$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af8b33ad-2af6-38b4-923f-ea011f121357.roa File: af8b33ad-2af6-38b4-923f-ea011f121357.roa (raw, json) Hash identifier: NBCsjQAqvcAeL3C7racpShrmxsEzb+rj24l+lL2vLzE= Subject key identifier: 9E:04:41:A7:4B:72:DC:F5:FD:BB:55:2A:D9:F3:9A:85:14:18:37:6B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F5768290F3BE88393D8E17C96 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af8b33ad-2af6-38b4-923f-ea011f121357.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:29:0f:3b:e8:83:93:d8:e1:7c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=eb1a0ade-9b44-42fc-ae94-31e87ddd7669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b0:a5:f1:bf:2b:dd:50:3e:8e:d0:45:d7:5a: 94:df:5d:69:5c:78:26:18:0b:09:eb:dd:84:a5:b9: 3c:a2:27:3c:0a:d9:6d:3b:e6:84:07:45:0f:0d:71: 0b:0f:06:77:51:77:f4:6e:36:db:86:4d:3c:b5:cb: f8:22:49:c0:c6:dc:12:59:15:9b:cc:8e:23:37:5f: a2:75:a7:6f:cb:ab:35:14:2f:fd:dc:68:4e:2f:10: e9:82:78:28:57:11:19:5a:a5:38:5d:0b:26:9e:14: 5f:7e:06:a9:49:0f:b8:93:3d:b4:8d:0f:45:e0:6c: 3b:d3:75:c4:62:67:74:29:00:c4:21:34:ce:69:28: eb:fa:34:41:1b:86:cc:39:20:a8:75:9c:d7:47:b2: 66:47:7a:e8:cb:b2:44:be:95:1b:a5:dc:bf:f3:d7: f8:aa:69:00:7e:e6:2c:82:5a:cb:e2:64:31:cd:4c: 92:bd:d1:47:f4:dc:06:cb:14:f5:f2:b0:1b:41:12: f3:6f:e0:1c:50:98:67:24:af:a1:74:5e:62:5d:1a: dd:89:cd:91:11:6e:38:7d:1b:65:31:25:4c:45:82: 70:e9:15:03:a0:30:3d:fd:39:d0:10:d5:aa:76:58: f6:9b:79:a3:f9:37:24:b3:c2:56:d8:cb:a3:63:91: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:04:41:A7:4B:72:DC:F5:FD:BB:55:2A:D9:F3:9A:85:14:18:37:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af8b33ad-2af6-38b4-923f-ea011f121357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:35:4e:49:e0:2e:bd:99:5a:b1:e9:16:0f:6a:f4:3f:cf:4b: da:ce:a1:98:83:76:bd:8d:68:94:72:c1:dc:c1:fb:f4:9b:02: 1f:6b:5c:6d:d1:ef:53:af:00:76:08:64:1f:c0:08:ca:73:f4: cf:7a:c6:58:35:60:9e:5a:b8:2a:ab:07:ea:1b:d6:4a:3b:7b: a7:c0:28:01:4f:19:86:58:d6:6c:9e:d0:fd:43:3b:14:1e:60: 12:64:b5:f7:fe:16:37:66:45:99:a5:3e:41:58:5d:b3:fb:42: 1a:62:b0:20:fa:fc:b7:b1:ad:ae:59:be:7d:55:0b:6b:aa:2e: 80:c3:a4:ed:51:e4:0c:d5:bb:1b:f3:0b:39:7b:2b:83:0e:c8: 3a:06:3f:03:d2:46:5d:d6:28:58:22:96:79:f0:06:84:68:65: 5c:85:6b:f2:cf:10:32:70:ba:16:22:1c:61:1f:80:f8:06:94: ad:29:7b:11:3d:0f:7e:4c:64:1a:c9:77:c6:03:b1:11:da:6b: 95:b9:7b:56:6c:fc:b4:ab:ce:8e:b8:23:f2:3f:45:7b:46:0a: a3:5e:63:96:f9:e4:19:90:45:7d:09:2b:a1:78:a2:ee:e2:e3: 5e:b2:c8:c9:85:26:02:64:e9:21:d5:2c:6c:87:54:c1:fc:5e: be:bb:2c:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaCkPO+iDk9jhfJYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWIxYTBhZGUtOWI0NC00MmZjLWFlOTQtMzFlODdkZGQ3NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Cl8b8r3VA+jtBF11qU311pXHgmGAsJ692E pbk8oic8CtltO+aEB0UPDXELDwZ3UXf0bjbbhk08tcv4IknAxtwSWRWbzI4jN1+i dadvy6s1FC/93GhOLxDpgngoVxEZWqU4XQsmnhRffgapSQ+4kz20jQ9F4Gw703XE Ymd0KQDEITTOaSjr+jRBG4bMOSCodZzXR7JmR3roy7JEvpUbpdy/89f4qmkAfuYs glrL4mQxzUySvdFH9NwGyxT18rAbQRLzb+AcUJhnJK+hdF5iXRrdic2REW44fRtl MSVMRYJw6RUDoDA9/TnQENWqdlj2m3mj+Tcks8JW2MujY5EmeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4EQadLctz1/btVKtnzmoUUGDdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWY4YjMzYWQtMmFmNi0z OGI0LTkyM2YtZWEwMTFmMTIxMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM1TkngLr2ZWrHpFg9q9D/PS9rOoZiDdr2NaJRywdzB+/SbAh9rXG3R 71OvAHYIZB/ACMpz9M96xlg1YJ5auCqrB+ob1ko7e6fAKAFPGYZY1mye0P1DOxQe YBJktff+FjdmRZmlPkFYXbP7QhpisCD6/Lexra5Zvn1VC2uqLoDDpO1R5AzVuxvz Czl7K4MOyDoGPwPSRl3WKFgilnnwBoRoZVyFa/LPEDJwuhYiHGEfgPgGlK0pexE9 D35MZBrJd8YDsRHaa5W5e1Zs/LSrzo64I/I/RXtGCqNeY5b55BmQRX0JK6F4ou7i 416yyMmFJgJk6SHVLGyHVMH8Xr67LI8= -----END CERTIFICATE-----Generated at Wed Sep 30 21:35:55 2026 by rpki-client