$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa File: dba58025-2a8f-3dfd-87db-07fd507151e0.roa (raw, json) Hash identifier: xeN3K4gePL+eTj+6ckrMfkLS7PdWh8L5/B/TXNn/9+8= Subject key identifier: 00:B7:97:11:E2:EB:AB:07:D7:FA:8F:28:FE:E6:08:27:5F:4D:C2:C7 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4C3D50A058C3D6AE0F102480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 23473 IP address blocks: 153.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:50:a0:58:c3:d6:ae:0f:10:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=edcb817e-b481-4993-b572-a681b6f44c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dd:33:8f:57:66:57:71:41:c1:ac:10:72:f4: 6d:e1:8f:2d:50:73:96:a2:14:0d:de:f9:ed:52:6b: 00:dd:bf:a3:d2:88:da:c7:4b:ba:71:72:a5:a6:52: 72:b3:bc:f4:fe:c3:44:0d:c6:85:1b:07:a2:fc:c5: f1:9f:f6:19:03:fe:da:40:02:65:c4:77:61:fd:f7: 67:ac:1d:2c:d8:6b:0f:ce:05:71:01:29:83:db:e0: cd:c8:63:d2:05:14:bf:41:6a:a6:22:23:60:10:26: 12:bd:4d:8e:d8:c0:e3:af:39:cf:eb:31:84:0a:67: 8a:b8:c5:27:2e:20:13:a8:4d:3e:3b:90:2b:2d:a7: 5f:a3:75:f7:f5:c6:b1:ac:82:1c:ec:2a:f1:88:6f: 66:d5:5d:a5:21:ca:0f:09:97:a4:30:c8:3e:4a:b9: 71:11:7e:cf:dd:e2:a0:fc:e1:da:aa:d2:72:6d:89: ef:20:f7:b8:00:79:a6:57:5f:01:2e:60:bd:78:b3: ad:84:09:d0:f5:50:52:0f:6e:20:33:73:ec:b8:b0: 9d:cd:c1:44:4c:ed:b5:39:1d:7f:cd:c2:2b:ee:dd: 55:d6:c2:56:37:d4:ad:b6:44:19:75:e9:9e:b1:2d: 2b:57:56:26:31:ea:46:a3:ea:37:ef:3d:af:d8:52: f0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B7:97:11:E2:EB:AB:07:D7:FA:8F:28:FE:E6:08:27:5F:4D:C2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e5:a6:ba:e0:63:fe:71:f7:44:b3:0a:b4:7b:8a:09:40:4e: 9b:9f:35:ff:f2:b3:fc:ca:43:b3:ab:7a:59:c5:4f:aa:c4:84: a1:72:6b:5e:a8:37:44:f0:ed:70:c5:b4:63:8c:92:be:f7:88: d8:4c:c5:d0:86:72:f8:54:e1:11:ed:66:9e:a5:ae:b3:0b:4b: 3d:a4:e1:5a:54:6f:46:1f:a2:42:53:7a:9d:2c:41:df:04:82: a2:fc:b7:31:b8:e3:73:91:fa:1d:0f:e3:49:24:32:88:20:cb: 06:56:84:6e:ad:9c:54:2f:41:7a:7d:55:3c:8b:96:71:b2:23: d3:5b:91:fa:0b:29:fc:34:42:d8:e4:67:a2:6b:e4:d3:1c:95: 21:5a:97:21:92:5e:80:e6:91:42:78:22:20:12:27:09:6d:54: 0c:30:0b:e4:01:c9:b2:ff:f2:23:c8:6e:be:eb:a4:1f:fb:53: ec:cc:fe:ec:7e:7d:1e:e8:af:7b:f3:6b:53:dc:dc:4b:e2:49: 41:c2:51:72:ae:7a:8e:28:de:2d:b9:b0:8e:4b:04:21:94:00: 77:1d:30:91:e4:31:99:70:b7:52:68:9e:e0:68:c9:c3:d5:4f: 5f:10:c8:da:96:d8:01:9a:f8:a1:9b:d0:62:44:36:84:03:54: ca:81:42:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVCgWMPWrg8QJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWRjYjgxN2UtYjQ4MS00OTkzLWI1NzItYTY4MWI2ZjQ0YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg90zj1dmV3FBwawQcvRt4Y8tUHOWohQN3vnt UmsA3b+j0ojax0u6cXKlplJys7z0/sNEDcaFGwei/MXxn/YZA/7aQAJlxHdh/fdn rB0s2GsPzgVxASmD2+DNyGPSBRS/QWqmIiNgECYSvU2O2MDjrznP6zGECmeKuMUn LiATqE0+O5ArLadfo3X39caxrIIc7CrxiG9m1V2lIcoPCZekMMg+SrlxEX7P3eKg /OHaqtJybYnvIPe4AHmmV18BLmC9eLOthAnQ9VBSD24gM3PsuLCdzcFETO21OR1/ zcIr7t1V1sJWN9SttkQZdemesS0rV1YmMepGo+o37z2v2FLw+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC3lxHi66sH1/qPKP7mCCdfTcLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGJhNTgwMjUtMmE4Zi0z ZGZkLTg3ZGItMDdmZDUwNzE1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3lprrgY/5x90SzCrR7iglATpufNf/ys/zKQ7OrelnFT6rEhKFya16o N0Tw7XDFtGOMkr73iNhMxdCGcvhU4RHtZp6lrrMLSz2k4VpUb0YfokJTep0sQd8E gqL8tzG443OR+h0P40kkMoggywZWhG6tnFQvQXp9VTyLlnGyI9NbkfoLKfw0Qtjk Z6Jr5NMclSFalyGSXoDmkUJ4IiASJwltVAwwC+QBybL/8iPIbr7rpB/7U+zM/ux+ fR7or3vza1Pc3EviSUHCUXKueo4o3i25sI5LBCGUAHcdMJHkMZlwt1JonuBoycPV T18QyNqW2AGa+KGb0GJENoQDVMqBQn0= -----END CERTIFICATE-----Generated at Sat Sep 26 15:16:28 2026 by rpki-client