$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa File: cefd100a-876c-3446-9ee7-3985f0ef017d.roa (raw, json) Hash identifier: EFY+HvzPFHvYhfXA4dp7KisCyjq52dN36AE2Es/6ypU= Subject key identifier: D0:12:BE:1C:49:BD:FB:F1:D2:FC:03:95:A6:00:70:AC:F0:79:EB:CE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D3E56353E091A8EDE7D00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:3e:56:35:3e:09:1a:8e:de:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2bd51d3f-0660-413c-9440-0987332ebf7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:23:ca:dc:49:a4:10:b3:3b:67:fa:95:70: bb:a0:07:94:d7:64:a3:3d:95:ef:b8:0f:d6:0f:58: 41:30:8a:70:f1:ad:40:02:20:f5:f3:06:73:d4:ff: 9f:26:ec:d8:f7:9c:a9:83:79:a5:f9:cd:31:e0:68: a7:d2:46:c3:c6:65:7f:c7:b4:b4:e7:89:2c:87:38: ae:e9:44:2e:e9:ce:31:5a:50:c6:9e:d6:78:db:54: 40:6b:0f:8b:7a:f6:30:ae:86:9c:31:6d:f1:5b:bd: e9:2e:60:b0:80:7c:af:05:6f:c3:12:e1:44:cc:97: 1b:30:3a:e0:4f:06:07:27:40:e0:cc:e0:c8:af:92: 7f:db:38:21:b7:8b:db:99:b9:e9:d0:bb:fa:20:c1: a5:8d:4c:3e:8c:d1:9d:aa:cd:85:cb:06:24:fb:14: 86:e8:b1:fa:ad:11:11:bb:75:86:b2:ec:56:e4:56: 5a:43:2a:22:a9:16:52:63:45:18:c7:7b:dd:f0:68: b0:ec:8f:ad:5c:eb:ff:02:33:13:ff:68:c6:ca:27: a9:5c:f0:02:16:37:bf:5d:ba:87:91:31:6f:20:06: d6:09:71:45:36:4f:93:b0:3c:d0:66:72:2b:05:3a: 93:d2:80:ce:4c:e4:c0:96:d3:e8:0f:b7:eb:d7:eb: 47:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:12:BE:1C:49:BD:FB:F1:D2:FC:03:95:A6:00:70:AC:F0:79:EB:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:b4:3f:be:57:48:f7:fb:04:91:ae:f5:ef:2f:f1:ce:24:bc: b6:70:9e:31:bb:48:76:a9:ca:40:f9:f2:ec:d9:82:d3:df:2a: 0a:ff:69:37:9d:c3:53:5c:dc:29:d8:0b:6c:df:14:8e:e7:09: 9d:8b:57:99:c6:fd:79:30:10:52:51:74:43:f2:16:58:f6:fe: 73:49:b8:12:26:7c:61:c5:b2:f7:25:ff:89:06:92:6d:64:ca: 26:68:c4:c5:ba:78:ca:3a:8b:95:34:87:97:df:95:51:b7:30: ae:f7:2a:10:72:5e:b6:ca:4c:85:e2:fe:91:78:27:ff:45:32: 31:dd:f6:72:20:d2:94:51:39:c7:22:bf:50:68:c8:d5:5d:3b: 4d:d3:49:12:03:c7:67:da:1f:2c:52:88:c5:74:0d:12:68:a7: d1:c1:42:32:33:0f:62:31:b4:b6:13:75:c8:b8:c1:20:80:d7: 34:75:2f:cd:be:c1:ff:be:ee:4b:bc:83:6d:81:72:6b:9b:8d: dc:0b:ef:da:61:b2:7a:bf:eb:dc:92:93:82:f8:eb:55:19:44: e7:6a:4e:1d:fc:bc:6b:87:4b:52:ba:19:0c:92:a9:2f:17:f4: 6d:36:7f:c1:94:6a:e2:45:80:15:e5:1b:7a:0c:60:31:ce:24: 66:23:1b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPT5WNT4JGo7efQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmJkNTFkM2YtMDY2MC00MTNjLTk0NDAtMDk4NzMzMmViZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd8jytxJpBCzO2f6lXC7oAeU12SjPZXvuA/W D1hBMIpw8a1AAiD18wZz1P+fJuzY95ypg3ml+c0x4Gin0kbDxmV/x7S054kshziu 6UQu6c4xWlDGntZ421RAaw+LevYwroacMW3xW73pLmCwgHyvBW/DEuFEzJcbMDrg TwYHJ0DgzODIr5J/2zght4vbmbnp0Lv6IMGljUw+jNGdqs2FywYk+xSG6LH6rRER u3WGsuxW5FZaQyoiqRZSY0UYx3vd8Giw7I+tXOv/AjMT/2jGyiepXPACFje/XbqH kTFvIAbWCXFFNk+TsDzQZnIrBTqT0oDOTOTAltPoD7fr1+tHWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNASvhxJvfvx0vwDlaYAcKzweevOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2VmZDEwMGEtODc2Yy0z NDQ2LTllZTctMzk4NWYwZWYwMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG0P75XSPf7BJGu9e8v8c4kvLZwnjG7SHapykD58uzZgtPfKgr/aTed w1Nc3CnYC2zfFI7nCZ2LV5nG/XkwEFJRdEPyFlj2/nNJuBImfGHFsvcl/4kGkm1k yiZoxMW6eMo6i5U0h5fflVG3MK73KhByXrbKTIXi/pF4J/9FMjHd9nIg0pRROcci v1BoyNVdO03TSRIDx2faHyxSiMV0DRJop9HBQjIzD2IxtLYTdci4wSCA1zR1L82+ wf++7ku8g22BcmubjdwL79phsnq/69ySk4L461UZROdqTh38vGuHS1K6GQySqS8X 9G02f8GUauJFgBXlG3oMYDHOJGYjGyQ= -----END CERTIFICATE-----Generated at Sat Sep 26 08:58:38 2026 by rpki-client