$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2fa8fec8-6de6-3faa-942f-4e766a046b0c.roa File: 2fa8fec8-6de6-3faa-942f-4e766a046b0c.roa (raw, json) Hash identifier: c5eNA/Ug3kCcKgrhpUdkr1kkdUJdMlVxmddsuMDsOm8= Subject key identifier: 4B:8A:22:F9:73:5C:49:40:29:FA:3B:B0:44:05:8F:AC:53:D8:9A:03 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584E07008181796FD71F6AE59700 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2fa8fec8-6de6-3faa-942f-4e766a046b0c.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 23473 IP address blocks: 153.33.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:81:81:79:6f:d7:1f:6a:e5:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=1e4c5a09-26ba-4deb-ac88-be1627104092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:bd:de:0d:35:86:5b:23:d4:08:52:bd:75: 47:81:27:e1:f7:2a:89:ba:01:6f:36:aa:ff:07:f0: 81:92:9a:7d:55:bd:61:fa:b3:84:99:03:d3:b7:8a: 92:b2:e4:bf:20:7d:c5:e0:85:d6:5e:54:c6:c8:fa: 22:21:1d:3c:27:d7:19:76:29:72:80:71:5a:3b:c3: 1d:4c:66:33:6c:2a:83:b7:2b:e1:35:38:3c:f2:e7: 9a:c1:eb:5f:c6:4a:0d:14:73:d5:1f:00:2d:23:5f: c8:14:e8:14:c0:20:d2:88:07:c3:85:f0:5f:af:38: 7c:6c:be:27:c8:46:ce:f9:77:aa:7b:5b:e6:13:95: 2c:c5:36:bb:93:18:80:3b:e5:60:44:62:bd:ea:d0: 8a:57:ae:ee:09:a2:e8:cf:ab:0f:75:f6:12:28:a0: d1:fb:ac:97:4a:49:46:62:a4:9d:37:a1:9c:06:95: 17:c0:74:19:c0:a4:83:0b:55:8e:4b:c2:48:f4:59: e6:3d:bd:7d:b5:ea:88:18:4d:15:13:06:c6:c7:b7: 4b:8a:59:f6:ec:6f:0c:6f:d4:14:18:69:f9:d7:0f: 5f:15:24:5b:92:19:38:4f:c2:1c:cf:87:61:5f:2b: 08:7e:0a:fe:be:ed:df:63:9a:87:ea:02:a3:97:a4: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8A:22:F9:73:5C:49:40:29:FA:3B:B0:44:05:8F:AC:53:D8:9A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2fa8fec8-6de6-3faa-942f-4e766a046b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c4:9f:61:0c:c5:c0:d4:87:a7:8e:c3:6b:72:c0:e2:d9:ac: 4c:fb:72:44:f2:e9:3b:04:db:2e:f5:8d:9e:07:ba:e0:26:7f: fc:3b:40:d4:00:5b:06:30:01:f8:a7:25:83:e8:c8:d3:6c:11: 5a:ea:00:f4:cc:89:e0:47:f3:72:fe:04:fa:42:ef:fe:8b:42: 31:b1:ec:27:c1:4a:26:fe:a0:91:0c:1c:62:60:c4:3b:9c:c4: 4b:dc:61:30:e7:d9:7d:7c:08:00:f7:ee:e7:a9:de:21:fc:41: d8:a3:86:24:ca:05:9f:19:27:21:db:37:36:97:18:1e:1a:0a: 21:50:d3:88:29:6d:cb:4a:bd:8d:6a:fb:79:e9:9a:c2:b7:b3: 92:2b:c2:79:75:15:9c:43:09:61:aa:b9:93:02:a5:f6:25:c5: fd:c3:fe:d6:1b:b8:18:bb:89:b7:05:17:69:9e:f7:16:f0:47: 15:95:31:fa:cd:ba:8a:69:43:13:a8:39:4f:b6:02:2c:7f:c3: e1:e8:21:97:e2:3f:53:d2:0a:12:34:3c:d7:f2:d4:16:39:ea: 87:43:d0:2a:c3:12:01:99:08:7a:96:90:44:76:8a:eb:a1:03: fd:e4:2e:9e:8b:63:5c:51:2d:17:82:38:1e:71:bb:de:30:50: 2f:41:da:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAIGBeW/XH2rllwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk MWU0YzVhMDktMjZiYS00ZGViLWFjODgtYmUxNjI3MTA0MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBy93g01hlsj1AhSvXVHgSfh9yqJugFvNqr/ B/CBkpp9Vb1h+rOEmQPTt4qSsuS/IH3F4IXWXlTGyPoiIR08J9cZdilygHFaO8Md TGYzbCqDtyvhNTg88ueawetfxkoNFHPVHwAtI1/IFOgUwCDSiAfDhfBfrzh8bL4n yEbO+Xeqe1vmE5UsxTa7kxiAO+VgRGK96tCKV67uCaLoz6sPdfYSKKDR+6yXSklG YqSdN6GcBpUXwHQZwKSDC1WOS8JI9FnmPb19teqIGE0VEwbGx7dLiln27G8Mb9QU GGn51w9fFSRbkhk4T8Icz4dhXysIfgr+vu3fY5qH6gKjl6T+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuKIvlzXElAKfo7sEQFj6xT2JoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmZhOGZlYzgtNmRlNi0z ZmFhLTk0MmYtNGU3NjZhMDQ2YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvEn2EMxcDUh6eOw2tywOLZrEz7ckTy6TsE2y71jZ4HuuAmf/w7QNQA WwYwAfinJYPoyNNsEVrqAPTMieBH83L+BPpC7/6LQjGx7CfBSib+oJEMHGJgxDuc xEvcYTDn2X18CAD37uep3iH8QdijhiTKBZ8ZJyHbNzaXGB4aCiFQ04gpbctKvY1q +3npmsK3s5Irwnl1FZxDCWGquZMCpfYlxf3D/tYbuBi7ibcFF2me9xbwRxWVMfrN uoppQxOoOU+2Aix/w+HoIZfiP1PSChI0PNfy1BY56odD0CrDEgGZCHqWkER2iuuh A/3kLp6LY1xRLReCOB5xu94wUC9B2jQ= -----END CERTIFICATE-----Generated at Sat Jun 13 18:34:08 2026 by rpki-client