$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa File: a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa (raw, json) Hash identifier: gq4+7spdn8e026+OfkGjMQZ4ApR2gfWpFyVqGHGR190= Subject key identifier: A2:49:EE:35:0A:FC:90:D9:72:4E:5F:29:4C:D2:80:AD:C5:29:34:FE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584E104ED2B77B7CF25DCF7FBF00 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 23473 IP address blocks: 153.33.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:d2:b7:7b:7c:f2:5d:cf:7f:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=950ac875-4d60-4259-b1b1-0be69438202a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f7:1c:69:57:02:b7:9e:cd:cc:6c:cc:a6:e2: 1a:6c:c6:f9:a8:b4:e3:c4:17:22:06:8f:05:bb:73: c0:ed:c5:89:fc:40:44:c2:94:d4:f0:ce:95:ef:e1: 42:bb:ae:2b:cd:1a:9e:fd:bc:8f:d1:74:eb:d7:a1: ec:8f:f9:77:78:fd:f6:5e:b7:41:ac:56:c3:1b:b2: 06:69:33:16:85:4e:04:fc:76:83:7e:a8:ba:3a:30: a2:0d:d3:81:5f:34:11:b9:1c:e8:db:88:da:0d:97: 3e:57:23:59:66:1c:99:52:83:4d:ee:94:82:f3:1f: 67:a6:fe:85:f5:42:b1:fa:47:bd:3b:4d:cd:a3:2e: 2a:39:bf:0c:42:8b:0d:f2:ce:52:ab:0d:d3:bb:1b: ce:b5:36:35:6b:55:18:13:8d:82:b8:02:a0:40:18: cc:85:75:3e:1c:7e:d8:88:b1:59:9e:58:8b:70:24: 66:50:cb:b0:2c:b2:5b:a2:0a:13:ee:00:fe:98:c1: a2:47:5f:0b:d7:97:e3:fd:63:86:24:17:08:6d:2a: 48:9a:3c:b6:92:e3:df:6b:d1:22:cf:35:e0:58:6a: dd:10:c3:e5:4d:f9:a9:cb:a5:11:a4:ab:bf:4e:4b: 9b:97:b8:6b:5d:f7:ff:a9:3b:60:d1:95:99:00:75: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:49:EE:35:0A:FC:90:D9:72:4E:5F:29:4C:D2:80:AD:C5:29:34:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:49:f0:4f:13:fc:be:d4:39:6c:2c:09:03:b5:66:8b:40:c9: b1:9e:ae:64:d4:1c:04:5f:78:56:63:44:5d:95:5a:8f:67:63: eb:66:e9:41:4d:af:0f:8b:32:23:17:3c:ed:a2:ca:fe:69:ad: 47:e1:30:1e:69:c7:6e:1d:80:5d:1a:5d:80:7d:6d:b7:12:8f: 95:fd:4c:a0:04:a0:3e:ce:48:66:28:73:99:63:16:8b:08:52: 34:cf:9a:49:64:9c:e4:62:35:d2:c6:ce:7b:e6:68:90:b2:35: 74:39:77:90:9e:e8:1e:f4:ef:c9:28:93:98:94:71:33:90:d6: 32:a6:c2:ac:1b:09:f4:4a:8a:23:86:3c:0f:42:fd:a0:08:ae: 8a:79:32:48:92:ca:10:bd:80:98:08:28:eb:d4:d8:eb:04:b3: 2e:10:83:13:05:12:9d:4b:27:44:23:62:5d:98:e6:d1:7f:29: 96:0b:c4:bf:eb:66:bd:dc:d8:4e:1e:67:74:8c:34:93:71:73: 2c:fa:a5:4b:66:e9:ff:e0:ee:6d:4e:c1:db:89:a1:f4:22:94: d5:31:49:7a:21:5e:27:73:90:7f:b2:04:08:d9:d6:8b:86:71: 3c:95:02:7f:e0:0b:cc:0d:57:7f:47:99:6c:cd:4f:88:b2:a2: e7:46:d5:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTtK3e3zyXc9/vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk OTUwYWM4NzUtNGQ2MC00MjU5LWIxYjEtMGJlNjk0MzgyMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifccaVcCt57NzGzMpuIabMb5qLTjxBciBo8F u3PA7cWJ/EBEwpTU8M6V7+FCu64rzRqe/byP0XTr16Hsj/l3eP32XrdBrFbDG7IG aTMWhU4E/HaDfqi6OjCiDdOBXzQRuRzo24jaDZc+VyNZZhyZUoNN7pSC8x9npv6F 9UKx+ke9O03Noy4qOb8MQosN8s5Sqw3TuxvOtTY1a1UYE42CuAKgQBjMhXU+HH7Y iLFZnliLcCRmUMuwLLJbogoT7gD+mMGiR18L15fj/WOGJBcIbSpImjy2kuPfa9Ei zzXgWGrdEMPlTfmpy6URpKu/Tkubl7hrXff/qTtg0ZWZAHXRYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJJ7jUK/JDZck5fKUzSgK3FKTT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTA1ZTBkYzQtMTNlZC0z ZTE2LWFjNjMtMzAzODZlNTAwNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdJ8E8T/L7UOWwsCQO1ZotAybGermTUHARfeFZjRF2VWo9nY+tm6UFN rw+LMiMXPO2iyv5prUfhMB5px24dgF0aXYB9bbcSj5X9TKAEoD7OSGYoc5ljFosI UjTPmklknORiNdLGznvmaJCyNXQ5d5Ce6B7078kok5iUcTOQ1jKmwqwbCfRKiiOG PA9C/aAIrop5MkiSyhC9gJgIKOvU2OsEsy4QgxMFEp1LJ0QjYl2Y5tF/KZYLxL/r Zr3c2E4eZ3SMNJNxcyz6pUtm6f/g7m1OwduJofQilNUxSXohXidzkH+yBAjZ1ouG cTyVAn/gC8wNV39HmWzNT4iyoudG1fc= -----END CERTIFICATE-----Generated at Sat Jun 13 21:13:36 2026 by rpki-client