$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2314380e-2d2b-3d34-ae55-abb37bfe2e8c.roa File: 2314380e-2d2b-3d34-ae55-abb37bfe2e8c.roa (raw, json) Hash identifier: 0TGbNg8w/G6jueVzNuumcH/99VqqFcRhffnSdswD37M= Subject key identifier: AA:E4:46:A8:4F:28:3D:D7:96:47:9F:2A:5F:E7:B0:E2:3F:AF:03:63 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D4FFE3AED8A3ED1C1A480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2314380e-2d2b-3d34-ae55-abb37bfe2e8c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4f:fe:3a:ed:8a:3e:d1:c1:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2955928b-0af4-46e6-ad7e-24bf645fc914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5e:f7:b2:fc:82:80:0e:d9:7b:b9:a3:1a:0b: 56:1b:8f:6b:a1:70:d7:a2:c3:ce:b9:93:76:21:bb: ab:91:3a:49:10:2f:8e:a6:a4:df:7e:14:75:d6:f0: a8:e9:b9:c7:c1:29:00:a3:aa:15:96:3e:e1:2a:88: 35:3a:99:b9:94:97:44:7d:74:17:68:5b:63:e3:a3: 50:7e:14:09:c0:e5:83:d3:02:ef:7c:8f:d9:f8:ce: a3:c9:6a:25:90:11:9a:85:75:19:64:b5:a2:a0:e0: 51:09:f3:fe:37:b5:99:ac:ff:7c:90:ae:06:c1:c3: 10:02:44:11:5f:44:9e:ed:68:4c:f9:da:cc:ca:9b: f6:f6:bd:32:ed:e5:4d:f0:66:3d:62:6b:c1:cf:02: 88:6c:3e:01:6b:f2:30:8b:f4:a3:77:16:cb:d7:c9: d3:96:06:f8:4f:cf:7d:d1:bc:38:20:f5:38:cc:34: 12:c0:0d:ce:36:ca:6b:df:ab:63:70:a4:bc:0d:c1: f7:dd:24:ff:2a:68:48:20:6a:ed:07:e4:ab:c5:bd: c3:3d:db:44:aa:a8:26:04:c1:64:aa:15:7b:96:43: 6d:84:7f:78:3f:0c:12:9c:12:af:70:45:82:e3:e6: 81:f3:5e:12:73:3f:68:ab:bb:23:b6:80:f2:75:59: 20:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E4:46:A8:4F:28:3D:D7:96:47:9F:2A:5F:E7:B0:E2:3F:AF:03:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2314380e-2d2b-3d34-ae55-abb37bfe2e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ca:3f:d0:59:2a:4f:7d:8b:06:fe:f7:d1:3f:71:cd:1d:94: c3:08:ca:d8:e6:1d:06:74:9a:f6:0b:db:d6:70:9a:08:4c:0c: 50:0e:d7:e7:38:4b:fe:e2:9e:c0:56:c8:8d:ae:6c:99:61:33: 40:e0:2a:93:f5:d2:5d:87:80:da:16:0d:b2:22:ce:e9:01:14: b6:c4:7b:f1:80:9a:ef:15:3f:dc:3d:2a:3f:dc:88:32:1b:e3: 5d:d8:e5:28:b0:c6:62:56:da:89:59:41:e8:11:7e:e9:1e:0b: f1:17:9c:2e:45:e4:ff:32:94:89:48:f5:5d:f7:da:17:93:7e: d8:13:cb:da:af:c2:3d:10:ab:44:f8:2d:21:fa:7b:78:01:0a: be:3c:f7:28:98:08:06:b7:d8:07:2b:45:03:bc:b5:de:84:e7: 1f:98:ff:9a:77:d8:3f:ba:61:8b:57:fd:96:21:f2:da:10:62: cd:96:33:d6:76:fa:e1:06:05:56:44:3e:73:0f:36:3f:c7:87: c3:33:32:63:97:89:8c:ec:a9:b4:95:34:1e:2d:d8:0a:89:3d: 38:c8:98:e5:81:4b:99:74:b8:ab:6e:d1:48:aa:fd:51:10:aa: ff:5d:28:fe:b9:fd:92:21:f3:82:8a:ed:7c:c2:37:d9:09:49: 16:c1:ab:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPU/+Ou2KPtHBpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Mjk1NTkyOGItMGFmNC00NmU2LWFkN2UtMjRiZjY0NWZjOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF73svyCgA7Ze7mjGgtWG49roXDXosPOuZN2 IburkTpJEC+OpqTffhR11vCo6bnHwSkAo6oVlj7hKog1Opm5lJdEfXQXaFtj46NQ fhQJwOWD0wLvfI/Z+M6jyWolkBGahXUZZLWioOBRCfP+N7WZrP98kK4GwcMQAkQR X0Se7WhM+drMypv29r0y7eVN8GY9YmvBzwKIbD4Ba/Iwi/SjdxbL18nTlgb4T899 0bw4IPU4zDQSwA3ONspr36tjcKS8DcH33ST/KmhIIGrtB+Srxb3DPdtEqqgmBMFk qhV7lkNthH94PwwSnBKvcEWC4+aB814Scz9oq7sjtoDydVkglwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrkRqhPKD3XlkefKl/nsOI/rwNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjMxNDM4MGUtMmQyYi0z ZDM0LWFlNTUtYWJiMzdiZmUyZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnKP9BZKk99iwb+99E/cc0dlMMIytjmHQZ0mvYL29ZwmghMDFAO1+c4 S/7insBWyI2ubJlhM0DgKpP10l2HgNoWDbIizukBFLbEe/GAmu8VP9w9Kj/ciDIb 413Y5SiwxmJW2olZQegRfukeC/EXnC5F5P8ylIlI9V332heTftgTy9qvwj0Qq0T4 LSH6e3gBCr489yiYCAa32AcrRQO8td6E5x+Y/5p32D+6YYtX/ZYh8toQYs2WM9Z2 +uEGBVZEPnMPNj/Hh8MzMmOXiYzsqbSVNB4t2AqJPTjImOWBS5l0uKtu0Uiq/VEQ qv9dKP65/ZIh84KK7XzCN9kJSRbBqx0= -----END CERTIFICATE-----Generated at Sat Sep 26 18:30:19 2026 by rpki-client