$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa File: 40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa (raw, json) Hash identifier: UWhCa/T6ErN4y5ocdKmi473xhZSfiqiCfEeAiEnatLI= Subject key identifier: C5:C4:31:88:34:A9:FD:DC:86:E1:44:38:92:26:A8:4C:48:05:7F:CE Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B66B0473E65F8703A19501CC0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa Signing time: Fri 03 Oct 2025 17:15:20 +0000 ROA not before: Fri 03 Oct 2025 17:15:20 +0000 ROA not after: Thu 01 Jan 2026 18:15:20 +0000 asID: 23473 IP address blocks: 153.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:b0:47:3e:65:f8:70:3a:19:50:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 3 17:15:20 2025 GMT Not After : Jan 1 18:15:20 2026 GMT Subject: CN=a33d3647-8d87-4504-8640-6f0d95991c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:b0:c0:a1:20:03:78:4e:2e:6f:75:30:9a: 6e:c7:c8:a4:ce:92:74:bb:0d:c8:63:12:10:b8:b8: bf:cd:84:fa:78:12:3d:74:33:e4:50:86:72:42:56: 29:92:fc:b1:b6:82:75:02:74:ce:96:23:60:58:38: c5:32:da:7c:8d:29:a0:cc:92:b3:55:72:4f:6e:1e: 8b:ba:58:a4:f0:a4:48:f7:7e:62:56:19:af:96:13: e7:e1:5b:73:46:ba:b3:b7:13:9f:01:22:08:69:f6: fc:53:e7:84:a4:6a:fc:9e:12:e4:91:30:3c:e2:87: 90:54:11:d0:46:a2:a3:57:77:af:d2:05:3a:2b:f9: ac:2a:80:4e:03:2d:4f:3c:7d:94:fb:bf:f0:4d:3e: 24:04:ba:dd:76:55:32:80:b9:9e:52:2c:2d:33:ed: 7c:2d:60:fa:b2:cc:19:2c:cb:ca:12:34:93:f3:11: fc:89:35:dd:9c:f8:5f:5c:cb:c9:01:c5:c6:5b:dd: ed:78:66:d0:e9:ce:c5:bb:a6:86:40:65:59:17:45: e8:94:2e:d3:bd:5e:79:e5:3f:24:29:fe:0a:28:f9: 7f:97:68:33:d4:ff:c3:9b:be:8f:2c:68:f4:a8:7f: 40:90:d8:79:cc:5c:87:c8:52:0f:d4:0c:08:73:b9: 6e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C4:31:88:34:A9:FD:DC:86:E1:44:38:92:26:A8:4C:48:05:7F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/40474cbb-dd5d-3d44-a4ba-a9335c5a9ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bd:43:47:4a:7f:eb:02:00:e9:d9:41:bd:2d:b7:f0:f1:dc: 59:96:ea:41:e6:f0:33:11:c9:8f:28:be:cd:5b:22:08:80:e8: 37:71:7c:72:ad:9c:45:75:f5:17:1f:32:8a:65:4a:72:68:34: 69:aa:8c:26:6e:3e:16:51:27:27:69:ba:c7:b5:07:19:af:aa: 49:d5:c3:a3:04:1e:df:cd:a9:c6:bd:c9:57:8d:ff:72:ec:57: f5:df:b6:b7:fe:87:0a:23:1c:72:29:00:16:a6:ef:6a:28:87: 6c:1c:2b:30:46:6f:18:95:0e:9f:e6:ae:b6:24:33:52:f7:96: 45:eb:47:e4:cc:12:81:e3:b5:6c:22:b2:8c:ea:55:4c:3e:cf: 18:3b:0a:14:9d:b9:c7:8f:4c:48:70:d8:6d:97:c4:3a:e5:59: a7:c2:82:ba:46:78:76:8d:08:95:8e:1e:2a:4f:e6:b2:5c:9d: c7:41:57:3c:4e:6b:8a:b1:37:80:dc:bf:b7:25:8e:2f:25:74: d4:50:4b:56:75:48:97:c5:b9:88:00:c7:f1:83:f5:17:aa:fe: 61:19:9b:0c:ec:f2:79:5f:c4:97:12:88:e5:ed:71:ef:0d:ff: a8:c7:24:41:89:bf:14:67:d8:49:c2:7c:ef:12:82:61:8d:a0: af:78:0a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmsEc+ZfhwOhlQHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwMzE3MTUyMFoXDTI2MDEwMTE4MTUyMFowLzEtMCsGA1UEAxMk YTMzZDM2NDctOGQ4Ny00NTA0LTg2NDAtNmYwZDk1OTkxYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm76wwKEgA3hOLm91MJpux8ikzpJ0uw3IYxIQ uLi/zYT6eBI9dDPkUIZyQlYpkvyxtoJ1AnTOliNgWDjFMtp8jSmgzJKzVXJPbh6L ulik8KRI935iVhmvlhPn4VtzRrqztxOfASIIafb8U+eEpGr8nhLkkTA84oeQVBHQ RqKjV3ev0gU6K/msKoBOAy1PPH2U+7/wTT4kBLrddlUygLmeUiwtM+18LWD6sswZ LMvKEjST8xH8iTXdnPhfXMvJAcXGW93teGbQ6c7Fu6aGQGVZF0XolC7TvV555T8k Kf4KKPl/l2gz1P/Dm76PLGj0qH9AkNh5zFyHyFIP1AwIc7luiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXEMYg0qf3chuFEOJImqExIBX/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDA0NzRjYmItZGQ1ZC0z ZDQ0LWE0YmEtYTkzMzVjNWE5ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC9Q0dKf+sCAOnZQb0tt/Dx3FmW6kHm8DMRyY8ovs1bIgiA6DdxfHKt nEV19RcfMoplSnJoNGmqjCZuPhZRJydpuse1BxmvqknVw6MEHt/Nqca9yVeN/3Ls V/Xftrf+hwojHHIpABam72ooh2wcKzBGbxiVDp/mrrYkM1L3lkXrR+TMEoHjtWwi sozqVUw+zxg7ChSducePTEhw2G2XxDrlWafCgrpGeHaNCJWOHipP5rJcncdBVzxO a4qxN4Dcv7clji8ldNRQS1Z1SJfFuYgAx/GD9Req/mEZmwzs8nlfxJcSiOXtce8N /6jHJEGJvxRn2EnCfO8SgmGNoK94CjE= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:45 2025 by rpki-client