d4:51:ba:68:17:e6:00:22:b4:3b:8c:44:d1: 86:ca:d6:7c:7d:4b:5d:8a:78:ba:52:5c:cf:bf:cb:01:75:b4: e5:30:cb:f9:06:7e:60:85:92:8a:b9:da:20:c5:c9:64:cc:69: d4:dc:5b:f2:e5:ce:ea:2f:d5:25:24:64:ae:6b:05:6b:29:6d: 46:09:88:6d:ca:d0:97:af:93:d1:6c:0b:49:e7:1e:f8:ad:26: 2d:b1:27:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2Z55fc0LxBJGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk Y2M5NjY4Y2UtNmJhYi00NDAzLWE4NGEtYTdlN2YzNjE3ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUsGU+qDkb1UfGnFraU0mvFtcS4He2seWgrz zKuI+J+jhG9gRVhyLfzI8xckTdgoUsiXawZG4t+H92A2zuOS5ROQNwJY0mzm5BwN 3dg9TiohS4s/PfghzsKslcu24Mm1OhuLZRFzgwGgr44K1VjlPx9lrDISxptrBNrH VGjz920/GSmU3AFylP5yMeijVAQYU3srNKV0Tfw5xNppP8/mbdprLuInfAFxASv1 5SUuDHHKL3lXrbMTK8XmnOhzGQFEFnHLYLlNx3ez0uY0P110NXd+IIc5kg7EQjtA lYk/dlSGerGPI3WMaVV/dWB0OnNH/qOb8Z9rcygMYFCRuHwQ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQuzqrGjcG2EDA29I9J9ICx56fTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjI1MmM0YmMtMzgxNy0z ZTEwLTg2YWUtOGY3NDc4OWI5YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSF1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4RWuwl3l+bMHevWd3ec3rJFpvnjxVQDr2ib0MItM1zQgDw2JinOwBj 5owyLeigPfNyREZk1LTeRe7SVM5eSne4uEqRCQvHsWv+ggG7Xhh/oCGnUF6xryuo lbVBAm/bZH9Rpg/vn0IeQHjUJVwootPzdSFXKt8Szdr0oJXsi0SD5MavkZQaQpTo 0irINKjDh/YlNcjaoEDryXo6OxfQqnUPdcoSpqS81FG6aBfmACK0O4xE0YbK1nx9 S12KeLpSXM+/ywF1tOUwy/kGfmCFkoq52iDFyWTMadTcW/Llzuov1SUkZK5rBWsp bUYJiG3K0Jevk9FsC0nnHvitJi2xJ88= -----END CERTIFICATE-----Generated at Sat Mar 21 20:56:47 2026 by rpki-client