$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bdf7854c-94d9-37c2-8638-226878759e86.roa File: bdf7854c-94d9-37c2-8638-226878759e86.roa (raw, json) Hash identifier: AxxLeBJL5rsP6T+ALNX8JMuJbdjSH7EQ/J8OdsNEL6c= Subject key identifier: 12:A7:CC:BA:CF:3C:10:42:B5:ED:1B:A2:E7:D9:59:42:76:C5:59:43 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D43359765D14354545C00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bdf7854c-94d9-37c2-8638-226878759e86.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:43:35:97:65:d1:43:54:54:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e03231ac-b667-4e93-8147-8499c0ff673b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6c:5d:4f:2c:eb:17:cc:12:d2:9a:4e:65:c5: 65:c8:17:0d:b9:46:b2:44:9e:cc:cb:c4:fb:c3:0f: 0e:ce:b3:27:90:a1:21:a1:41:ea:1e:fe:21:aa:96: 54:2f:7e:17:f0:2c:08:c7:5f:4e:25:7c:29:c0:6c: 41:f9:01:4c:91:9a:fa:e4:89:1c:84:7a:f6:7b:4d: 52:cc:65:31:57:eb:f8:e5:a5:6d:cf:cd:8b:11:a0: 11:fc:ff:49:21:d5:b9:3a:85:d9:a1:30:78:13:90: 28:20:e3:d4:b3:e9:94:46:5f:bd:cc:1a:17:c9:9d: c8:51:22:70:13:14:04:a0:39:60:23:f8:11:e4:40: 66:07:a6:26:b2:6b:e1:99:47:49:d6:f2:6e:51:61: df:9a:b1:ae:a0:90:2e:20:6e:50:ed:b1:8f:6f:0f: c5:9f:43:8f:6a:53:af:4b:43:8b:ab:79:a0:bf:23: 52:90:41:d8:3b:d8:48:11:d0:76:e7:34:20:55:8e: a3:1a:8e:a8:0c:3a:3d:69:9c:d5:e9:f3:2f:71:b7: d7:94:5f:a4:14:cb:eb:fb:e8:6b:98:b5:1c:d1:1c: d7:f7:5b:e4:f3:94:59:f4:c3:09:45:2f:1a:0e:41: a5:6c:03:9e:8d:c7:72:22:a7:9a:aa:e5:ba:10:76: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A7:CC:BA:CF:3C:10:42:B5:ED:1B:A2:E7:D9:59:42:76:C5:59:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bdf7854c-94d9-37c2-8638-226878759e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f7:6a:5b:2d:24:a1:30:db:f3:3c:3d:51:e2:c5:bb:63:f6: 63:ba:7a:8d:42:a8:e8:e4:d4:49:c6:c6:3a:e0:77:a2:a1:ae: bf:f5:f4:66:52:4e:43:1c:36:98:8f:78:22:db:78:18:bb:0b: 3f:26:82:0c:85:0b:12:3c:c8:14:3c:16:50:62:c5:cf:ad:cc: b1:3b:36:0b:43:32:1a:92:9f:3e:7f:ab:14:02:ea:ba:4a:cb: c3:0c:bf:36:22:2d:7c:04:6b:23:81:73:24:b8:7e:7b:cf:e4: db:f1:d2:83:58:20:30:c4:70:44:f0:1c:19:03:9b:11:8b:8d: ea:6d:30:cc:78:f8:bb:ea:5c:49:df:5b:51:1e:5f:06:9d:2c: 05:e0:6e:82:94:ab:3c:8a:74:c3:8f:df:8a:61:2c:8f:f4:e6: 3e:ee:25:63:ea:49:be:3b:a1:73:4a:82:70:dc:1d:af:45:be: 38:fb:61:c8:4b:34:8f:ce:3c:b4:9e:e1:2e:f3:5b:c4:5f:4e: bd:fb:bf:f0:1a:e7:9d:f0:3b:13:79:1b:fc:20:ca:c9:d5:04: b9:5f:91:44:06:49:49:d6:05:d7:96:87:bd:db:e0:d7:a1:50: 76:51:10:36:ee:07:eb:a6:9f:a2:35:28:34:ac:1c:eb:6c:32: 40:16:41:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUM1l2XRQ1RUXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTAzMjMxYWMtYjY2Ny00ZTkzLTgxNDctODQ5OWMwZmY2NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGxdTyzrF8wS0ppOZcVlyBcNuUayRJ7My8T7 ww8OzrMnkKEhoUHqHv4hqpZUL34X8CwIx19OJXwpwGxB+QFMkZr65IkchHr2e01S zGUxV+v45aVtz82LEaAR/P9JIdW5OoXZoTB4E5AoIOPUs+mURl+9zBoXyZ3IUSJw ExQEoDlgI/gR5EBmB6YmsmvhmUdJ1vJuUWHfmrGuoJAuIG5Q7bGPbw/Fn0OPalOv S0OLq3mgvyNSkEHYO9hIEdB25zQgVY6jGo6oDDo9aZzV6fMvcbfXlF+kFMvr++hr mLUc0RzX91vk85RZ9MMJRS8aDkGlbAOejcdyIqeaquW6EHaK8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKnzLrPPBBCte0boufZWUJ2xVlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmRmNzg1NGMtOTRkOS0z N2MyLTg2MzgtMjI2ODc4NzU5ZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD73alstJKEw2/M8PVHixbtj9mO6eo1CqOjk1EnGxjrgd6Khrr/19GZS TkMcNpiPeCLbeBi7Cz8mggyFCxI8yBQ8FlBixc+tzLE7NgtDMhqSnz5/qxQC6rpK y8MMvzYiLXwEayOBcyS4fnvP5Nvx0oNYIDDEcETwHBkDmxGLjeptMMx4+LvqXEnf W1EeXwadLAXgboKUqzyKdMOP34phLI/05j7uJWPqSb47oXNKgnDcHa9Fvjj7YchL NI/OPLSe4S7zW8RfTr37v/Aa553wOxN5G/wgysnVBLlfkUQGSUnWBdeWh73b4Neh UHZREDbuB+umn6I1KDSsHOtsMkAWQSw= -----END CERTIFICATE-----Generated at Mon Sep 28 18:08:25 2026 by rpki-client