$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f2d25dfd-8696-3f96-9648-d0048a6447af.roa File: f2d25dfd-8696-3f96-9648-d0048a6447af.roa (raw, json) Hash identifier: +6N6nk6JFFSgvSBEG9Xl5iUS9og8Ug/ZOcUo7JGUKao= Subject key identifier: CE:CA:CD:61:DF:FB:17:4F:91:B4:09:55:6E:6C:87:B1:2D:56:73:2F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF89D8BE4D66CA307A0500 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f2d25dfd-8696-3f96-9648-d0048a6447af.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:89:d8:be:4d:66:ca:30:7a:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=20df3b38-6fab-45d6-b53e-4cc66058ee09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1c:09:65:de:4f:d2:6f:83:90:41:4a:6b:20: f8:26:d2:ba:a8:9d:17:01:3a:5a:10:af:91:ba:99: 85:80:58:d6:9c:8f:cb:97:be:9c:38:55:76:0d:fb: 58:d1:bc:fb:e5:67:4e:74:20:e1:d7:e9:11:66:c5: 6b:25:87:80:38:33:ac:66:a1:6c:00:82:a8:66:cd: 0b:a7:34:86:60:0e:ae:3c:18:82:35:1b:d8:37:80: 83:44:17:1b:86:e0:7e:f8:4b:e7:80:7f:97:78:68: 70:37:e7:f4:81:97:cb:09:db:2b:dc:d2:80:2d:c5: ac:8e:c1:38:3e:56:6c:d4:2c:94:7d:e0:8b:a8:1a: 0e:85:14:73:5a:28:d1:b1:27:dc:b8:2b:bf:c9:31: fc:e0:80:54:f2:4d:af:94:ba:9a:a2:db:c7:95:8a: a3:22:82:fe:77:26:96:3a:ec:1d:8b:5d:89:38:22: d5:56:f8:bb:1d:28:25:0a:4f:de:2a:bf:f1:ad:1a: 30:76:0b:3b:23:1c:6a:29:3e:f3:e7:7d:55:59:45: 03:f1:d1:be:f1:3d:5c:81:f8:1b:53:b3:f4:5e:70: 55:ba:96:22:03:e9:6a:50:93:95:7e:b1:cf:86:81: ec:d4:42:12:38:b5:92:22:2d:34:62:b4:2f:b3:e6: da:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:CD:61:DF:FB:17:4F:91:B4:09:55:6E:6C:87:B1:2D:56:73:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f2d25dfd-8696-3f96-9648-d0048a6447af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ed:e8:5a:26:3e:cd:8c:39:67:99:c6:c8:42:97:2a:96:28: 99:37:6b:97:85:6c:89:d9:b7:67:15:54:25:ae:65:9f:b0:51: ce:20:86:f8:45:91:98:92:77:eb:85:24:dc:b6:a6:61:92:17: db:93:a4:08:1c:8b:aa:10:89:63:b2:82:b0:9e:70:aa:5c:62: 31:b3:44:81:4d:4e:56:14:e1:be:ca:8b:c0:a3:a8:35:45:09: 03:f6:e9:02:3d:e2:e4:65:5b:8c:3b:a0:09:c5:f7:2e:c4:aa: fb:21:98:74:70:74:5c:6b:ee:ca:77:31:52:78:b8:d0:75:77: c5:39:fb:b2:21:f7:11:f3:8b:18:d3:39:fd:9a:8a:ef:26:6a: d1:06:7c:04:d6:cf:1a:1a:a9:9e:42:45:54:7f:0b:f1:8e:72: ca:aa:11:49:9d:d2:d4:ed:92:62:87:0c:af:74:16:66:8b:80: ed:2b:cb:cd:56:ca:6b:5e:49:35:ef:47:19:84:68:8b:6d:7c: d2:6d:5e:dd:00:01:ac:c7:6f:b5:87:4a:92:92:5b:1b:4b:1c: 05:2d:a2:66:8d:76:ba:60:32:ff:de:6e:91:d8:6f:dd:46:61: de:c1:fe:7e:39:cf:3d:2a:fd:53:5d:5e:39:b9:73:54:20:d5: da:79:8b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4nYvk1myjB6BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MjBkZjNiMzgtNmZhYi00NWQ2LWI1M2UtNGNjNjYwNThlZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBwJZd5P0m+DkEFKayD4JtK6qJ0XATpaEK+R upmFgFjWnI/Ll76cOFV2DftY0bz75WdOdCDh1+kRZsVrJYeAODOsZqFsAIKoZs0L pzSGYA6uPBiCNRvYN4CDRBcbhuB++EvngH+XeGhwN+f0gZfLCdsr3NKALcWsjsE4 PlZs1CyUfeCLqBoOhRRzWijRsSfcuCu/yTH84IBU8k2vlLqaotvHlYqjIoL+dyaW Ouwdi12JOCLVVvi7HSglCk/eKr/xrRowdgs7IxxqKT7z531VWUUD8dG+8T1cgfgb U7P0XnBVupYiA+lqUJOVfrHPhoHs1EISOLWSIi00YrQvs+baDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7KzWHf+xdPkbQJVW5sh7EtVnMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjJkMjVkZmQtODY5Ni0z Zjk2LTk2NDgtZDAwNDhhNjQ0N2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvt6FomPs2MOWeZxshClyqWKJk3a5eFbInZt2cVVCWuZZ+wUc4ghvhF kZiSd+uFJNy2pmGSF9uTpAgci6oQiWOygrCecKpcYjGzRIFNTlYU4b7Ki8CjqDVF CQP26QI94uRlW4w7oAnF9y7EqvshmHRwdFxr7sp3MVJ4uNB1d8U5+7Ih9xHzixjT Of2aiu8matEGfATWzxoaqZ5CRVR/C/GOcsqqEUmd0tTtkmKHDK90FmaLgO0ry81W ymteSTXvRxmEaIttfNJtXt0AAazHb7WHSpKSWxtLHAUtomaNdrpgMv/ebpHYb91G Yd7B/n45zz0q/VNdXjm5c1Qg1dp5iyo= -----END CERTIFICATE-----Generated at Sat Mar 21 20:53:11 2026 by rpki-client