$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2664e5ab-ba76-3978-ac64-78949c5e0faa.roa File: 2664e5ab-ba76-3978-ac64-78949c5e0faa.roa (raw, json) Hash identifier: xs/zF8z9St0VydzoT6XGmadyjtlPTQihNjjw6e39k+U= Subject key identifier: A7:49:A0:4C:BC:6B:A5:8B:7B:E6:61:1C:44:27:08:3E:38:C4:0C:09 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B71B5F9531821CE76D5EDB3C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2664e5ab-ba76-3978-ac64-78949c5e0faa.roa Signing time: Tue 07 Oct 2025 16:00:42 +0000 ROA not before: Tue 07 Oct 2025 16:00:42 +0000 ROA not after: Mon 05 Jan 2026 17:00:42 +0000 asID: 23473 IP address blocks: 153.33.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:b5:f9:53:18:21:ce:76:d5:ed:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 7 16:00:42 2025 GMT Not After : Jan 5 17:00:42 2026 GMT Subject: CN=f64d4e66-d6e1-4cdf-86bd-dfb4067df563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:c0:cb:22:63:88:fe:24:3f:97:2a:86:8c: c3:42:b6:b4:65:83:13:8d:ca:e5:e6:ac:1f:a2:a2: 19:ba:70:ba:13:92:10:d5:e9:42:35:90:1b:4b:bd: 23:d5:26:7f:84:ff:27:ba:a7:b1:6c:f6:8c:f6:0b: a4:4f:d9:06:bf:ad:44:42:71:30:59:48:1a:6d:b4: 6d:a1:ce:b2:88:6e:ce:71:88:64:8e:8a:21:06:a5: 72:c8:26:ae:e1:b8:a2:8a:9a:c5:e9:d4:68:5f:62: 43:4f:2f:85:df:f3:f0:49:21:5a:65:c2:52:1f:b2: 49:6c:0b:c3:f8:a3:16:ba:a8:56:e9:7d:3a:25:df: 2f:7b:32:74:0f:3b:cc:f4:2a:a1:f5:e6:eb:15:f1: 69:18:2f:f0:6d:0a:71:88:ad:36:0f:a1:fd:23:b8: da:ec:ca:90:36:c1:eb:9d:24:7f:9d:ce:5f:c0:4d: 37:28:ed:27:fd:34:c2:14:07:21:89:16:e4:c0:b2: 6b:08:f1:0d:04:b2:51:c7:c3:2d:74:43:04:68:2f: b5:b7:25:7a:96:86:63:b9:4e:e1:32:27:b4:8f:63: 25:c2:9f:11:f9:9f:d7:67:84:c7:f5:5e:e0:e9:47: b7:8d:fb:e8:d0:28:4b:10:35:cb:c4:74:36:1e:30: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:49:A0:4C:BC:6B:A5:8B:7B:E6:61:1C:44:27:08:3E:38:C4:0C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2664e5ab-ba76-3978-ac64-78949c5e0faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:82:e7:05:e7:47:b1:2e:7e:d7:f3:f0:8c:34:54:db:33:48: 49:84:a7:7a:ef:bf:44:0c:a6:61:43:0f:fe:df:20:f7:a9:71: ba:39:30:39:ca:36:a0:4a:d2:7c:2c:26:d3:6d:05:c8:af:37: d5:c6:ce:b4:17:19:bb:1b:e0:dc:71:69:fa:79:2c:e0:26:56: 45:94:3d:e3:3a:d7:8b:13:7c:59:01:0e:4b:4c:24:e4:c4:79: ab:91:5d:6b:00:45:65:a5:29:d6:a0:a1:c8:a0:40:71:f3:81: 38:b5:40:c4:10:5e:d7:04:2a:dd:5f:9b:b2:61:a6:9e:79:02: 6a:ca:2e:76:45:d4:8a:80:28:e8:72:ae:e8:fe:80:fc:a8:ef: 6a:84:fb:1d:47:79:12:f3:f3:80:70:64:e4:1d:da:b9:ce:91: 81:b9:a1:33:d7:5d:4f:a3:27:78:12:1f:75:62:42:c6:3e:84: a7:b1:a7:b9:fd:d0:b1:3b:ba:c4:bd:8e:91:51:d6:96:fc:18: 8e:6c:77:27:55:56:9f:68:1e:f2:70:68:f9:88:c9:3b:a7:7c: 94:a6:91:77:5c:b3:4e:c8:1e:48:2d:4f:7d:9a:1c:cb:c3:17: c4:06:a0:a9:bd:0a:3f:67:ab:98:d6:54:59:40:0e:4c:c5:09: de:78:a4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxtflTGCHOdtXts8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwNzE2MDA0MloXDTI2MDEwNTE3MDA0MlowLzEtMCsGA1UEAxMk ZjY0ZDRlNjYtZDZlMS00Y2RmLTg2YmQtZGZiNDA2N2RmNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpDAyyJjiP4kP5cqhozDQra0ZYMTjcrl5qwf oqIZunC6E5IQ1elCNZAbS70j1SZ/hP8nuqexbPaM9gukT9kGv61EQnEwWUgabbRt oc6yiG7OcYhkjoohBqVyyCau4biiiprF6dRoX2JDTy+F3/PwSSFaZcJSH7JJbAvD +KMWuqhW6X06Jd8vezJ0DzvM9Cqh9ebrFfFpGC/wbQpxiK02D6H9I7ja7MqQNsHr nSR/nc5fwE03KO0n/TTCFAchiRbkwLJrCPENBLJRx8MtdEMEaC+1tyV6loZjuU7h Mie0j2Mlwp8R+Z/XZ4TH9V7g6Ue3jfvo0ChLEDXLxHQ2HjA2/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdJoEy8a6WLe+ZhHEQnCD44xAwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjY2NGU1YWItYmE3Ni0z OTc4LWFjNjQtNzg5NDljNWUwZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKC5wXnR7Euftfz8Iw0VNszSEmEp3rvv0QMpmFDD/7fIPepcbo5MDnK NqBK0nwsJtNtBcivN9XGzrQXGbsb4Nxxafp5LOAmVkWUPeM614sTfFkBDktMJOTE eauRXWsARWWlKdagocigQHHzgTi1QMQQXtcEKt1fm7Jhpp55AmrKLnZF1IqAKOhy ruj+gPyo72qE+x1HeRLz84BwZOQd2rnOkYG5oTPXXU+jJ3gSH3ViQsY+hKexp7n9 0LE7usS9jpFR1pb8GI5sdydVVp9oHvJwaPmIyTunfJSmkXdcs07IHkgtT32aHMvD F8QGoKm9Cj9nq5jWVFlADkzFCd54pAk= -----END CERTIFICATE-----Generated at Fri Oct 10 03:50:42 2025 by rpki-client