$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f08e83cb-3912-3831-853a-65a819402309.roa File: f08e83cb-3912-3831-853a-65a819402309.roa (raw, json) Hash identifier: F1LVTb7QbaQ7QSYfbqqKuWmDT0eEgEvDbKvdWmDuXdI= Subject key identifier: D0:4B:8A:EF:9D:DB:1D:63:6B:16:1C:79:12:A6:7D:3D:48:9B:D7:F9 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F5767FB2FBFC00950BA55BA00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f08e83cb-3912-3831-853a-65a819402309.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:fb:2f:bf:c0:09:50:ba:55:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=f88d4c27-ae16-4bc2-84d0-1a8f2261ee12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:8d:eb:0e:c7:12:a9:d0:61:21:48:69:41: 45:02:61:8d:b9:a2:76:c4:d0:86:e1:f1:33:a1:ec: d4:7a:a4:cc:dc:e5:67:f8:4c:a2:14:92:c7:75:32: c3:b5:ae:12:02:de:76:c4:90:36:aa:0a:b7:5f:52: 65:6c:4c:fd:52:98:ed:3a:2b:76:d8:6e:10:a3:db: df:87:b1:14:45:7f:de:0a:81:53:05:ab:41:73:5b: 48:1a:0e:f8:f6:7e:1b:0b:07:4c:b0:14:32:07:d0: 36:77:a4:c4:f9:f4:98:9f:1f:be:04:94:3a:5d:81: 5e:96:b6:d5:ca:bd:d2:8d:f2:45:87:12:87:4f:73: 03:e2:f7:06:8b:d4:98:1e:bb:8c:5b:f8:01:95:b0: f5:19:d1:9a:96:5d:38:da:ef:ad:d3:ed:57:ef:0f: 44:f2:43:37:4f:56:ea:a0:2f:3c:ba:2d:87:fa:27: 98:7f:d9:7b:68:ad:42:2c:58:c8:01:ab:ba:6b:eb: 1e:f8:9d:af:c0:26:68:39:2c:59:06:5c:60:c2:3e: d7:7d:07:b3:a2:c6:ff:af:b3:ad:0a:e4:69:93:d0: 23:9a:1e:99:b2:61:b3:73:32:12:01:bb:53:36:d1: 26:aa:6f:d1:d6:de:0f:35:e3:53:e1:03:89:6d:76: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4B:8A:EF:9D:DB:1D:63:6B:16:1C:79:12:A6:7D:3D:48:9B:D7:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f08e83cb-3912-3831-853a-65a819402309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a7:8f:6d:da:9a:a5:b6:d4:0c:57:a7:fe:2e:2a:e6:a3:39: 84:75:6a:aa:b8:31:62:73:d7:64:b0:69:d6:ce:01:a1:be:5d: a8:1e:d4:e5:de:34:8a:91:d4:65:d2:23:04:ae:e4:a5:f9:8a: e7:84:4f:9d:af:0e:6b:ef:f8:aa:40:09:1d:e3:1f:3a:dc:48: 36:c1:d1:9e:df:2e:24:d7:36:0d:87:75:25:0e:ae:c1:4a:d2: c0:af:e4:b1:75:8a:92:a4:dc:63:e5:e5:77:3f:70:3d:33:8c: 26:c3:24:13:a2:ce:b9:9e:aa:f9:67:46:a9:cb:e5:fe:37:87: 51:2c:21:1f:bc:9c:a8:46:2a:c8:6f:b6:76:9a:65:76:d5:c2: dd:2f:0c:e7:c2:ae:d5:b8:46:53:72:5b:56:61:fe:5f:92:4d: a3:f7:96:ab:9a:99:08:92:0d:71:a1:b4:03:98:c7:74:88:f0: 92:e3:01:6c:8d:c8:0f:00:3e:4c:54:68:50:3f:63:2b:82:09: 69:ab:d2:d5:8f:9c:11:64:4a:1c:3b:82:45:6f:46:3f:b6:b9: 63:84:d0:6f:62:75:4e:89:30:ec:46:fb:f0:1b:18:2d:f5:e9: 8c:45:58:c4:0a:d3:79:21:f7:f0:7e:0f:69:77:a3:73:9c:91: 11:96:a9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XZ/svv8AJULpVugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk Zjg4ZDRjMjctYWUxNi00YmMyLTg0ZDAtMWE4ZjIyNjFlZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv2N6w7HEqnQYSFIaUFFAmGNuaJ2xNCG4fEz oezUeqTM3OVn+EyiFJLHdTLDta4SAt52xJA2qgq3X1JlbEz9UpjtOit22G4Qo9vf h7EURX/eCoFTBatBc1tIGg749n4bCwdMsBQyB9A2d6TE+fSYnx++BJQ6XYFelrbV yr3SjfJFhxKHT3MD4vcGi9SYHruMW/gBlbD1GdGall042u+t0+1X7w9E8kM3T1bq oC88ui2H+ieYf9l7aK1CLFjIAau6a+se+J2vwCZoOSxZBlxgwj7XfQezosb/r7Ot CuRpk9Ajmh6ZsmGzczISAbtTNtEmqm/R1t4PNeNT4QOJbXam2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBLiu+d2x1jaxYceRKmfT1Im9f5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjA4ZTgzY2ItMzkxMi0z ODMxLTg1M2EtNjVhODE5NDAyMzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6nj23amqW21AxXp/4uKuajOYR1aqq4MWJz12SwadbOAaG+Xage1OXe NIqR1GXSIwSu5KX5iueET52vDmvv+KpACR3jHzrcSDbB0Z7fLiTXNg2HdSUOrsFK 0sCv5LF1ipKk3GPl5Xc/cD0zjCbDJBOizrmeqvlnRqnL5f43h1EsIR+8nKhGKshv tnaaZXbVwt0vDOfCrtW4RlNyW1Zh/l+STaP3lquamQiSDXGhtAOYx3SI8JLjAWyN yA8APkxUaFA/YyuCCWmr0tWPnBFkShw7gkVvRj+2uWOE0G9idU6JMOxG+/AbGC31 6YxFWMQK03kh9/B+D2l3o3OckRGWqSA= -----END CERTIFICATE-----Generated at Sun Oct 4 07:16:38 2026 by rpki-client