$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa File: a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa (raw, json) Hash identifier: /jqQ8gPfPRbxd4uA6oLqDwFs7v00nmJzhZ6yhqBciQA= Subject key identifier: 31:D0:CF:8F:2A:28:CA:B0:B5:B8:58:54:FC:F8:10:A9:E3:E1:B6:66 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F549D4CA2A1702F4C55B2EE80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4c:a2:a1:70:2f:4c:55:b2:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=bbd31041-ff7a-48c1-90f7-1924343f2d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:90:bf:65:b4:d0:0b:b5:3b:99:cd:af:7d: 69:52:14:c6:e2:db:17:f9:e2:92:0c:08:d5:20:f0: 86:6b:43:02:20:90:d5:68:97:03:fe:bd:4f:9e:2a: ba:c1:fb:31:03:33:21:ea:30:c0:65:11:13:0f:aa: 8c:c5:83:74:36:f7:08:be:bc:bb:f7:c9:1d:25:c0: c2:f2:06:23:21:18:3b:53:e0:d6:ff:e1:b2:89:74: 29:91:73:4d:10:af:57:c8:25:64:fe:71:ac:68:fc: 62:3a:bc:6d:6b:3a:72:46:ae:1c:71:f4:a8:44:2b: 5f:ae:a1:e5:4d:d2:5a:0b:7c:ad:8e:a3:7f:be:69: 8c:83:f6:bc:03:a0:f3:e1:2a:34:80:ba:9f:95:c7: d0:4b:b9:06:95:d9:1d:df:74:18:cb:a9:31:d9:e4: 92:85:c3:7f:d9:1b:2b:6c:3f:1d:99:72:4b:1e:73: 44:9e:0d:e2:ba:78:ec:46:89:8c:97:98:ea:69:07: b1:76:de:3b:2e:6a:2d:ee:c2:3a:29:9b:ca:6b:8d: 98:59:35:44:0b:fb:13:52:20:58:cc:d2:46:27:35: 47:ac:ea:0a:71:bc:39:52:47:f4:b8:95:b8:ae:17: 7f:9a:ba:c9:b3:c9:0e:56:0f:fd:d9:0a:e2:94:f0: 3a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D0:CF:8F:2A:28:CA:B0:B5:B8:58:54:FC:F8:10:A9:E3:E1:B6:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a05e0dc4-13ed-3e16-ac63-30386e5006e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c1:e5:db:73:2d:16:82:87:1a:3a:b7:6f:56:b4:41:3c:a5: 54:ce:51:4c:58:79:40:22:e1:13:07:0e:a8:4f:d9:ff:0c:70: 3b:05:2e:d0:ef:97:89:fb:aa:92:3a:20:85:61:e6:e1:2f:ba: 08:57:4e:1b:b5:da:41:6b:bb:09:a6:df:41:aa:53:c5:da:e3: 06:e1:57:d3:db:f6:af:70:6b:af:ff:01:d4:88:a4:46:01:93: 1a:08:52:80:54:61:0a:6e:95:1d:91:7c:6f:6d:ba:42:05:ef: 9a:68:ab:65:67:1b:37:2e:a4:3a:3d:25:11:27:98:fd:04:da: 6b:60:d9:4b:30:f0:20:2f:ef:c3:06:bc:d0:d7:61:88:23:07: 1a:3d:99:9b:8f:63:f1:c4:73:3e:a3:51:5e:e1:10:09:9b:66: 67:7c:d4:d7:52:88:95:ea:42:9b:91:4e:ad:d3:4b:31:b3:97: 27:f1:03:af:2e:3e:fa:e7:9b:e7:af:c0:88:4c:69:c2:bd:89: b1:fe:27:ed:72:f9:30:9f:48:85:19:4e:47:85:47:dd:21:57: 76:b2:0b:32:d3:07:64:3c:58:bc:f7:92:31:de:ad:54:21:b5: 74:63:0f:6e:96:57:e1:e2:cf:6e:29:0d:cf:48:0a:6a:b3:b5: b4:27:71:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUyioXAvTFWy7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YmJkMzEwNDEtZmY3YS00OGMxLTkwZjctMTkyNDM0M2YyZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+6Qv2W00Au1O5nNr31pUhTG4tsX+eKSDAjV IPCGa0MCIJDVaJcD/r1Pniq6wfsxAzMh6jDAZRETD6qMxYN0NvcIvry798kdJcDC 8gYjIRg7U+DW/+GyiXQpkXNNEK9XyCVk/nGsaPxiOrxtazpyRq4ccfSoRCtfrqHl TdJaC3ytjqN/vmmMg/a8A6Dz4So0gLqflcfQS7kGldkd33QYy6kx2eSShcN/2Rsr bD8dmXJLHnNEng3iunjsRomMl5jqaQexdt47Lmot7sI6KZvKa42YWTVEC/sTUiBY zNJGJzVHrOoKcbw5Ukf0uJW4rhd/mrrJs8kOVg/92QrilPA6eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHQz48qKMqwtbhYVPz4EKnj4bZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTA1ZTBkYzQtMTNlZC0z ZTE2LWFjNjMtMzAzODZlNTAwNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzB5dtzLRaChxo6t29WtEE8pVTOUUxYeUAi4RMHDqhP2f8McDsFLtDv l4n7qpI6IIVh5uEvughXThu12kFruwmm30GqU8Xa4wbhV9Pb9q9wa6//AdSIpEYB kxoIUoBUYQpulR2RfG9tukIF75poq2VnGzcupDo9JREnmP0E2mtg2Usw8CAv78MG vNDXYYgjBxo9mZuPY/HEcz6jUV7hEAmbZmd81NdSiJXqQpuRTq3TSzGzlyfxA68u Pvrnm+evwIhMacK9ibH+J+1y+TCfSIUZTkeFR90hV3ayCzLTB2Q8WLz3kjHerVQh tXRjD26WV+Hiz24pDc9ICmqztbQncQY= -----END CERTIFICATE-----Generated at Sun Oct 4 18:09:53 2026 by rpki-client