$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa File: 40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa (raw, json) Hash identifier: eFAtXaVrFjpANDcMRkrZbFgMm8wnXuatkoEIiFtvpFE= Subject key identifier: 60:7A:EB:99:A7:8F:F0:EB:A0:F6:F2:69:A1:6E:08:54:65:78:2B:DE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D606B50A0616931010F80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:60:6b:50:a0:61:69:31:01:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=080361e8-3602-4aa2-9ea3-be33ad234670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:5b:fd:f8:85:6c:b7:4d:5d:dc:75:81:1e: a0:27:ad:b2:9e:c9:cd:72:a2:3a:56:47:0c:ec:a4: b0:c1:62:e1:d9:13:f4:9a:12:a6:ae:21:d6:71:f3: 4f:cb:fb:0b:db:cc:a8:35:3b:42:db:61:62:7c:7a: e4:3f:28:4d:d2:14:6d:1d:50:72:3b:6b:e2:f7:21: 14:f0:b6:0c:87:4e:53:44:75:27:ea:46:ae:bc:d3: ab:80:83:7b:ac:35:1f:d1:71:be:7c:04:05:32:1c: c2:06:60:d4:60:83:e4:bc:36:10:8f:ba:90:9f:97: 9a:3b:56:fa:cf:65:70:3a:b9:a9:a1:cd:ca:1f:89: 67:16:1f:cf:20:37:b8:6f:af:34:12:4d:67:c1:aa: 85:d8:e6:68:5a:82:d5:26:97:0b:7f:3d:bd:9b:28: fa:48:04:13:45:95:41:49:f4:b8:52:40:e6:54:5d: 48:40:2b:93:4e:05:f1:4e:0c:3c:c0:a7:94:09:02: cd:0e:e7:7f:16:51:d5:8e:9c:7b:3f:79:04:67:56: 09:5d:4a:10:96:60:2d:19:99:3c:5c:59:a8:00:61: f1:53:46:16:72:66:11:60:55:22:45:d1:ec:71:8a: 08:5d:bb:76:8f:fb:43:92:0e:e1:85:7a:29:f1:ac: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7A:EB:99:A7:8F:F0:EB:A0:F6:F2:69:A1:6E:08:54:65:78:2B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e5:d1:f2:8a:80:c9:3e:50:e2:7b:65:49:01:87:89:e7:7e: 40:66:10:e8:d5:96:f9:d3:a0:35:13:da:9b:f6:3a:40:dd:42: 48:c6:7d:d7:8b:72:96:85:cb:67:86:a5:95:c8:70:52:3f:78: ce:b3:33:c7:e4:25:07:f7:c1:b6:62:08:12:07:2f:3d:c1:35: bc:b4:95:a0:1f:9f:22:8e:12:2f:a7:d6:f5:6d:80:00:fa:7c: 6f:39:f6:4e:4e:75:e9:ba:0a:19:7e:0a:b2:00:80:da:e6:ce: 31:a4:9b:96:e8:41:f2:bd:67:88:3f:67:28:20:fe:f0:56:a7: 28:80:28:03:5f:cf:cc:6c:09:1b:be:f4:4f:0c:0d:8d:27:9f: 44:a7:9c:11:f3:c2:75:9a:0c:76:4e:0b:e3:5b:a0:1a:fe:b8: b2:74:c8:99:7c:eb:9c:65:2a:68:8c:e3:7b:64:2c:53:ce:72: 95:b4:f7:ce:da:dd:c2:7a:2f:ff:ff:b0:02:62:0e:b4:45:d1: c6:bd:ab:4b:4e:ab:54:d1:53:43:b3:20:64:1b:e9:21:54:bf: a0:37:22:61:96:3e:e0:c1:c2:5a:55:8b:4f:3e:34:e2:1f:dc: 73:a5:60:2d:d0:e6:9b:98:f4:2e:2a:c3:38:ef:70:6e:bd:a0: de:0f:3a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWBrUKBhaTEBD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDgwMzYxZTgtMzYwMi00YWEyLTllYTMtYmUzM2FkMjM0NjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi5b/fiFbLdNXdx1gR6gJ62ynsnNcqI6VkcM 7KSwwWLh2RP0mhKmriHWcfNPy/sL28yoNTtC22FifHrkPyhN0hRtHVByO2vi9yEU 8LYMh05TRHUn6kauvNOrgIN7rDUf0XG+fAQFMhzCBmDUYIPkvDYQj7qQn5eaO1b6 z2VwOrmpoc3KH4lnFh/PIDe4b680Ek1nwaqF2OZoWoLVJpcLfz29myj6SAQTRZVB SfS4UkDmVF1IQCuTTgXxTgw8wKeUCQLNDud/FlHVjpx7P3kEZ1YJXUoQlmAtGZk8 XFmoAGHxU0YWcmYRYFUiRdHscYoIXbt2j/tDkg7hhXop8aza6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB665mnj/DroPbyaaFuCFRleCveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDA0NzRjYmItZGQ1ZC0z ZDQ0LWE0YmEtYTkzMzVjNWE5ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPl0fKKgMk+UOJ7ZUkBh4nnfkBmEOjVlvnToDUT2pv2OkDdQkjGfdeL cpaFy2eGpZXIcFI/eM6zM8fkJQf3wbZiCBIHLz3BNby0laAfnyKOEi+n1vVtgAD6 fG859k5Odem6Chl+CrIAgNrmzjGkm5boQfK9Z4g/Zygg/vBWpyiAKANfz8xsCRu+ 9E8MDY0nn0SnnBHzwnWaDHZOC+NboBr+uLJ0yJl865xlKmiM43tkLFPOcpW0987a 3cJ6L///sAJiDrRF0ca9q0tOq1TRU0OzIGQb6SFUv6A3ImGWPuDBwlpVi08+NOIf 3HOlYC3Q5puY9C4qwzjvcG69oN4POrk= -----END CERTIFICATE-----Generated at Sat Sep 26 07:16:02 2026 by rpki-client