$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991d4d8b-43c8-348c-b784-26c3563f4edc.roa File: 991d4d8b-43c8-348c-b784-26c3563f4edc.roa (raw, json) Hash identifier: Z2O8Ov/Xx+zL9Ert8ouzR1queqT7XKQVzev1jFSTS+I= Subject key identifier: E9:CF:01:43:90:45:E4:56:A8:C4:0E:61:08:50:89:AD:B1:25:69:4B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F3B7D1A8330A008985A9ADA80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991d4d8b-43c8-348c-b784-26c3563f4edc.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 23473 IP address blocks: 153.33.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1a:83:30:a0:08:98:5a:9a:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=2af32c44-302f-4ee6-9a11-b171b036c28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:35:c2:ef:8f:96:34:ed:55:7a:a1:fe:fb: 8d:d7:de:fa:89:b1:7c:9d:ab:05:a7:6c:26:b2:41: 89:e7:b2:b9:18:66:61:8e:fc:f8:d4:bc:43:db:30: 77:5f:2f:3e:9b:bc:81:ba:e0:91:ea:fd:5b:4d:f8: 98:3a:94:a6:1d:08:4b:7e:f8:a3:b9:96:16:d1:9c: 15:fb:3d:3b:4c:fc:7b:1c:ad:34:28:38:ac:29:66: eb:d8:82:02:9e:a0:4f:8a:8c:77:6d:51:f3:e8:e6: dc:b2:ec:52:79:ab:55:bd:b8:a3:2a:4b:a4:1a:ed: 1c:e4:b5:6c:b9:49:ab:9e:9c:26:26:37:6f:5b:ea: 1f:8d:34:66:b3:23:d0:0b:ee:aa:c8:57:d8:3f:8c: 91:80:ad:7c:0b:e7:dc:cb:9e:24:cd:f0:28:88:e2: 91:6f:a7:88:ea:de:2d:ad:ae:8f:39:13:25:a9:1a: c6:b9:4e:97:dc:4c:79:57:81:8f:bc:27:03:57:08: 1e:85:8a:13:c9:1d:4e:76:77:48:12:36:f4:52:0e: c6:28:b7:2b:3a:dc:87:40:c9:9d:e2:6a:05:b3:4c: 12:31:4e:76:a6:f3:4c:d7:fd:a3:2d:cf:22:75:c3: 75:8c:cb:f4:aa:68:fc:d2:02:42:40:12:a5:ae:96: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CF:01:43:90:45:E4:56:A8:C4:0E:61:08:50:89:AD:B1:25:69:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991d4d8b-43c8-348c-b784-26c3563f4edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c9:45:06:52:b5:88:1f:cd:6c:75:8e:20:ec:e4:e6:ac:3d: c7:5c:48:51:d0:89:13:2e:11:a3:c8:12:a1:19:34:32:3a:9d: 73:09:1a:83:62:bf:8f:36:81:cd:ac:2f:5c:61:d4:c9:5e:e6: 81:f0:1e:ac:36:cd:62:39:14:1e:e3:e1:bf:93:9c:c8:45:01: 3b:ef:ae:75:06:61:6e:79:ef:f5:c2:a2:38:2a:97:72:f1:23: 40:0b:2f:92:16:c5:8c:2b:4a:84:3c:e8:99:b1:92:94:19:32: d6:2b:61:15:17:71:eb:3f:f5:42:98:2a:f4:63:11:36:93:07: a1:b2:1d:30:cd:30:b1:08:07:91:f2:45:c2:71:50:85:0b:1e: b9:f9:b8:fa:00:24:88:d8:3e:55:c8:ea:16:e1:84:08:a3:43: 82:ed:96:e4:e9:01:32:e3:aa:96:49:52:f7:66:c1:bb:12:3f: 30:d0:ee:7f:68:83:68:b9:53:21:f8:f8:82:79:dc:8f:38:05: 81:6e:02:c0:35:a0:12:6d:23:d4:e5:b7:95:66:31:23:df:0d: 70:32:ab:99:81:e2:a7:4d:cd:4e:fe:92:00:eb:c7:9b:25:d8: af:5a:29:cd:78:94:0b:7a:ed:a3:22:bd:be:8e:cf:fe:7c:90: fd:c8:a5:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRqDMKAImFqa2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk MmFmMzJjNDQtMzAyZi00ZWU2LTlhMTEtYjE3MWIwMzZjMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsks1wu+PljTtVXqh/vuN1976ibF8nasFp2wm skGJ57K5GGZhjvz41LxD2zB3Xy8+m7yBuuCR6v1bTfiYOpSmHQhLfvijuZYW0ZwV +z07TPx7HK00KDisKWbr2IICnqBPiox3bVHz6ObcsuxSeatVvbijKkukGu0c5LVs uUmrnpwmJjdvW+ofjTRmsyPQC+6qyFfYP4yRgK18C+fcy54kzfAoiOKRb6eI6t4t ra6PORMlqRrGuU6X3Ex5V4GPvCcDVwgehYoTyR1OdndIEjb0Ug7GKLcrOtyHQMmd 4moFs0wSMU52pvNM1/2jLc8idcN1jMv0qmj80gJCQBKlrpZHlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnPAUOQReRWqMQOYQhQia2xJWlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTkxZDRkOGItNDNjOC0z NDhjLWI3ODQtMjZjMzU2M2Y0ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrJRQZStYgfzWx1jiDs5OasPcdcSFHQiRMuEaPIEqEZNDI6nXMJGoNi v482gc2sL1xh1Mle5oHwHqw2zWI5FB7j4b+TnMhFATvvrnUGYW557/XCojgql3Lx I0ALL5IWxYwrSoQ86JmxkpQZMtYrYRUXces/9UKYKvRjETaTB6GyHTDNMLEIB5Hy RcJxUIULHrn5uPoAJIjYPlXI6hbhhAijQ4LtluTpATLjqpZJUvdmwbsSPzDQ7n9o g2i5UyH4+IJ53I84BYFuAsA1oBJtI9Tlt5VmMSPfDXAyq5mB4qdNzU7+kgDrx5sl 2K9aKc14lAt67aMivb6Oz/58kP3IpYE= -----END CERTIFICATE-----Generated at Sat Sep 26 12:44:55 2026 by rpki-client