$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f432bcf4-5014-3155-b596-3dcf20298fbc.roa File: f432bcf4-5014-3155-b596-3dcf20298fbc.roa (raw, json) Hash identifier: rnQBnoVE2SacTCEVzJD3ZOFeTaiPxA/4JW4rb1m+YeI= Subject key identifier: 7E:0A:5E:F2:B5:66:16:42:DC:6E:4B:8C:57:5E:9D:63:3C:C0:96:FF Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D39CF89ECC57191D629292520 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f432bcf4-5014-3155-b596-3dcf20298fbc.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 23473 IP address blocks: 153.33.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:89:ec:c5:71:91:d6:29:29:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=cd5dc052-113f-4d29-94df-0958e58762df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:f8:6b:d6:fe:ab:a1:55:95:ce:67:33:11: 76:43:60:40:2a:c0:97:c3:6e:f1:0d:55:72:b7:c5: d2:41:03:1b:1c:d6:26:25:fe:af:43:1d:0f:8a:85: a4:ec:67:14:99:f7:26:db:6b:b3:4c:f9:b1:8c:d8: b5:81:00:4b:4c:7c:2d:c6:45:47:d7:b4:1c:ac:a4: d4:45:6f:2a:ac:45:ae:c3:f2:57:e6:76:f9:d8:3a: 90:d0:44:8a:a9:30:e2:f7:93:ec:df:72:97:5e:ac: f7:28:1a:17:78:86:9a:aa:48:a4:7f:50:0e:14:44: 0a:3d:ec:b6:6f:65:6c:c1:6e:b4:2c:42:e3:d9:2e: bd:18:48:25:c0:6e:57:09:32:c3:ae:ff:a5:ee:d7: 68:9e:61:45:26:1a:e5:1c:f8:60:19:3c:ec:83:40: 53:e6:7b:43:44:5b:a0:f4:3c:48:f7:e8:ea:b8:1e: a4:b6:0b:6b:2e:d5:48:57:87:d4:c2:2f:48:28:77: a2:f1:41:e8:39:66:0a:70:03:31:63:c7:39:0d:b9: 0a:f8:f4:ec:58:20:e1:80:78:56:ea:b7:69:e0:4e: 7f:00:3e:1f:6e:5e:1e:59:fd:61:f1:1f:e1:33:01: 5c:d3:ad:fc:ac:50:e0:17:13:c6:95:b7:25:c2:c8: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0A:5E:F2:B5:66:16:42:DC:6E:4B:8C:57:5E:9D:63:3C:C0:96:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f432bcf4-5014-3155-b596-3dcf20298fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:70:b8:48:7a:c2:57:29:90:41:f2:80:43:21:ee:5d:18:da: 60:27:93:12:61:c2:3e:be:ed:7e:93:ea:fa:96:8a:16:b4:81: ad:73:5d:cd:a9:50:58:9c:59:2e:5c:db:7e:1d:71:49:fd:4a: 5f:21:59:a9:b1:bf:ae:39:cf:10:1d:f5:82:b6:31:43:03:69: 25:7d:3b:d4:9b:94:8c:1c:86:99:d5:3a:29:97:d5:5c:5b:f5: ae:65:fc:9f:eb:c7:ad:71:9a:d2:69:5f:60:b3:2e:68:e7:4e: 3d:1e:61:ab:82:6b:16:4c:01:85:5a:e4:2f:7c:19:28:71:da: 30:a5:9d:10:92:f2:cc:c7:83:7f:ba:2f:23:ed:2c:4b:20:fb: 68:39:3f:42:59:35:fb:11:31:52:45:c3:2d:fb:e0:a2:07:fa: cb:f8:ee:06:50:25:c3:90:fc:75:02:53:30:65:9e:ee:ec:49: 3e:47:f3:52:13:77:ac:95:fe:8e:4e:51:55:ef:6c:2e:9b:b4: b9:5f:c2:f1:f0:94:42:3f:4c:ac:e6:cb:fd:d6:c2:3a:9d:eb: 3a:78:28:43:d5:54:1d:aa:ff:ca:52:48:4b:e0:f3:18:93:5f: 2c:e2:4c:dc:0a:56:5b:45:51:2e:83:e2:64:1b:8f:76:4a:68: a2:dd:7a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4nsxXGR1ikpJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk Y2Q1ZGMwNTItMTEzZi00ZDI5LTk0ZGYtMDk1OGU1ODc2MmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYv4a9b+q6FVlc5nMxF2Q2BAKsCXw27xDVVy t8XSQQMbHNYmJf6vQx0PioWk7GcUmfcm22uzTPmxjNi1gQBLTHwtxkVH17QcrKTU RW8qrEWuw/JX5nb52DqQ0ESKqTDi95Ps33KXXqz3KBoXeIaaqkikf1AOFEQKPey2 b2VswW60LELj2S69GEglwG5XCTLDrv+l7tdonmFFJhrlHPhgGTzsg0BT5ntDRFug 9DxI9+jquB6ktgtrLtVIV4fUwi9IKHei8UHoOWYKcAMxY8c5DbkK+PTsWCDhgHhW 6rdp4E5/AD4fbl4eWf1h8R/hMwFc0638rFDgFxPGlbclwsjqtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4KXvK1ZhZC3G5LjFdenWM8wJb/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjQzMmJjZjQtNTAxNC0z MTU1LWI1OTYtM2RjZjIwMjk4ZmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVwuEh6wlcpkEHygEMh7l0Y2mAnkxJhwj6+7X6T6vqWiha0ga1zXc2p UFicWS5c234dcUn9Sl8hWamxv645zxAd9YK2MUMDaSV9O9SblIwchpnVOimX1Vxb 9a5l/J/rx61xmtJpX2CzLmjnTj0eYauCaxZMAYVa5C98GShx2jClnRCS8szHg3+6 LyPtLEsg+2g5P0JZNfsRMVJFwy374KIH+sv47gZQJcOQ/HUCUzBlnu7sST5H81IT d6yV/o5OUVXvbC6btLlfwvHwlEI/TKzmy/3Wwjqd6zp4KEPVVB2q/8pSSEvg8xiT XyziTNwKVltFUS6D4mQbj3ZKaKLdet8= -----END CERTIFICATE-----Generated at Sat Mar 21 20:54:08 2026 by rpki-client