$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/153865f9-f37c-3fd0-9bbe-09fa4b966381.roa File: 153865f9-f37c-3fd0-9bbe-09fa4b966381.roa (raw, json) Hash identifier: aI5pSpZC6yL7kB6TRdA2sYda0849fYs3SfdWhJkJQSI= Subject key identifier: 3A:B5:48:BD:86:D9:26:22:6C:F8:85:53:8E:70:4A:61:08:B4:C4:82 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B4616F98D7FED0C046C3A0B20 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/153865f9-f37c-3fd0-9bbe-09fa4b966381.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 23473 IP address blocks: 66.253.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:f9:8d:7f:ed:0c:04:6c:3a:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=b2d97a1f-207a-4c4d-ab42-74466fcf6e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:5e:a3:b8:d0:d9:4e:6e:c2:8e:04:83:f4: 54:9e:c6:d4:07:1a:ff:43:d3:96:e2:29:a7:c9:51: c8:b5:7a:fe:96:47:13:eb:8a:6a:e0:a1:fb:ff:02: 54:6b:aa:19:48:93:84:77:cf:ba:e5:d9:8e:9f:fa: 21:8d:dc:42:d3:42:d7:9e:d0:00:6b:2b:88:3b:62: 5c:6f:b7:35:29:65:29:74:f0:0f:84:c7:7e:36:55: 41:cc:3d:f5:0b:84:02:f5:2e:fd:b2:12:b6:5a:ec: fa:2d:64:60:64:63:bd:18:dd:4d:89:fe:e4:d7:7f: 99:17:ff:57:06:c3:db:d7:ad:bd:0b:a2:d8:bf:2c: 75:73:94:ab:91:31:98:0c:99:49:e4:5e:23:23:64: 70:21:c8:67:f1:ff:44:cf:34:91:6d:2d:ff:f2:06: fc:95:6c:46:24:f7:50:f8:89:21:5e:95:18:81:b9: 58:50:e9:76:60:a6:7a:3f:cb:9d:4c:4b:c8:21:88: 9f:24:02:dd:0e:17:9f:0f:6b:13:82:3c:be:ba:e3: cc:8d:45:4c:60:f5:8b:61:6c:6b:83:47:1d:f1:3a: 46:53:f7:2c:31:ab:ce:54:89:b9:4e:a4:a5:07:38: 28:45:c7:b3:64:bf:e4:f0:21:21:51:d3:8e:a0:ee: 66:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:48:BD:86:D9:26:22:6C:F8:85:53:8E:70:4A:61:08:B4:C4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/153865f9-f37c-3fd0-9bbe-09fa4b966381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b9:91:9d:5a:29:a0:c2:cb:79:20:08:5f:0c:b4:d5:87:80: 43:d2:28:f7:aa:8b:c5:ea:72:9a:7b:e6:65:20:db:f6:4a:3c: f9:fc:d5:bd:7e:1d:2c:24:98:f2:a4:74:39:46:84:0b:84:f8: 0e:28:7f:e1:c8:98:54:d9:87:17:29:5f:99:c6:c2:82:31:f2: 3e:1c:4c:f3:15:67:b3:e4:e6:24:9b:a0:fb:a9:84:74:c9:1d: f0:2f:f3:f8:09:0d:70:96:d2:58:82:fe:32:78:c3:53:bf:8f: 6f:38:ab:1d:33:72:46:c2:49:ff:67:d3:8f:d0:98:42:71:45: 8f:ab:7e:9a:a1:d1:e0:d6:31:d3:9b:b0:bb:64:02:ec:5b:5e: 64:59:8f:d9:ff:21:88:5d:a4:42:a6:41:c4:0e:07:37:f9:6e: 62:5f:b5:7d:12:e7:60:3b:1f:49:cb:c2:15:8e:3c:9d:08:6d: bf:db:16:7f:36:7f:fb:24:0f:46:60:bf:3b:4f:c7:d7:39:74: e2:95:9e:ac:b5:11:c6:b0:f6:e4:7a:d8:44:b0:42:0e:16:38: 4b:3d:03:2a:78:33:90:9a:61:39:ec:4d:6c:a3:1f:f7:77:7a: f5:f7:ae:15:15:84:21:dd:4c:3b:4b:69:f3:0a:51:a7:9f:a0: b4:91:2f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFvmNf+0MBGw6CyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk YjJkOTdhMWYtMjA3YS00YzRkLWFiNDItNzQ0NjZmY2Y2ZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYBeo7jQ2U5uwo4Eg/RUnsbUBxr/Q9OW4imn yVHItXr+lkcT64pq4KH7/wJUa6oZSJOEd8+65dmOn/ohjdxC00LXntAAayuIO2Jc b7c1KWUpdPAPhMd+NlVBzD31C4QC9S79shK2Wuz6LWRgZGO9GN1Nif7k13+ZF/9X BsPb1629C6LYvyx1c5SrkTGYDJlJ5F4jI2RwIchn8f9EzzSRbS3/8gb8lWxGJPdQ +IkhXpUYgblYUOl2YKZ6P8udTEvIIYifJALdDhefD2sTgjy+uuPMjUVMYPWLYWxr g0cd8TpGU/csMavOVIm5TqSlBzgoRcezZL/k8CEhUdOOoO5mKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq1SL2G2SYibPiFU45wSmEItMSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTUzODY1ZjktZjM3Yy0z ZmQwLTliYmUtMDlmYTRiOTY2MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQv3yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe5kZ1aKaDCy3kgCF8MtNWHgEPSKPeqi8Xqcpp75mUg2/ZKPPn81b1+ HSwkmPKkdDlGhAuE+A4of+HImFTZhxcpX5nGwoIx8j4cTPMVZ7Pk5iSboPuphHTJ HfAv8/gJDXCW0liC/jJ4w1O/j284qx0zckbCSf9n04/QmEJxRY+rfpqh0eDWMdOb sLtkAuxbXmRZj9n/IYhdpEKmQcQOBzf5bmJftX0S52A7H0nLwhWOPJ0Ibb/bFn82 f/skD0ZgvztPx9c5dOKVnqy1Ecaw9uR62ESwQg4WOEs9Ayp4M5CaYTnsTWyjH/d3 evX3rhUVhCHdTDtLafMKUaefoLSRL08= -----END CERTIFICATE-----Generated at Fri Oct 10 03:52:12 2025 by rpki-client