$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa File: 82a39aa4-a04f-3930-8f25-5b23b167307b.roa (raw, json) Hash identifier: 3A7loJhlWws0BGNW4Wid0mETiKGD2CVSW8WZ5scCUZs= Subject key identifier: 8E:55:90:6C:03:11:B5:55:30:CE:3A:85:E6:6D:32:0F:0E:84:2D:5F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D42B263FED13F1F4E2D80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:42:b2:63:fe:d1:3f:1f:4e:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=cb56e21a-02af-4bb0-8069-0342acfdb45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:d5:72:15:1b:9c:ec:34:0a:25:4f:ef:7b: f2:05:bc:fc:fb:c9:d6:9a:4c:1a:bd:b9:db:87:67: 07:eb:f3:c6:fd:15:3b:fd:96:81:3b:1f:65:4e:bb: 9b:c4:6e:bd:aa:7e:0a:0d:a6:df:67:3a:f8:9e:e7: f3:a0:1f:61:66:90:05:ae:39:45:95:00:d1:b3:34: 23:5d:fa:08:e1:3f:81:b0:24:c9:cc:00:cd:f6:ce: 9c:7b:78:8b:15:cc:f1:58:15:87:66:c8:ce:8a:c3: b9:f2:18:1f:8d:f5:11:a1:9d:6c:11:71:8c:5e:63: 3f:ac:0b:0e:44:38:07:2b:76:a2:91:3c:55:85:ea: 4a:71:c9:f7:e9:c9:58:e6:58:74:a0:13:73:2c:6c: 71:69:4e:9a:5b:4f:bf:a8:b3:29:f8:20:4d:e0:74: b7:aa:65:d3:dc:66:18:c9:02:87:37:5d:2b:6d:69: bf:40:37:b7:d0:72:a5:7d:b3:d5:73:e6:46:76:ce: 98:ab:e6:e0:9f:09:ed:8c:12:84:51:6f:1a:72:e3: 1b:b1:bb:3a:b2:61:1c:02:e4:1d:67:ec:aa:5e:55: b4:88:4a:be:90:33:a5:a2:30:c6:0e:59:c8:3b:e5: 72:53:39:42:c0:4b:98:96:37:82:4d:7b:2a:f1:72: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:55:90:6C:03:11:B5:55:30:CE:3A:85:E6:6D:32:0F:0E:84:2D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3a:a5:83:b9:f7:a5:fe:c1:66:52:4c:c6:49:f0:ec:af:e3: 2b:d8:45:72:a2:59:96:b9:1c:66:0c:de:15:99:b9:57:bc:23: 9a:5e:a4:ac:7e:44:f0:85:05:3a:4e:b0:4b:0c:cd:ac:33:2f: d5:02:32:33:f5:40:82:e1:6e:61:72:a2:ec:7e:fe:40:3d:75: a3:68:5c:fa:7e:55:b1:a3:6f:63:4a:2f:d6:8c:de:a7:dd:c9: 33:e1:de:c3:86:42:59:76:5a:04:a1:12:66:33:32:f5:04:59: 71:4f:9b:cf:a6:cf:d5:b5:d3:74:08:38:fe:d3:ac:40:03:2e: 1c:4e:b3:12:a4:cb:75:06:15:02:33:4e:de:3e:00:54:6f:93: 8d:4f:6e:62:5f:11:99:3c:da:0e:6a:d5:98:2c:50:14:c7:9c: ad:70:1a:a3:a4:a0:9c:91:06:69:e2:80:81:85:c1:8e:be:cd: 12:3a:5f:a0:99:fe:f3:23:7c:45:e2:c0:53:37:67:5c:87:b3: 6c:29:99:54:97:14:28:80:3e:53:29:fc:e7:27:41:c2:80:e1: 32:15:f9:1c:14:a9:3a:51:94:d2:50:fc:36:36:29:3d:5c:64: c8:35:68:08:75:b1:de:ad:9a:64:45:41:e4:31:f5:1c:b9:cf: d7:bf:c3:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUKyY/7RPx9OLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2I1NmUyMWEtMDJhZi00YmIwLTgwNjktMDM0MmFjZmRiNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/vVchUbnOw0CiVP73vyBbz8+8nWmkwavbnb h2cH6/PG/RU7/ZaBOx9lTrubxG69qn4KDabfZzr4nufzoB9hZpAFrjlFlQDRszQj XfoI4T+BsCTJzADN9s6ce3iLFczxWBWHZsjOisO58hgfjfURoZ1sEXGMXmM/rAsO RDgHK3aikTxVhepKccn36clY5lh0oBNzLGxxaU6aW0+/qLMp+CBN4HS3qmXT3GYY yQKHN10rbWm/QDe30HKlfbPVc+ZGds6Yq+bgnwntjBKEUW8acuMbsbs6smEcAuQd Z+yqXlW0iEq+kDOlojDGDlnIO+VyUzlCwEuYljeCTXsq8XIE8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5VkGwDEbVVMM46heZtMg8OhC1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODJhMzlhYTQtYTA0Zi0z OTMwLThmMjUtNWIyM2IxNjczMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI6pYO596X+wWZSTMZJ8Oyv4yvYRXKiWZa5HGYM3hWZuVe8I5pepKx+ RPCFBTpOsEsMzawzL9UCMjP1QILhbmFyoux+/kA9daNoXPp+VbGjb2NKL9aM3qfd yTPh3sOGQll2WgShEmYzMvUEWXFPm8+mz9W103QIOP7TrEADLhxOsxKky3UGFQIz Tt4+AFRvk41PbmJfEZk82g5q1ZgsUBTHnK1wGqOkoJyRBmnigIGFwY6+zRI6X6CZ /vMjfEXiwFM3Z1yHs2wpmVSXFCiAPlMp/OcnQcKA4TIV+RwUqTpRlNJQ/DY2KT1c ZMg1aAh1sd6tmmRFQeQx9Ry5z9e/w5c= -----END CERTIFICATE-----Generated at Sun Sep 27 01:42:02 2026 by rpki-client