$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa File: d8e0d83b-b7b8-3749-958e-92125d792895.roa (raw, json) Hash identifier: 19dg80GjlDq8GgdkN/ZyR6hw47Bxl5lnGl7gsvlaiOQ= Subject key identifier: 32:54:F7:ED:F8:E7:A0:BA:AD:32:EF:6A:68:E0:74:45:B6:87:D5:9F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D3FB2C98A113AE633A980 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:3f:b2:c9:8a:11:3a:e6:33:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=04d60b44-a114-47dd-bbda-0a780a35dcfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:91:ca:ad:82:d8:95:3d:9c:5b:28:ba:8a:18: fd:99:a9:35:5f:88:9d:6f:db:bb:cf:f8:de:8b:c8: b5:17:0f:b8:1d:3a:6f:f1:7c:a2:2d:27:9d:2c:75: c2:a6:ae:61:a3:2a:c4:18:de:5b:88:ac:78:46:22: 5e:d8:81:b3:5e:5e:ca:7c:ea:6f:7f:3f:07:8d:bc: aa:50:f7:74:e8:67:96:8c:e8:54:f7:75:0e:86:43: 18:c6:79:08:30:08:e4:92:a3:04:b8:01:61:df:f0: 5c:9b:42:1f:2f:29:6b:34:41:1c:5d:4d:13:e2:15: b6:84:f4:ea:c9:29:be:57:bf:90:a2:7d:41:0c:09: 65:ea:d3:3c:90:c1:27:fa:94:61:d5:bf:44:8e:45: 72:f2:bf:92:b2:63:a9:68:50:ad:3d:e4:d8:cf:24: 12:51:0b:6a:1d:86:5e:3f:78:a3:91:dd:93:6c:29: 09:6d:51:e1:ae:37:31:b8:ff:9c:4a:5c:11:95:d5: cb:ee:17:57:ab:3c:cb:8b:b7:bb:b6:5b:ac:64:26: 7d:53:10:de:45:84:78:a3:19:cc:86:ac:9b:42:00: 29:a8:c6:c6:ef:c4:d6:a6:d3:b8:f8:22:6a:a9:dc: fc:53:06:94:b3:b8:53:da:89:bc:d5:51:2a:be:f9: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:54:F7:ED:F8:E7:A0:BA:AD:32:EF:6A:68:E0:74:45:B6:87:D5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b8:8c:67:a5:0c:44:c2:6d:82:8d:b0:38:a8:68:a0:7b:a3: d9:ba:c6:28:cf:c7:6e:95:49:db:d2:67:e3:ff:72:b4:84:dd: d1:0b:a8:01:cf:c6:ea:b0:02:25:f2:f3:2c:b8:57:b2:38:47: f9:c3:6a:e2:24:78:47:75:d5:ea:7b:c4:f3:7c:e5:bf:17:53: 99:1a:7b:2f:07:6c:3c:e9:a2:38:91:4c:a7:de:e5:2c:59:55: 33:94:f7:01:fd:67:39:b2:38:67:37:e5:b6:58:7f:10:16:86: 42:df:3b:b7:32:18:21:12:68:fd:dc:06:a4:af:bf:dd:3a:f1: 68:c4:d5:e2:e5:07:72:c0:cc:04:3a:e6:bd:a5:6e:aa:01:1b: 78:39:87:a7:61:30:95:ef:b7:ad:51:94:05:26:a1:83:04:33: 19:95:c8:ca:bd:ae:04:10:b4:c9:81:a0:c9:c2:6d:5e:0f:9b: c4:5f:04:99:d0:1e:34:18:c4:ed:b6:7d:81:bd:4e:e5:57:a0: 2b:39:de:35:ef:46:62:5d:55:59:b5:f8:05:f4:af:0b:48:b8: a7:5f:5a:2c:1c:62:f3:32:71:34:61:a2:65:5d:3e:d3:77:d8: 92:b9:1e:18:af:a7:1d:db:88:40:a3:9f:30:8b:28:dd:e3:db: 42:82:6d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPT+yyYoROuYzqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDRkNjBiNDQtYTExNC00N2RkLWJiZGEtMGE3ODBhMzVkY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJHKrYLYlT2cWyi6ihj9mak1X4idb9u7z/je i8i1Fw+4HTpv8XyiLSedLHXCpq5hoyrEGN5biKx4RiJe2IGzXl7KfOpvfz8Hjbyq UPd06GeWjOhU93UOhkMYxnkIMAjkkqMEuAFh3/Bcm0IfLylrNEEcXU0T4hW2hPTq ySm+V7+Qon1BDAll6tM8kMEn+pRh1b9EjkVy8r+SsmOpaFCtPeTYzyQSUQtqHYZe P3ijkd2TbCkJbVHhrjcxuP+cSlwRldXL7hdXqzzLi7e7tlusZCZ9UxDeRYR4oxnM hqybQgApqMbG78TWptO4+CJqqdz8UwaUs7hT2om81VEqvvmuBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJU9+3456C6rTLvamjgdEW2h9WfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDhlMGQ4M2ItYjdiOC0z NzQ5LTk1OGUtOTIxMjVkNzkyODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm4jGelDETCbYKNsDioaKB7o9m6xijPx26VSdvSZ+P/crSE3dELqAHP xuqwAiXy8yy4V7I4R/nDauIkeEd11ep7xPN85b8XU5kaey8HbDzpojiRTKfe5SxZ VTOU9wH9ZzmyOGc35bZYfxAWhkLfO7cyGCESaP3cBqSvv9068WjE1eLlB3LAzAQ6 5r2lbqoBG3g5h6dhMJXvt61RlAUmoYMEMxmVyMq9rgQQtMmBoMnCbV4Pm8RfBJnQ HjQYxO22fYG9TuVXoCs53jXvRmJdVVm1+AX0rwtIuKdfWiwcYvMycTRhomVdPtN3 2JK5Hhivpx3biECjnzCLKN3j20KCbfQ= -----END CERTIFICATE-----Generated at Sat Sep 26 17:57:27 2026 by rpki-client