$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1d176e87-3922-3d5a-aee4-61654d37cbad.roa File: 1d176e87-3922-3d5a-aee4-61654d37cbad.roa (raw, json) Hash identifier: m5jXO2JQp2i8/0f9TcjPWS+hFl3OO+51/3u/sxofUGQ= Subject key identifier: 2A:38:A8:8E:2C:F6:2B:C6:AF:43:74:43:26:D5:F2:AA:3B:9E:D2:26 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D5F0D2490B6627FAF2180 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1d176e87-3922-3d5a-aee4-61654d37cbad.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5f:0d:24:90:b6:62:7f:af:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=3068f3de-74d6-48ed-93fd-5460a77cb9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:25:4f:18:e4:05:73:81:b6:8c:87:d1:62:46: 9b:75:bf:c6:34:84:42:aa:bd:13:92:fb:a5:77:b2: 6d:c3:05:10:7b:31:d4:e0:f9:1b:3a:53:86:78:5d: c3:da:0c:44:83:fa:5e:61:dd:1d:79:d8:ac:e5:74: 4d:3e:f5:75:89:95:8c:c9:ee:85:cd:31:80:cd:f0: 39:14:c3:74:d8:cc:e1:61:da:7b:b0:53:3a:5a:91: af:52:5c:cb:d1:4e:44:1d:61:13:27:68:a3:30:7d: b0:7c:db:76:e9:33:d8:7d:00:eb:78:7c:3d:ea:38: 0c:2b:c3:2c:29:2c:95:6b:b8:a0:bc:6e:c3:c9:d6: 4f:95:ee:ff:72:3e:84:20:73:84:7e:75:85:3e:d4: 60:f2:c3:87:e5:58:de:41:ca:31:d2:78:c6:f0:5e: 8c:c7:16:f6:3c:9c:ba:68:ab:57:90:1a:99:8d:32: f9:39:36:72:be:37:39:1d:f6:e1:24:07:94:57:d1: c8:79:86:f6:b5:b1:81:78:95:c3:e6:44:d1:09:d0: 49:b3:91:8d:a3:68:14:bb:f5:31:98:24:90:bd:c9: 12:77:75:d9:71:23:45:1a:41:31:ae:52:63:eb:b2: ba:ec:a7:3a:74:46:b6:04:d1:96:13:9e:e3:7b:be: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:38:A8:8E:2C:F6:2B:C6:AF:43:74:43:26:D5:F2:AA:3B:9E:D2:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/1d176e87-3922-3d5a-aee4-61654d37cbad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ab:e4:3e:07:1e:07:65:af:bf:74:92:9a:db:bb:65:f9:ba: f5:27:a9:df:70:dc:f9:bf:d7:98:4a:16:7d:be:0e:99:f3:59: 5e:7a:96:73:9e:eb:5f:40:77:10:11:c3:0e:55:1a:9e:df:92: 12:17:77:95:81:94:61:2e:e2:2b:06:79:a5:63:26:c1:8a:f3: c4:94:11:43:f1:c7:1d:e8:b4:de:36:07:53:e6:e9:d7:f6:42: 6d:05:6d:f9:ea:27:a4:20:80:f9:3c:c3:c1:83:1f:7f:b4:45: 28:66:62:d7:e0:08:18:60:53:1e:7a:b5:d9:80:d8:79:69:ac: 26:88:13:36:c3:74:c4:ca:ad:9b:0a:d3:13:3f:e2:00:55:0a: 71:9b:6e:44:50:dc:41:9b:00:1b:a5:8c:d6:0f:c4:c3:0c:f3: 36:34:7b:bb:32:75:93:51:57:5e:22:7c:ec:a5:d1:1d:b3:73: c1:68:ef:c7:22:f1:09:f6:6c:53:2c:25:9c:bf:19:8c:5a:2f: 77:d2:67:a3:0f:f5:fd:58:e8:21:a8:1d:23:d2:30:eb:cb:fb: 3e:c0:3d:af:cc:f4:13:38:d3:9a:8f:c2:76:8e:f7:23:2b:b2: da:60:bc:b3:ae:63:dd:88:0b:23:13:17:29:4b:79:dd:e3:98: 92:f7:33:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPV8NJJC2Yn+vIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzA2OGYzZGUtNzRkNi00OGVkLTkzZmQtNTQ2MGE3N2NiOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iVPGOQFc4G2jIfRYkabdb/GNIRCqr0Tkvul d7JtwwUQezHU4PkbOlOGeF3D2gxEg/peYd0dedis5XRNPvV1iZWMye6FzTGAzfA5 FMN02MzhYdp7sFM6WpGvUlzL0U5EHWETJ2ijMH2wfNt26TPYfQDreHw96jgMK8Ms KSyVa7igvG7DydZPle7/cj6EIHOEfnWFPtRg8sOH5VjeQcox0njG8F6Mxxb2PJy6 aKtXkBqZjTL5OTZyvjc5HfbhJAeUV9HIeYb2tbGBeJXD5kTRCdBJs5GNo2gUu/Ux mCSQvckSd3XZcSNFGkExrlJj67K67Kc6dEa2BNGWE57je75+4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo4qI4s9ivGr0N0QybV8qo7ntImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMWQxNzZlODctMzkyMi0z ZDVhLWFlZTQtNjE2NTRkMzdjYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSENMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGr5D4HHgdlr790kprbu2X5uvUnqd9w3Pm/15hKFn2+DpnzWV56lnOe 619AdxARww5VGp7fkhIXd5WBlGEu4isGeaVjJsGK88SUEUPxxx3otN42B1Pm6df2 Qm0FbfnqJ6QggPk8w8GDH3+0RShmYtfgCBhgUx56tdmA2HlprCaIEzbDdMTKrZsK 0xM/4gBVCnGbbkRQ3EGbABuljNYPxMMM8zY0e7sydZNRV14ifOyl0R2zc8Fo78ci 8Qn2bFMsJZy/GYxaL3fSZ6MP9f1Y6CGoHSPSMOvL+z7APa/M9BM405qPwnaO9yMr stpgvLOuY92ICyMTFylLed3jmJL3M34= -----END CERTIFICATE-----Generated at Mon Sep 28 10:52:13 2026 by rpki-client