$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a62dfe8b-27cb-344e-a09b-a6cf13b3e54c.roa File: a62dfe8b-27cb-344e-a09b-a6cf13b3e54c.roa (raw, json) Hash identifier: IvT9rt5b9Gcj0TTgHUJddjAwf7tBhnJKd1/AAmzeRxY= Subject key identifier: 80:2B:92:06:52:81:A3:0A:A5:37:D1:7A:96:A9:AE:67:A6:F6:5D:88 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F549D48C5CC6820BE0F20F090 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a62dfe8b-27cb-344e-a09b-a6cf13b3e54c.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:48:c5:cc:68:20:be:0f:20:f0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=22215e40-c647-4fa9-bc63-2a6c1303d31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:51:b3:54:5d:c5:e0:ef:47:83:66:1e:73: a3:3f:bb:fc:dc:74:30:82:1a:da:19:f7:97:af:7d: 1f:4c:92:e9:84:a9:dc:61:56:67:8f:cf:0e:3c:ed: af:81:75:e9:0c:fa:01:96:31:49:a1:0c:81:4d:dc: 83:b4:a6:6a:78:78:7d:32:b9:bf:3d:03:02:61:9f: 9b:15:d9:60:a3:10:cd:4c:b1:49:c4:77:64:f1:8d: 1b:2d:d8:c3:96:fb:05:32:af:0f:fe:07:b2:e9:ad: 17:ab:d7:0d:0e:4e:47:fd:22:62:ee:9a:b9:21:a8: 1b:f2:d4:87:9b:a0:95:cc:01:c6:e1:9d:51:d6:05: 79:72:a8:bd:14:af:09:db:ad:bc:8b:c8:15:26:98: 8c:0c:9a:68:30:9c:f2:be:7d:05:d5:85:d3:8b:17: 9e:3e:db:b4:d9:8b:7e:25:a5:7b:78:4c:5e:32:df: 05:46:2b:45:e6:7c:82:3e:8b:70:37:5d:5c:36:c6: 49:13:14:f7:fb:94:1b:93:73:ba:b8:71:ab:78:46: 54:f4:15:f2:d3:11:24:9f:6d:7f:06:90:e4:03:c1: a1:88:ec:34:6f:0d:b6:cd:f3:86:ba:6e:ac:ed:3c: ac:a8:5c:da:4a:52:4f:c8:72:9d:25:9d:1a:e0:30: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:92:06:52:81:A3:0A:A5:37:D1:7A:96:A9:AE:67:A6:F6:5D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a62dfe8b-27cb-344e-a09b-a6cf13b3e54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a1:8d:d9:6d:af:88:8c:d1:c9:a5:fb:ec:38:47:1c:f9:0f: 83:5e:02:ca:c1:88:3d:88:d5:b6:ce:97:b1:26:d3:da:38:3f: ee:18:95:63:3e:67:f3:fa:90:38:01:a2:7b:93:37:df:30:61: 16:a2:27:a9:34:3d:7c:d4:64:00:13:98:17:e2:dc:b6:60:83: 51:77:e1:32:9e:e7:68:fd:95:b7:60:e9:2a:78:79:f5:9d:74: b0:38:9a:9d:d0:c6:13:6d:09:ab:cd:b6:93:aa:a6:05:58:3a: 40:80:b3:e4:b0:97:46:92:df:e6:4f:b7:a0:cb:ca:4a:b5:ec: c2:04:3c:30:0d:3c:6c:c8:6a:0a:9f:3c:7c:2f:2f:02:da:d1: 3f:fa:9d:91:3d:e4:42:76:c9:96:cc:ec:82:cb:cf:e2:80:6b: 2f:5c:cb:77:21:21:09:ae:11:6c:a0:79:02:04:fe:39:5d:19: 44:8d:00:22:17:df:d0:87:7c:a0:0c:09:25:8b:27:8f:b4:46: 18:b4:b8:97:b7:cf:e4:fb:c9:af:00:20:3c:0f:bf:69:31:59: 9c:42:9b:ef:e6:60:19:30:8f:f7:9b:91:54:a7:e2:4e:a3:71: 18:1a:cc:1d:da:dc:23:c8:e3:9f:3f:53:6b:d9:02:0e:bf:c8: b3:0f:22:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUjFzGggvg8g8JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjIyMTVlNDAtYzY0Ny00ZmE5LWJjNjMtMmE2YzEzMDNkMzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgpRs1RdxeDvR4NmHnOjP7v83HQwghraGfeX r30fTJLphKncYVZnj88OPO2vgXXpDPoBljFJoQyBTdyDtKZqeHh9Mrm/PQMCYZ+b FdlgoxDNTLFJxHdk8Y0bLdjDlvsFMq8P/gey6a0Xq9cNDk5H/SJi7pq5Iagb8tSH m6CVzAHG4Z1R1gV5cqi9FK8J2628i8gVJpiMDJpoMJzyvn0F1YXTixeePtu02Yt+ JaV7eExeMt8FRitF5nyCPotwN11cNsZJExT3+5Qbk3O6uHGreEZU9BXy0xEkn21/ BpDkA8GhiOw0bw22zfOGum6s7TysqFzaSlJPyHKdJZ0a4DAZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIArkgZSgaMKpTfRepaprmem9l2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTYyZGZlOGItMjdjYi0z NDRlLWEwOWItYTZjZjEzYjNlNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqhjdltr4iM0cml++w4Rxz5D4NeAsrBiD2I1bbOl7Em09o4P+4YlWM+ Z/P6kDgBonuTN98wYRaiJ6k0PXzUZAATmBfi3LZgg1F34TKe52j9lbdg6Sp4efWd dLA4mp3QxhNtCavNtpOqpgVYOkCAs+Swl0aS3+ZPt6DLykq17MIEPDANPGzIagqf PHwvLwLa0T/6nZE95EJ2yZbM7ILLz+KAay9cy3chIQmuEWygeQIE/jldGUSNACIX 39CHfKAMCSWLJ4+0Rhi0uJe3z+T7ya8AIDwPv2kxWZxCm+/mYBkwj/ebkVSn4k6j cRgazB3a3CPI458/U2vZAg6/yLMPIog= -----END CERTIFICATE-----Generated at Thu Oct 1 12:36:26 2026 by rpki-client