$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/924382a2-f073-32a5-8691-e1fe7234fcae.roa File: 924382a2-f073-32a5-8691-e1fe7234fcae.roa (raw, json) Hash identifier: bTCU8mLrz7rCSVjSpjziq1G+K6J7rdKsyFfo0J4Z0eg= Subject key identifier: EE:1A:D9:1F:A3:9B:1D:F2:B2:2B:87:EC:88:A6:7B:FD:6E:65:E3:79 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F5767F893DF4CD818CAAAD000 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/924382a2-f073-32a5-8691-e1fe7234fcae.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:f8:93:df:4c:d8:18:ca:aa:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=9fd185ad-e964-4bfc-8c85-f7cf18ee324d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:9a:ad:54:88:9b:31:6d:b1:5c:14:2b:ca: fb:34:c6:21:90:78:3a:10:c4:a6:6f:c5:c6:93:c7: de:c9:46:3c:03:0b:12:52:a3:3e:ce:90:37:82:6c: 6a:60:e7:0c:50:d9:d1:2b:52:73:df:37:c3:8e:6c: 63:0f:40:66:22:69:e4:21:2f:46:82:e8:28:50:07: 00:78:1e:e8:6a:67:34:4d:e0:7b:a3:52:09:a5:b2: 52:a4:91:80:26:9f:65:99:03:db:2a:79:fb:b5:67: 12:0d:25:a1:82:d1:7a:e4:4b:11:a9:e8:8d:33:19: 4a:7e:c6:0a:7c:6a:4c:83:98:b7:ec:71:ae:16:90: 74:db:1f:7c:1a:aa:a6:3c:05:e8:0f:e1:b3:a4:06: 28:f1:2e:58:d1:df:4a:14:68:7e:dc:5a:9b:93:46: d9:7a:f8:bb:6e:bc:e6:ed:40:47:f5:8c:72:64:a5: 6e:88:5a:8e:77:23:1a:d7:49:a6:94:30:74:13:02: 22:59:6a:83:2f:b8:e1:60:8c:98:d8:27:f6:e2:29: 42:55:83:4b:a2:12:96:bb:4f:a3:96:62:aa:81:95: c4:4b:31:50:bd:eb:34:5c:0b:63:eb:24:02:fc:7b: 34:7f:8f:7b:bf:d5:f6:c5:c1:21:28:b1:c2:d6:a4: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1A:D9:1F:A3:9B:1D:F2:B2:2B:87:EC:88:A6:7B:FD:6E:65:E3:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/924382a2-f073-32a5-8691-e1fe7234fcae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:96:91:fb:46:f6:dd:27:44:55:74:23:ba:c1:a2:3a:f7:6d: e6:f2:92:41:96:9f:d3:39:2c:56:b2:4b:c0:73:9a:eb:2c:53: ae:00:4a:0d:9d:62:5f:a4:96:50:c8:cd:54:ba:aa:97:d8:42: 7d:8d:13:fb:16:03:61:40:e1:db:d3:df:9a:e4:85:ce:a8:50: 8b:7d:66:f6:1b:12:01:9d:f3:2c:9f:9e:ab:97:78:f3:86:87: fd:80:04:f4:f5:af:bf:9f:56:ec:0e:0c:aa:f8:ba:1b:bf:b5: 7c:65:8f:ed:cb:ef:88:95:c4:90:2a:af:c5:8b:f5:92:97:4f: 0a:1e:58:5e:24:dc:28:c5:99:c7:fd:02:59:d2:5f:dc:de:d2: 6d:de:5d:cd:21:b6:83:15:b1:8e:87:c2:fa:42:f9:f3:76:42: 01:66:2d:5b:59:c7:8e:9f:28:6d:01:9d:46:1c:aa:26:39:f3: fe:ed:c4:40:dc:95:58:81:b6:07:5d:ee:23:cd:c6:26:01:db: c9:5f:ea:f2:f4:42:dc:db:23:79:20:56:5e:11:9a:d4:70:f0: 99:e1:b1:ee:ab:de:95:77:d9:7f:ef:c9:ba:20:44:05:b2:cb: 50:01:e2:98:7c:27:5b:81:df:55:80:be:05:2c:23:7d:70:20: af:43:53:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XZ/iT30zYGMqq0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OWZkMTg1YWQtZTk2NC00YmZjLThjODUtZjdjZjE4ZWUzMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vuarVSImzFtsVwUK8r7NMYhkHg6EMSmb8XG k8feyUY8AwsSUqM+zpA3gmxqYOcMUNnRK1Jz3zfDjmxjD0BmImnkIS9GgugoUAcA eB7oamc0TeB7o1IJpbJSpJGAJp9lmQPbKnn7tWcSDSWhgtF65EsRqeiNMxlKfsYK fGpMg5i37HGuFpB02x98GqqmPAXoD+GzpAYo8S5Y0d9KFGh+3Fqbk0bZevi7brzm 7UBH9YxyZKVuiFqOdyMa10mmlDB0EwIiWWqDL7jhYIyY2Cf24ilCVYNLohKWu0+j lmKqgZXESzFQves0XAtj6yQC/Hs0f497v9X2xcEhKLHC1qTEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4a2R+jmx3ysiuH7Iime/1uZeN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTI0MzgyYTItZjA3My0z MmE1LTg2OTEtZTFmZTcyMzRmY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyWkftG9t0nRFV0I7rBojr3bebykkGWn9M5LFayS8BzmussU64ASg2d Yl+kllDIzVS6qpfYQn2NE/sWA2FA4dvT35rkhc6oUIt9ZvYbEgGd8yyfnquXePOG h/2ABPT1r7+fVuwODKr4uhu/tXxlj+3L74iVxJAqr8WL9ZKXTwoeWF4k3CjFmcf9 AlnSX9ze0m3eXc0htoMVsY6HwvpC+fN2QgFmLVtZx46fKG0BnUYcqiY58/7txEDc lViBtgdd7iPNxiYB28lf6vL0QtzbI3kgVl4RmtRw8Jnhse6r3pV32X/vybogRAWy y1AB4ph8J1uB31WAvgUsI31wIK9DU0w= -----END CERTIFICATE-----Generated at Wed Sep 30 13:00:24 2026 by rpki-client