$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bd46a278-0f4e-3ec9-80d5-10e8249fbf3b.roa File: bd46a278-0f4e-3ec9-80d5-10e8249fbf3b.roa (raw, json) Hash identifier: uXTLQswdkJPEbROrpbDVes1KRn4TZ6YTe9VpuQQAclM= Subject key identifier: 55:99:2A:D4:BC:92:88:17:CA:E1:D6:B2:CA:43:FA:E4:B6:20:F6:F8 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D4D27D206609307F4D9C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bd46a278-0f4e-3ec9-80d5-10e8249fbf3b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4d:27:d2:06:60:93:07:f4:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a0edac34-011f-4c84-b8f4-0d983c08cdd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:06:7c:57:18:c2:46:26:e8:48:97:a2:5d:cd: 9a:7f:df:3f:38:df:6d:51:a5:73:10:0e:94:86:4e: d2:82:12:9f:ef:96:41:97:8a:ec:72:c5:53:bd:85: a6:fd:b8:7d:8e:84:a6:84:55:5c:b3:8f:11:25:e3: 07:f3:ca:a2:b3:80:76:9d:10:ae:3e:18:f1:75:a4: 75:44:39:bf:ee:44:0c:09:92:05:39:d0:d6:06:0d: ac:08:fb:b5:6b:a1:da:e0:04:e0:e0:f6:c8:41:57: f4:2a:d4:dd:18:53:51:ab:56:f4:d3:ef:38:d5:e1: 4b:e8:4f:92:29:75:9b:2b:0d:e6:dd:f9:70:aa:cb: eb:57:49:98:35:95:f8:63:10:a4:0c:55:bb:78:b7: 04:51:ac:06:10:13:e6:ac:c5:71:fc:b8:78:94:e6: c7:8e:d7:70:9e:40:b6:73:cd:e9:c6:25:68:77:b6: 28:b2:8b:fc:3a:68:4e:66:24:df:0e:24:05:29:30: 85:87:99:b9:ba:11:74:00:d5:3b:c8:98:b3:f5:3a: a8:55:0a:c8:68:92:72:1a:0f:80:48:82:e1:4c:fa: 52:a8:29:f9:bd:53:ea:ae:1a:32:6f:be:d0:36:a7: 85:2d:26:73:96:96:a4:1c:5d:e2:7e:a6:6b:05:fa: c1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:99:2A:D4:BC:92:88:17:CA:E1:D6:B2:CA:43:FA:E4:B6:20:F6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bd46a278-0f4e-3ec9-80d5-10e8249fbf3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:dd:cb:e8:7f:8a:67:36:3b:b3:c2:f7:5d:58:41:60:97:db: b0:f7:06:ef:7b:fd:ab:19:9d:42:73:a2:63:a0:bd:3c:b6:f7: ac:fb:53:64:38:ed:84:4b:cb:e3:2d:17:e1:4e:e5:07:04:79: 20:df:3a:30:cc:1a:7b:f6:04:f6:a7:97:36:a4:d7:ea:ed:51: 88:41:26:cb:4d:ab:ac:2b:00:c9:f4:27:e7:ef:8b:7d:ad:8f: 05:3f:e2:4d:99:74:a2:77:27:30:25:ff:7d:74:17:4b:75:7f: 25:9a:02:c0:b4:f9:d7:a1:73:f7:4a:34:a7:82:f5:10:87:49: 4f:47:a6:83:63:86:8c:52:32:c1:93:98:ed:38:f8:86:7d:d0: ea:ef:b1:41:46:28:32:88:6c:f9:de:e4:7a:7f:bf:6d:87:49: a6:d2:28:1a:59:d9:69:6a:f6:30:ee:aa:5b:68:20:a2:10:d2: df:1a:63:4f:6a:f5:70:05:d0:d9:82:10:b7:62:fe:a1:d4:6f: 55:ab:05:1a:11:61:20:a3:c9:57:3b:73:16:12:c0:5d:88:d0: be:30:f8:ef:0b:72:bc:7a:c4:8c:83:b6:71:a6:69:7b:66:b9: 3c:78:a6:ed:2c:c7:94:29:72:0c:92:6d:7a:b5:bd:05:3e:cc: 00:44:6c:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPU0n0gZgkwf02cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTBlZGFjMzQtMDExZi00Yzg0LWI4ZjQtMGQ5ODNjMDhjZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAZ8VxjCRiboSJeiXc2af98/ON9tUaVzEA6U hk7SghKf75ZBl4rscsVTvYWm/bh9joSmhFVcs48RJeMH88qis4B2nRCuPhjxdaR1 RDm/7kQMCZIFOdDWBg2sCPu1a6Ha4ATg4PbIQVf0KtTdGFNRq1b00+841eFL6E+S KXWbKw3m3flwqsvrV0mYNZX4YxCkDFW7eLcEUawGEBPmrMVx/Lh4lObHjtdwnkC2 c83pxiVod7Yosov8OmhOZiTfDiQFKTCFh5m5uhF0ANU7yJiz9TqoVQrIaJJyGg+A SILhTPpSqCn5vVPqrhoyb77QNqeFLSZzlpakHF3ifqZrBfrBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWZKtS8kogXyuHWsspD+uS2IPb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmQ0NmEyNzgtMGY0ZS0z ZWM5LTgwZDUtMTBlODI0OWZiZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7dy+h/imc2O7PC911YQWCX27D3Bu97/asZnUJzomOgvTy296z7U2Q4 7YRLy+MtF+FO5QcEeSDfOjDMGnv2BPanlzak1+rtUYhBJstNq6wrAMn0J+fvi32t jwU/4k2ZdKJ3JzAl/310F0t1fyWaAsC0+dehc/dKNKeC9RCHSU9HpoNjhoxSMsGT mO04+IZ90OrvsUFGKDKIbPne5Hp/v22HSabSKBpZ2Wlq9jDuqltoIKIQ0t8aY09q 9XAF0NmCELdi/qHUb1WrBRoRYSCjyVc7cxYSwF2I0L4w+O8Lcrx6xIyDtnGmaXtm uTx4pu0sx5QpcgySbXq1vQU+zABEbJY= -----END CERTIFICATE-----Generated at Sat Sep 26 11:03:46 2026 by rpki-client