$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af5f0916-1baa-3f0f-b5af-c1f20106f7da.roa File: af5f0916-1baa-3f0f-b5af-c1f20106f7da.roa (raw, json) Hash identifier: cSA64FkTxNXd+vFQxa+92avs3zg07fPdxeg5zMduiP8= Subject key identifier: F2:3F:0D:CF:02:F6:B0:70:1A:43:F2:D8:EA:11:76:ED:5B:B4:5E:2A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584E0700837A2A1BCDC9C7F7E100 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af5f0916-1baa-3f0f-b5af-c1f20106f7da.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 23473 IP address blocks: 153.33.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:83:7a:2a:1b:cd:c9:c7:f7:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=7f1606d5-5d2f-4295-bee1-2eabf6e7086b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:93:91:34:59:8e:74:e6:1d:1c:25:dd:3e:0d: d3:56:f0:26:04:a9:f9:95:42:ed:88:64:68:77:23: 38:cb:26:65:02:74:9f:7c:51:69:79:a7:ab:9d:28: f9:b4:98:37:b2:f1:52:47:9f:2e:32:52:90:d5:44: af:26:a7:2a:eb:e6:f5:30:b2:3a:e0:06:87:5a:48: 10:83:a4:99:ae:f0:cf:6a:47:33:e1:81:46:45:c9: 76:7b:b1:ff:2e:89:58:b1:72:de:99:9f:12:bf:d0: 75:3e:15:1f:2a:8c:8d:7a:b0:35:54:ad:37:d5:48: 0c:08:c1:bb:84:41:63:48:38:26:81:41:3f:40:f1: 76:6a:ec:ea:58:22:30:d0:c9:7d:ee:40:e8:79:c7: f3:f9:b5:bd:fc:da:7c:e5:08:08:bf:81:94:1d:ef: cc:0a:21:2e:6a:f8:56:c6:3d:cb:02:27:a6:8d:f9: 5f:8a:d3:08:4a:7b:e0:e6:b2:05:8d:42:2f:7b:3e: 8d:52:83:2d:29:3d:bb:22:4f:dd:04:46:e6:88:0d: cb:f7:d9:4a:95:91:a6:42:9a:03:5f:fd:fc:3f:69: 55:11:bc:ce:25:5b:b3:37:16:bf:b9:7f:a3:3b:61: 95:46:d3:55:53:4b:67:3d:af:ab:69:cc:d1:07:12: 91:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3F:0D:CF:02:F6:B0:70:1A:43:F2:D8:EA:11:76:ED:5B:B4:5E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af5f0916-1baa-3f0f-b5af-c1f20106f7da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f9:11:45:15:03:72:81:87:8f:19:e1:2f:4a:61:25:e8:24: b4:c7:69:de:fe:b2:37:90:97:11:1c:53:e2:7d:f7:af:89:37: df:3f:41:8f:b4:60:bd:c8:88:f6:2f:a9:e3:43:4d:77:90:dc: ad:f9:40:2f:2a:f1:fb:11:12:a9:eb:f8:a2:cc:b5:2b:26:81: a7:d4:5a:4c:ce:9c:ff:f6:45:7f:6e:ab:98:81:97:f5:0d:ba: 1a:0c:f6:34:ec:50:d6:9b:4c:9a:57:c1:52:e5:f3:e9:41:28: 97:99:ff:87:ae:18:a5:7e:76:39:12:0c:48:94:f0:bc:2a:63: 18:46:9c:41:0c:20:36:84:49:ef:15:39:f0:de:d0:d9:01:45: 2d:7a:90:3d:fa:69:d9:32:22:65:8b:72:94:a6:4d:72:ae:3c: 0b:18:4d:9b:01:04:c4:c4:f3:51:d3:19:08:1a:69:ae:83:e6: a7:0b:80:ac:37:f1:5e:af:54:69:34:80:35:28:2c:0f:cb:e3: 2c:c0:a1:eb:a6:69:e6:59:f2:72:ab:54:78:5d:32:52:12:46: 17:cf:52:fe:29:79:e7:01:4f:a1:b6:03:46:75:10:f7:d8:18: e0:78:ac:01:1f:c4:f4:5a:07:b3:cb:ac:c7:77:c4:e5:59:fe: e7:4f:5d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAIN6KhvNycf34QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk N2YxNjA2ZDUtNWQyZi00Mjk1LWJlZTEtMmVhYmY2ZTcwODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5ORNFmOdOYdHCXdPg3TVvAmBKn5lULtiGRo dyM4yyZlAnSffFFpeaernSj5tJg3svFSR58uMlKQ1USvJqcq6+b1MLI64AaHWkgQ g6SZrvDPakcz4YFGRcl2e7H/LolYsXLemZ8Sv9B1PhUfKoyNerA1VK031UgMCMG7 hEFjSDgmgUE/QPF2auzqWCIw0Ml97kDoecfz+bW9/Np85QgIv4GUHe/MCiEuavhW xj3LAiemjflfitMISnvg5rIFjUIvez6NUoMtKT27Ik/dBEbmiA3L99lKlZGmQpoD X/38P2lVEbzOJVuzNxa/uX+jO2GVRtNVU0tnPa+raczRBxKRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI/Dc8C9rBwGkPy2OoRdu1btF4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWY1ZjA5MTYtMWJhYS0z ZjBmLWI1YWYtYzFmMjAxMDZmN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/5EUUVA3KBh48Z4S9KYSXoJLTHad7+sjeQlxEcU+J996+JN98/QY+0 YL3IiPYvqeNDTXeQ3K35QC8q8fsREqnr+KLMtSsmgafUWkzOnP/2RX9uq5iBl/UN uhoM9jTsUNabTJpXwVLl8+lBKJeZ/4euGKV+djkSDEiU8LwqYxhGnEEMIDaESe8V OfDe0NkBRS16kD36adkyImWLcpSmTXKuPAsYTZsBBMTE81HTGQgaaa6D5qcLgKw3 8V6vVGk0gDUoLA/L4yzAoeumaeZZ8nKrVHhdMlISRhfPUv4peecBT6G2A0Z1EPfY GOB4rAEfxPRaB7PLrMd3xOVZ/udPXaU= -----END CERTIFICATE-----Generated at Sat Jun 13 16:04:45 2026 by rpki-client