$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5452ad8f-5891-3c86-abd7-c15d4b88b5e6.roa File: 5452ad8f-5891-3c86-abd7-c15d4b88b5e6.roa (raw, json) Hash identifier: h/lqG2Fh2D6/5qdKY6x/m2lcH/dmDihRzgf7kRotTR4= Subject key identifier: F1:9E:73:51:A4:6D:4E:AA:AD:3C:8C:41:BF:0E:A4:14:99:2E:20:35 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B66ACC798F7639D1358D2A280 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5452ad8f-5891-3c86-abd7-c15d4b88b5e6.roa Signing time: Fri 03 Oct 2025 17:08:17 +0000 ROA not before: Fri 03 Oct 2025 17:08:17 +0000 ROA not after: Thu 01 Jan 2026 18:08:17 +0000 asID: 23473 IP address blocks: 153.33.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:ac:c7:98:f7:63:9d:13:58:d2:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 3 17:08:17 2025 GMT Not After : Jan 1 18:08:17 2026 GMT Subject: CN=82397307-34bc-4abc-b9ce-2b5b81db802b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:93:53:ed:5c:3b:9d:95:3f:70:35:c1:86: 95:25:1b:53:26:83:aa:84:fa:dd:4d:4b:1f:11:50: d5:2e:fb:ad:b4:0d:d2:d7:a0:42:87:51:dc:43:9d: c6:0a:f6:fa:c8:b5:e7:16:7d:84:96:49:bf:a6:9c: 99:aa:3b:c2:c0:9e:39:98:3c:9b:10:a2:ed:8d:df: dd:7f:53:cb:28:71:0d:e6:bd:79:ce:06:12:f0:54: 99:5c:67:45:7d:65:f6:0d:b2:69:d9:9a:ad:8e:f5: fd:63:b7:4e:6b:25:8a:e7:37:da:97:be:f9:d6:db: e2:9c:73:1b:0e:70:c1:b3:44:af:34:f3:c1:03:d8: 97:91:d7:53:a0:f9:a9:05:19:2c:a6:76:c8:d0:cb: 2a:bb:46:4c:97:de:88:17:56:8b:29:28:2e:4c:86: f4:82:9e:c8:de:a2:c1:9e:32:c1:39:4f:bc:18:b1: 21:fa:f8:1e:ac:1e:68:3e:bf:9c:cd:fc:28:62:6f: a2:ac:e3:c5:ab:2b:54:57:b9:07:59:5d:6e:3a:94: f7:11:a2:dd:9b:00:76:3c:a2:0e:94:2d:69:c4:ff: 16:0e:dc:d6:26:df:b6:8b:a3:16:0b:f6:e1:43:8e: e8:c2:1f:5e:7a:66:3e:93:da:44:11:bf:37:f5:68: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9E:73:51:A4:6D:4E:AA:AD:3C:8C:41:BF:0E:A4:14:99:2E:20:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5452ad8f-5891-3c86-abd7-c15d4b88b5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:64:86:63:68:c2:e9:23:be:b9:28:62:b7:3b:68:22:c5:8e: 13:47:1a:2c:5d:b7:64:b7:3c:91:01:96:bd:ab:ff:81:26:a6: 37:fb:cc:75:2c:e0:f4:cc:21:cf:3d:17:61:d5:7e:df:0e:49: 86:e7:7f:48:c7:6a:9f:31:67:64:d5:97:4d:d7:66:8e:b3:11: 82:ef:25:2d:27:45:84:f1:4d:9a:21:18:09:11:c2:18:47:a6: e3:32:65:71:07:52:e2:02:04:58:86:13:25:ea:b9:96:ed:87: e5:5c:f6:38:89:df:36:08:93:62:84:43:43:09:71:56:f4:52: 03:51:b0:8d:bd:ce:67:75:b2:3d:72:7b:b0:4d:5f:a0:5e:d2: 6c:13:24:ee:f6:36:e3:49:63:66:a5:3f:12:e1:8d:80:25:a3: 69:30:6a:d8:ad:8d:09:06:69:29:fc:7a:de:b1:8a:6c:04:1f: ee:82:dc:99:f4:9a:7b:cc:da:bd:00:b6:e7:5f:b0:8b:3a:7f: 23:92:dd:55:95:33:e5:c8:2b:ae:52:9b:83:4b:53:c3:47:5c: dc:22:1a:97:26:18:63:8e:67:2d:c8:00:49:44:25:2a:e3:f2: 00:6e:9f:7a:95:a8:ee:f7:e7:1d:d7:f5:63:91:d2:31:5d:08: dd:f4:ea:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmrMeY92OdE1jSooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwMzE3MDgxN1oXDTI2MDEwMTE4MDgxN1owLzEtMCsGA1UEAxMk ODIzOTczMDctMzRiYy00YWJjLWI5Y2UtMmI1YjgxZGI4MDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVOTU+1cO52VP3A1wYaVJRtTJoOqhPrdTUsf EVDVLvuttA3S16BCh1HcQ53GCvb6yLXnFn2Elkm/ppyZqjvCwJ45mDybEKLtjd/d f1PLKHEN5r15zgYS8FSZXGdFfWX2DbJp2ZqtjvX9Y7dOayWK5zfal7751tvinHMb DnDBs0SvNPPBA9iXkddToPmpBRkspnbI0Msqu0ZMl96IF1aLKSguTIb0gp7I3qLB njLBOU+8GLEh+vgerB5oPr+czfwoYm+irOPFqytUV7kHWV1uOpT3EaLdmwB2PKIO lC1pxP8WDtzWJt+2i6MWC/bhQ47owh9eemY+k9pEEb839WgVTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGec1GkbU6qrTyMQb8OpBSZLiA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNTQ1MmFkOGYtNTg5MS0z Yzg2LWFiZDctYzE1ZDRiODhiNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNkhmNowukjvrkoYrc7aCLFjhNHGixdt2S3PJEBlr2r/4Empjf7zHUs 4PTMIc89F2HVft8OSYbnf0jHap8xZ2TVl03XZo6zEYLvJS0nRYTxTZohGAkRwhhH puMyZXEHUuICBFiGEyXquZbth+Vc9jiJ3zYIk2KEQ0MJcVb0UgNRsI29zmd1sj1y e7BNX6Be0mwTJO72NuNJY2alPxLhjYAlo2kwatitjQkGaSn8et6ximwEH+6C3Jn0 mnvM2r0AtudfsIs6fyOS3VWVM+XIK65Sm4NLU8NHXNwiGpcmGGOOZy3IAElEJSrj 8gBun3qVqO735x3X9WOR0jFdCN306v0= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:37 2025 by rpki-client