$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/488a4d22-3941-3dac-ab7f-5adb3bb6e9ef.roa File: 488a4d22-3941-3dac-ab7f-5adb3bb6e9ef.roa (raw, json) Hash identifier: jDMGjQUzT+6nwX/IZieooGZLmo6ujtjiYvnqapK40GQ= Subject key identifier: CF:4C:57:2C:4F:CB:C2:17:19:93:C3:03:90:4B:EF:02:39:AF:BA:24 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B6EE0783243E8E4CB96490240 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/488a4d22-3941-3dac-ab7f-5adb3bb6e9ef.roa Signing time: Mon 06 Oct 2025 15:38:54 +0000 ROA not before: Mon 06 Oct 2025 15:38:54 +0000 ROA not after: Sun 04 Jan 2026 16:38:54 +0000 asID: 23473 IP address blocks: 153.33.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:e0:78:32:43:e8:e4:cb:96:49:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 6 15:38:54 2025 GMT Not After : Jan 4 16:38:54 2026 GMT Subject: CN=7f1d59dd-0c3d-422d-b505-560697e3b0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:df:1d:ef:33:d6:d2:87:e9:1b:44:18:db: ca:0e:16:08:c3:83:d5:60:4f:7a:f7:d7:14:3f:fe: 6c:14:df:bc:db:91:b8:ac:b5:16:8a:6c:ea:56:5d: d8:41:31:46:be:2c:4d:11:42:88:96:c0:ce:23:9d: 77:b8:5f:9e:c0:3b:64:64:04:ee:91:68:5c:ee:ad: 5b:28:6e:34:30:7d:81:9b:54:c1:d3:f1:bb:96:62: df:1d:86:0c:ef:1a:cb:7d:9f:0d:c6:c9:25:eb:e8: a2:69:47:3b:f5:9c:87:1c:2c:d6:42:cb:ca:05:4c: 16:24:d7:43:2a:29:26:91:3a:6f:25:a6:04:d8:41: 6f:ad:d8:f0:ec:46:3f:ce:1f:f6:b8:ae:38:15:ea: 71:f6:e5:7b:ac:b1:b7:2d:63:0c:12:8e:c2:89:b7: 1d:9b:41:f6:0e:19:cc:db:89:d9:fb:b5:46:f9:c3: 65:a8:8b:10:03:ec:df:af:38:4c:fd:df:79:e1:0c: f7:86:fd:ca:b1:1e:bf:cd:e7:92:16:0f:04:ac:c2: 00:ec:ee:09:e8:86:72:f8:11:73:2e:ad:da:58:cd: 74:9c:0e:85:e5:21:8f:03:d5:56:0e:a8:1f:2d:ae: c2:03:95:ab:96:3f:87:0f:14:b7:ed:c9:8c:df:8e: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4C:57:2C:4F:CB:C2:17:19:93:C3:03:90:4B:EF:02:39:AF:BA:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/488a4d22-3941-3dac-ab7f-5adb3bb6e9ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c9:f3:b3:25:08:84:41:50:7b:d0:cb:d8:25:a0:0f:ff:70: 60:1c:cc:b9:a0:9b:83:9c:93:75:c3:08:25:3a:be:c6:68:b2: 4b:78:a3:71:91:d4:60:29:aa:bf:04:19:e0:66:a3:d8:05:bc: 7e:d6:f0:13:ec:7b:12:38:12:5b:af:87:68:2e:3d:fc:fe:db: b1:5f:65:08:f3:ed:bb:22:79:04:37:64:be:64:ee:34:d1:06: d9:a3:3e:1e:e5:cf:7b:4c:ce:8e:a4:0f:1b:9f:20:24:6d:7b: e6:da:eb:e8:b7:c1:97:c0:dd:be:a9:34:6b:2c:a6:e7:b7:e0: 8b:e2:7d:6b:91:fa:b9:b0:b2:9b:13:cf:5c:97:c2:cb:79:0d: fc:ce:ba:3a:11:97:f3:e9:d1:3d:02:ef:b5:1a:14:f6:04:bc: c5:20:1f:27:13:71:31:fb:88:5a:42:55:81:4a:89:12:54:bb: dc:ed:6c:6c:7c:de:b6:e9:cd:92:73:6a:dc:5b:f9:4f:a7:05: c1:71:61:35:e5:e1:ca:93:21:2c:60:00:65:34:8d:2c:56:5f: a3:51:b8:76:40:e7:6f:77:82:a5:5c:50:39:33:df:c6:fc:92: af:a1:09:fe:00:ee:49:77:82:28:55:ee:bb:35:bd:f3:f4:05: 48:48:55:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu4HgyQ+jky5ZJAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwNjE1Mzg1NFoXDTI2MDEwNDE2Mzg1NFowLzEtMCsGA1UEAxMk N2YxZDU5ZGQtMGMzZC00MjJkLWI1MDUtNTYwNjk3ZTNiMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrnfHe8z1tKH6RtEGNvKDhYIw4PVYE9699cU P/5sFN+825G4rLUWimzqVl3YQTFGvixNEUKIlsDOI513uF+ewDtkZATukWhc7q1b KG40MH2Bm1TB0/G7lmLfHYYM7xrLfZ8Nxskl6+iiaUc79ZyHHCzWQsvKBUwWJNdD KikmkTpvJaYE2EFvrdjw7EY/zh/2uK44Fepx9uV7rLG3LWMMEo7Cibcdm0H2DhnM 24nZ+7VG+cNlqIsQA+zfrzhM/d954Qz3hv3KsR6/zeeSFg8ErMIA7O4J6IZy+BFz Lq3aWM10nA6F5SGPA9VWDqgfLa7CA5Wrlj+HDxS37cmM347H+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9MVyxPy8IXGZPDA5BL7wI5r7okMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDg4YTRkMjItMzk0MS0z ZGFjLWFiN2YtNWFkYjNiYjZlOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPJ87MlCIRBUHvQy9gloA//cGAczLmgm4Ock3XDCCU6vsZoskt4o3GR 1GApqr8EGeBmo9gFvH7W8BPsexI4Eluvh2guPfz+27FfZQjz7bsieQQ3ZL5k7jTR BtmjPh7lz3tMzo6kDxufICRte+ba6+i3wZfA3b6pNGsspue34IvifWuR+rmwspsT z1yXwst5DfzOujoRl/Pp0T0C77UaFPYEvMUgHycTcTH7iFpCVYFKiRJUu9ztbGx8 3rbpzZJzatxb+U+nBcFxYTXl4cqTISxgAGU0jSxWX6NRuHZA5293gqVcUDkz38b8 kq+hCf4A7kl3gihV7rs1vfP0BUhIVVQ= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:43 2025 by rpki-client