$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53b20a8f-6aaf-3626-a132-06e89ea79989.roa File: 53b20a8f-6aaf-3626-a132-06e89ea79989.roa (raw, json) Hash identifier: SBztZlS8umZm52/pMbtH/gZ4s67msdW046UQ4XCI/Jg= Subject key identifier: 66:1B:60:7E:4E:CD:38:B0:76:FC:9B:CC:1E:D0:41:4C:23:C7:F1:57 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4972F5BE3098F53C04387A80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53b20a8f-6aaf-3626-a132-06e89ea79989.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46925 IP address blocks: 153.33.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:f5:be:30:98:f5:3c:04:38:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=945ace07-6723-400a-8c67-956b725a9cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:c4:d1:7c:b1:74:d4:12:c5:d1:c9:35:9f: da:de:bc:5d:ff:36:a7:da:73:79:b9:cd:09:6a:b0: e9:ba:b8:66:1d:79:7b:e3:48:8a:23:a4:c1:71:a7: 15:ce:6f:c3:fc:b9:40:38:ea:32:9b:ef:41:33:f4: 4f:d3:8a:a8:0b:dd:c3:52:74:59:aa:99:79:c7:4b: 6d:f1:97:ee:cd:1d:28:36:36:17:8c:22:dc:4f:a4: e4:d3:b0:ad:a8:5a:b1:e5:ae:c6:28:ec:98:89:96: b4:77:71:ef:4d:10:62:bb:b1:80:51:7f:8d:e7:b4: 81:37:7a:c4:da:49:55:b6:67:d0:5b:c9:bb:e5:54: ae:98:e3:36:48:6f:10:b1:55:b5:08:f4:2f:a6:bc: d9:39:50:25:e3:7f:f2:dd:42:2f:e7:c7:15:77:b1: 1f:4d:0e:b2:1e:ae:94:33:27:7e:82:3c:d3:be:13: 56:0a:82:16:32:ad:71:9e:f1:30:31:dc:bb:ef:c9: 48:72:42:4c:2a:ea:98:4a:d5:a7:f0:88:e2:a6:00: b2:21:b0:01:c9:c1:91:15:7c:3a:3a:8a:fe:bf:41: 6a:1f:31:7f:03:86:e2:4f:e0:6f:60:1f:bc:2a:f6: 6b:d1:63:e6:ae:88:71:54:0b:a0:c9:5e:d9:f0:60: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1B:60:7E:4E:CD:38:B0:76:FC:9B:CC:1E:D0:41:4C:23:C7:F1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53b20a8f-6aaf-3626-a132-06e89ea79989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:53:6a:57:eb:17:17:08:27:0b:32:c8:a7:d7:4c:1d:3d:a9: 6e:65:08:4e:de:a3:13:0a:28:3b:8d:3a:48:13:8e:c4:fb:be: 4e:19:77:d5:3c:a4:60:72:67:63:c2:f6:d2:64:70:df:07:25: 6d:13:04:f4:e7:e8:2a:dc:d9:0e:63:82:28:8d:d1:4c:81:30: 69:bc:b3:c3:65:2b:d3:32:06:e5:1e:11:e6:24:c6:c0:6b:f2: 69:2b:f5:6b:e7:14:8b:6f:53:bf:19:f5:79:f9:b9:47:6b:01: fe:a1:6b:9b:b4:a2:5c:55:2b:4a:17:dc:65:53:79:6b:b5:f3: 8c:c7:69:e1:24:83:f1:c4:96:de:0d:ce:4f:ed:7e:3c:74:db: f5:fc:04:43:0b:74:98:a2:c6:cb:d4:7d:e0:02:5d:3a:35:66: 8b:d4:33:57:ec:3d:31:f7:2d:2f:84:3a:2c:19:3c:e1:54:fb: 99:6b:32:a9:8c:8d:72:0d:41:f3:77:a8:53:50:fb:42:28:40: 6f:bd:7d:a9:d8:c7:9b:11:13:50:d2:66:f8:76:cd:f3:d6:95: 1e:c1:52:da:8a:98:8d:f1:0c:06:cb:85:ae:97:a4:d3:d4:f3: 73:7d:aa:2c:7b:e4:62:77:6a:af:4c:98:0f:c9:be:e2:b6:00: 15:af:2d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvW+MJj1PAQ4eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTQ1YWNlMDctNjcyMy00MDBhLThjNjctOTU2YjcyNWE5Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3/E0XyxdNQSxdHJNZ/a3rxd/zan2nN5uc0J arDpurhmHXl740iKI6TBcacVzm/D/LlAOOoym+9BM/RP04qoC93DUnRZqpl5x0tt 8ZfuzR0oNjYXjCLcT6Tk07CtqFqx5a7GKOyYiZa0d3HvTRBiu7GAUX+N57SBN3rE 2klVtmfQW8m75VSumOM2SG8QsVW1CPQvprzZOVAl43/y3UIv58cVd7EfTQ6yHq6U Myd+gjzTvhNWCoIWMq1xnvEwMdy778lIckJMKuqYStWn8IjipgCyIbABycGRFXw6 Oor+v0FqHzF/A4biT+BvYB+8KvZr0WPmrohxVAugyV7Z8GAziQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYbYH5OzTiwdvybzB7QQUwjx/FXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNTNiMjBhOGYtNmFhZi0z NjI2LWExMzItMDZlODllYTc5OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRTalfrFxcIJwsyyKfXTB09qW5lCE7eoxMKKDuNOkgTjsT7vk4Zd9U8 pGByZ2PC9tJkcN8HJW0TBPTn6Crc2Q5jgiiN0UyBMGm8s8NlK9MyBuUeEeYkxsBr 8mkr9WvnFItvU78Z9Xn5uUdrAf6ha5u0olxVK0oX3GVTeWu184zHaeEkg/HElt4N zk/tfjx02/X8BEMLdJiixsvUfeACXTo1ZovUM1fsPTH3LS+EOiwZPOFU+5lrMqmM jXINQfN3qFNQ+0IoQG+9fanYx5sRE1DSZvh2zfPWlR7BUtqKmI3xDAbLha6XpNPU 83N9qix75GJ3aq9MmA/JvuK2ABWvLYE= -----END CERTIFICATE-----Generated at Fri Sep 25 18:45:41 2026 by rpki-client