$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f8032f09-cc16-3131-82b0-247334998aa4.roa File: f8032f09-cc16-3131-82b0-247334998aa4.roa (raw, json) Hash identifier: 50gvdS5cTgLP4ThDF+71H6glfZrpKtaBik360v5u/kI= Subject key identifier: E6:5A:05:3C:9F:E5:31:CC:C5:2A:CE:93:96:DD:CB:98:8C:77:55:2D Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4987F37FFCFAFBC5772D4E00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f8032f09-cc16-3131-82b0-247334998aa4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:f3:7f:fc:fa:fb:c5:77:2d:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aa823de3-1e61-4e6b-a64f-e13b5556b2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:9b:49:95:1a:eb:55:bc:00:3b:1c:bf:e2: 20:14:ba:c9:07:e7:8b:fe:66:70:d7:7e:fd:e0:ce: 05:ef:6b:de:d9:89:c0:87:dc:21:aa:5d:f9:2f:f9: fa:30:9d:25:bc:cb:0a:a7:c9:ab:c2:b0:6f:65:c1: c7:f0:77:23:9b:2a:55:b6:da:b3:ef:2a:a2:6e:05: 5b:ce:bb:54:a6:a9:26:c3:8d:02:e0:77:fa:e1:25: 15:45:2f:83:7e:64:6c:82:82:d9:b2:f6:89:3e:a2: fa:32:59:70:dd:6a:4e:a7:ce:56:25:78:17:07:eb: 01:12:28:fa:b9:4d:94:9e:db:f4:bf:6f:73:1c:cf: b4:6f:75:c6:69:5d:45:05:e4:6e:58:ec:cb:3b:aa: 83:75:eb:de:6a:50:13:6a:77:a1:3d:6d:4a:e6:20: e0:1b:b1:e1:62:8e:fa:69:6f:c1:40:e0:e5:af:1e: 34:35:7c:8e:1c:81:33:9f:38:22:90:36:f7:71:73: ca:8f:5d:20:50:d1:66:4d:48:9a:88:7d:83:6f:2f: 79:34:62:93:ca:b1:b8:1a:75:f3:46:45:f1:da:4e: 38:40:93:9d:96:c4:f4:cb:06:e9:51:e0:e9:7a:5f: c6:33:c4:17:71:76:46:08:80:bb:5e:20:d7:ee:14: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:05:3C:9F:E5:31:CC:C5:2A:CE:93:96:DD:CB:98:8C:77:55:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f8032f09-cc16-3131-82b0-247334998aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:99:28:7a:dd:41:8e:50:d2:ab:06:ff:a7:5b:2e:64:75:2d: 89:ef:73:78:13:ba:d3:07:72:90:c9:3a:b5:2d:32:95:b3:8f: dc:08:fd:03:16:ec:e0:84:0f:9a:28:df:9b:10:39:5f:33:47: 9c:01:91:a8:e7:a2:a9:94:e1:3e:6b:be:8b:22:85:f4:94:f1: f3:5a:60:8a:25:d2:51:6c:79:aa:91:42:9e:46:fa:37:df:ee: 07:e1:74:07:b5:16:82:ef:a9:41:28:6d:34:cb:68:f1:4e:dc: 88:45:7b:02:78:95:27:71:0d:2a:5b:53:88:83:de:f8:35:47: 7d:84:b3:9b:76:ed:2f:e2:51:94:da:0f:01:15:d0:2a:d0:04: 49:da:9f:96:e6:a6:3b:7a:d4:08:8d:c8:1b:3a:a2:02:28:4a: 3f:8a:06:77:66:82:3b:a9:23:cd:47:5d:92:b1:5e:4a:53:7b: 37:b2:49:22:e6:a9:fa:11:1d:69:ea:82:c4:c6:3c:3a:18:82: 3c:db:db:75:8b:15:92:21:e5:a2:94:e5:df:68:c5:b6:6c:48: 8a:35:cd:3b:30:71:c4:73:95:45:a7:1d:d3:38:05:2b:9a:64: 7d:66:59:eb:10:b3:f2:31:da:db:09:30:98:a5:83:ef:91:c7: b8:65:ec:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh/N//Pr7xXctTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWE4MjNkZTMtMWU2MS00ZTZiLWE2NGYtZTEzYjU1NTZiMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYKbSZUa61W8ADscv+IgFLrJB+eL/mZw1379 4M4F72ve2YnAh9whql35L/n6MJ0lvMsKp8mrwrBvZcHH8HcjmypVttqz7yqibgVb zrtUpqkmw40C4Hf64SUVRS+DfmRsgoLZsvaJPqL6Mllw3WpOp85WJXgXB+sBEij6 uU2Untv0v29zHM+0b3XGaV1FBeRuWOzLO6qDdevealATanehPW1K5iDgG7HhYo76 aW/BQODlrx40NXyOHIEznzgikDb3cXPKj10gUNFmTUiaiH2Dby95NGKTyrG4GnXz RkXx2k44QJOdlsT0ywbpUeDpel/GM8QXcXZGCIC7XiDX7hR+8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZaBTyf5THMxSrOk5bdy5iMd1UtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjgwMzJmMDktY2MxNi0z MTMxLTgyYjAtMjQ3MzM0OTk4YWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeZKHrdQY5Q0qsG/6dbLmR1LYnvc3gTutMHcpDJOrUtMpWzj9wI/QMW 7OCED5oo35sQOV8zR5wBkajnoqmU4T5rvosihfSU8fNaYIol0lFseaqRQp5G+jff 7gfhdAe1FoLvqUEobTTLaPFO3IhFewJ4lSdxDSpbU4iD3vg1R32Es5t27S/iUZTa DwEV0CrQBEnan5bmpjt61AiNyBs6ogIoSj+KBndmgjupI81HXZKxXkpTezeySSLm qfoRHWnqgsTGPDoYgjzb23WLFZIh5aKU5d9oxbZsSIo1zTswccRzlUWnHdM4BSua ZH1mWesQs/Ix2tsJMJilg++Rx7hl7JE= -----END CERTIFICATE-----Generated at Sat Sep 26 07:30:23 2026 by rpki-client