$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f61c1d7f-3168-3996-b1de-00a9fefd901d.roa File: f61c1d7f-3168-3996-b1de-00a9fefd901d.roa (raw, json) Hash identifier: lyjSJ5+W5rwM5pss6dpd9B+f0UCkmVvwjBkWPbNZH7o= Subject key identifier: C5:71:61:C9:4C:91:2B:10:C9:98:12:A7:99:54:0D:13:03:19:49:6D Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F27F25A12A223054734683080 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f61c1d7f-3168-3996-b1de-00a9fefd901d.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 153.33.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:5a:12:a2:23:05:47:34:68:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=56e151e0-a78a-4a00-a372-6915e20916f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:f9:df:d2:d4:82:0f:c9:24:47:f0:d9:0d: 08:a8:8d:1f:d7:c6:ae:c7:88:7b:06:54:5f:79:62: 53:9b:35:eb:a6:c4:95:0f:a0:48:75:bc:b5:87:4b: d6:21:26:fa:fc:f2:64:e4:1e:3e:c8:9e:fa:4f:ac: f9:6a:9a:cc:8b:d1:b5:93:6c:d1:64:09:bd:45:ba: 96:59:0c:b0:82:39:f8:24:74:e1:9e:51:8f:22:99: 6c:83:1b:6b:50:c1:da:f1:ef:4c:dd:fe:a2:bb:b2: aa:5a:e4:9f:b1:48:f7:5d:b1:d6:d8:5d:e2:28:87: 07:7b:8c:cd:63:eb:c2:ae:30:23:75:a4:78:d1:60: af:36:9d:16:d5:6a:dc:be:bb:70:e1:4a:29:93:d6: 37:c8:b0:fc:23:82:4c:bd:6f:ad:2f:bb:e4:53:1f: 14:60:03:fe:6c:ab:ad:69:fe:a4:02:36:d2:1a:b3: 02:a1:f9:b1:71:89:3e:8d:fa:72:04:b6:dd:43:ee: e3:b4:ef:1c:e4:aa:9a:51:16:36:c7:b6:be:58:0b: 2f:44:c8:a9:4a:8d:ec:c6:07:0b:d0:6e:a7:97:24: 05:70:e5:ec:cc:fd:ad:99:dd:ae:39:03:b4:74:a9: 5e:71:1e:31:ab:db:83:61:77:f5:d9:d3:a4:e0:06: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:71:61:C9:4C:91:2B:10:C9:98:12:A7:99:54:0D:13:03:19:49:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f61c1d7f-3168-3996-b1de-00a9fefd901d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:96:8a:4f:e3:9d:32:68:6b:66:db:cf:16:a9:a7:e5:9d:47: 86:4c:64:11:b9:3b:40:92:18:ae:aa:a5:ac:e8:d7:0f:72:ee: 58:2a:90:d6:4f:6e:e8:97:10:ca:04:f1:ef:a5:09:fa:2b:17: cf:e5:6e:e2:c2:82:12:12:9f:4e:49:82:77:ae:40:b6:85:b7: d1:69:51:f6:30:68:46:7b:84:62:cd:68:bd:9d:9a:12:c7:67: 6b:42:7d:91:8c:88:5e:66:b0:36:84:26:87:fb:63:b7:9c:54: b7:60:7f:76:17:81:77:91:1d:b6:8a:b1:7c:4e:1e:31:d8:21: e9:68:c0:51:91:02:dd:88:49:68:c9:7f:2b:2f:7b:89:e5:fb: 34:b3:70:5a:3f:14:0b:6b:37:18:95:5d:63:a0:a0:54:52:ae: 48:c0:94:91:22:3c:ee:cb:60:bf:2f:bb:47:db:7d:15:66:f3: 73:99:1e:ff:4c:75:82:b1:14:75:c4:75:7b:23:c1:86:37:a8: a3:1b:6a:1e:89:8e:ff:da:27:9e:d2:8f:55:3e:f0:61:9f:ac: f7:49:11:93:28:a0:e9:9d:95:19:ea:15:c8:fa:06:88:78:55: 4d:8e:e1:60:74:88:91:57:97:c0:43:e4:ff:c8:be:ee:79:2b: ed:b4:6e:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8loSoiMFRzRoMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk NTZlMTUxZTAtYTc4YS00YTAwLWEzNzItNjkxNWUyMDkxNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAr539LUgg/JJEfw2Q0IqI0f18aux4h7BlRf eWJTmzXrpsSVD6BIdby1h0vWISb6/PJk5B4+yJ76T6z5aprMi9G1k2zRZAm9RbqW WQywgjn4JHThnlGPIplsgxtrUMHa8e9M3f6iu7KqWuSfsUj3XbHW2F3iKIcHe4zN Y+vCrjAjdaR40WCvNp0W1Wrcvrtw4Uopk9Y3yLD8I4JMvW+tL7vkUx8UYAP+bKut af6kAjbSGrMCofmxcYk+jfpyBLbdQ+7jtO8c5KqaURY2x7a+WAsvRMipSo3sxgcL 0G6nlyQFcOXszP2tmd2uOQO0dKlecR4xq9uDYXf12dOk4Abo+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVxYclMkSsQyZgSp5lUDRMDGUltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjYxYzFkN2YtMzE2OC0z OTk2LWIxZGUtMDBhOWZlZmQ5MDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWWik/jnTJoa2bbzxapp+WdR4ZMZBG5O0CSGK6qpazo1w9y7lgqkNZP buiXEMoE8e+lCforF8/lbuLCghISn05JgneuQLaFt9FpUfYwaEZ7hGLNaL2dmhLH Z2tCfZGMiF5msDaEJof7Y7ecVLdgf3YXgXeRHbaKsXxOHjHYIelowFGRAt2ISWjJ fysve4nl+zSzcFo/FAtrNxiVXWOgoFRSrkjAlJEiPO7LYL8vu0fbfRVm83OZHv9M dYKxFHXEdXsjwYY3qKMbah6Jjv/aJ57Sj1U+8GGfrPdJEZMooOmdlRnqFcj6Boh4 VU2O4WB0iJFXl8BD5P/Ivu55K+20bu0= -----END CERTIFICATE-----Generated at Sat Sep 26 07:06:06 2026 by rpki-client