$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f4695ee7-db3f-3f8b-8019-78da4cb1fa8b.roa File: f4695ee7-db3f-3f8b-8019-78da4cb1fa8b.roa (raw, json) Hash identifier: KET0AjpbhV1sWJgBfGujMS0rYoGDa4/1EQpHMKdIMJA= Subject key identifier: DC:5B:94:62:8B:54:F6:60:0B:16:C3:50:BF:81:E8:AF:EE:97:0D:4A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584D44FA753F41AA8F1E2C0F8840 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f4695ee7-db3f-3f8b-8019-78da4cb1fa8b.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 23473 IP address blocks: 153.33.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:75:3f:41:aa:8f:1e:2c:0f:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=4e5d8ab3-7c2c-4dd0-969f-c048ecddc8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c2:e5:5d:82:84:4c:e9:3f:08:15:d2:cf:54: eb:24:d7:71:35:6a:b1:5d:f6:57:74:54:0e:6d:45: bc:42:8a:ac:07:e9:39:dc:f2:f7:30:4a:fe:89:72: 72:c3:3c:79:b4:4d:58:52:47:d1:b0:0e:b7:15:86: fa:94:6b:bc:17:9d:b6:01:12:d9:0b:d1:8f:18:93: b1:42:86:be:da:eb:26:8c:b7:7c:f2:0a:b3:f8:18: 44:20:1b:22:73:35:d7:21:0d:5a:05:2b:d5:13:69: 16:06:80:2c:77:b7:cc:a1:eb:47:4b:40:9b:5b:74: 3a:26:46:85:c7:ea:2d:ba:44:dd:9f:1f:10:b1:01: 42:6c:eb:69:c3:32:bd:47:28:e0:86:b7:6e:b7:35: df:e5:5e:fa:6a:1d:04:71:df:75:34:8e:96:5b:e9: 53:1b:6f:53:38:11:7b:ab:93:fd:c7:61:f2:25:ab: bf:c7:22:ec:5f:e7:75:7b:30:9b:7f:3e:1d:70:bf: e3:16:16:f0:b8:06:78:f0:b8:7f:05:cc:a7:b5:da: 4d:05:87:d2:dc:1b:50:e4:a0:e4:7e:ed:7f:3d:81: 5a:62:c7:91:2a:98:d6:59:10:2c:61:d4:f6:ef:75: 18:d6:ff:81:3f:64:fc:27:ac:90:83:7c:a8:14:8f: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5B:94:62:8B:54:F6:60:0B:16:C3:50:BF:81:E8:AF:EE:97:0D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f4695ee7-db3f-3f8b-8019-78da4cb1fa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:c4:a4:5a:f8:c4:74:e3:86:96:a7:7d:ae:11:c5:c1:d6:8c: 99:1b:a9:69:6e:2e:49:d4:4f:d9:8a:07:40:27:31:05:f6:73: 5a:b8:f8:5b:fb:ac:58:fe:0e:19:94:a8:c1:af:d1:53:63:44: f8:ac:e3:81:ac:be:eb:27:0a:a3:45:4a:32:78:49:0f:ad:5c: 9d:f4:eb:c0:75:38:86:9f:a5:da:d3:d4:ad:6a:34:a5:13:7a: 28:00:ef:16:5c:c2:17:1b:70:5b:7d:4c:a6:32:25:06:31:74: ee:dd:07:d0:63:33:35:31:34:a2:b3:02:e8:c2:d7:7c:3b:12: e2:53:82:2e:ce:ac:7d:25:b1:cb:6c:29:f0:44:ce:be:c4:3c: fd:d9:30:f9:5d:31:82:d8:c8:b9:29:cc:fa:4b:42:38:64:c9: dd:67:5d:9a:75:43:fd:64:64:32:47:35:7d:f7:c5:16:17:2d: 36:aa:98:cf:af:5f:9a:bd:ac:a2:30:f8:65:03:63:98:89:90: c5:fa:63:52:ae:a8:72:46:d8:d6:7c:4e:b2:87:c6:19:07:df: c1:0e:fb:9d:b1:55:f1:5d:74:a0:9f:80:57:aa:14:cb:ac:0f: 7d:6d:b8:79:c6:c0:b5:49:d1:44:95:ad:bd:91:be:0f:5c:8a: 08:fd:e9:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nU/QaqPHiwPiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NGU1ZDhhYjMtN2MyYy00ZGQwLTk2OWYtYzA0OGVjZGRjOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcLlXYKETOk/CBXSz1TrJNdxNWqxXfZXdFQO bUW8QoqsB+k53PL3MEr+iXJywzx5tE1YUkfRsA63FYb6lGu8F522ARLZC9GPGJOx Qoa+2usmjLd88gqz+BhEIBsiczXXIQ1aBSvVE2kWBoAsd7fMoetHS0CbW3Q6JkaF x+otukTdnx8QsQFCbOtpwzK9RyjghrdutzXf5V76ah0Ecd91NI6WW+lTG29TOBF7 q5P9x2HyJau/xyLsX+d1ezCbfz4dcL/jFhbwuAZ48Lh/BcyntdpNBYfS3BtQ5KDk fu1/PYFaYseRKpjWWRAsYdT273UY1v+BP2T8J6yQg3yoFI8GowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxblGKLVPZgCxbDUL+B6K/ulw1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjQ2OTVlZTctZGIzZi0z ZjhiLTgwMTktNzhkYTRjYjFmYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/EpFr4xHTjhpanfa4RxcHWjJkbqWluLknUT9mKB0AnMQX2c1q4+Fv7 rFj+DhmUqMGv0VNjRPis44GsvusnCqNFSjJ4SQ+tXJ3068B1OIafpdrT1K1qNKUT eigA7xZcwhcbcFt9TKYyJQYxdO7dB9BjMzUxNKKzAujC13w7EuJTgi7OrH0lscts KfBEzr7EPP3ZMPldMYLYyLkpzPpLQjhkyd1nXZp1Q/1kZDJHNX33xRYXLTaqmM+v X5q9rKIw+GUDY5iJkMX6Y1KuqHJG2NZ8TrKHxhkH38EO+52xVfFddKCfgFeqFMus D31tuHnGwLVJ0USVrb2Rvg9cigj96ZY= -----END CERTIFICATE-----Generated at Thu Mar 26 21:48:48 2026 by rpki-client