$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7114676e-f1d8-3e59-81b9-1d5e14d73bb7.roa File: 7114676e-f1d8-3e59-81b9-1d5e14d73bb7.roa (raw, json) Hash identifier: F59FgK+OychRYgoiOZbSmwWsRvamFawU4iQ7OoIud3g= Subject key identifier: A7:FA:98:0D:6E:6D:FC:91:62:65:12:4C:88:7C:67:E5:18:F7:15:C0 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B6ECB0509D68923E737F776E0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7114676e-f1d8-3e59-81b9-1d5e14d73bb7.roa Signing time: Mon 06 Oct 2025 14:55:41 +0000 ROA not before: Mon 06 Oct 2025 14:55:41 +0000 ROA not after: Sun 04 Jan 2026 15:55:41 +0000 asID: 23473 IP address blocks: 153.33.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:cb:05:09:d6:89:23:e7:37:f7:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 6 14:55:41 2025 GMT Not After : Jan 4 15:55:41 2026 GMT Subject: CN=889dae89-ffca-4477-b15f-687ce928b7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d9:57:ed:a6:b9:77:e7:29:e6:7d:c9:09:d3: 06:b4:fa:97:ff:ec:5e:c1:bf:b9:a2:67:5a:25:cc: d5:9d:1a:7a:f1:13:26:fb:c4:0a:2b:b4:0a:90:ab: df:30:f3:f9:cb:d6:7b:75:63:1f:a5:7a:94:85:16: fb:9a:1b:bf:0d:37:a6:f5:e8:d4:70:73:be:c0:34: 8e:f2:54:5a:21:d0:d8:cc:da:0d:95:3e:76:43:c1: ef:1e:78:49:cc:fc:5c:57:73:41:68:55:c4:6a:0a: eb:f3:bf:9a:22:10:44:5b:eb:e9:51:d2:b8:c7:d8: c0:57:9a:bc:0c:f4:c3:31:f4:90:25:a8:04:18:94: 28:a7:d1:9c:a6:62:54:da:fc:a3:8a:04:33:3b:85: b0:09:01:8e:b1:77:45:ee:3f:e7:70:66:91:4b:15: dd:f0:95:4d:33:bc:51:1d:74:4a:aa:ea:03:17:f5: ea:20:f0:5a:2c:9a:60:6f:7f:a7:3e:0a:ed:73:09: f4:08:bd:92:2b:92:d7:9a:a2:60:7f:cd:08:51:9f: 4a:5c:26:a0:44:24:72:38:4b:5d:e6:d2:7b:53:f4: d0:3a:41:34:53:9d:d5:24:ff:83:9b:9c:62:48:53: d7:4c:c5:ec:f2:a2:6e:89:6a:f3:89:49:d9:32:09: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FA:98:0D:6E:6D:FC:91:62:65:12:4C:88:7C:67:E5:18:F7:15:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7114676e-f1d8-3e59-81b9-1d5e14d73bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:34:a6:eb:9d:5a:1a:18:7a:15:f5:d7:76:80:3b:01:35:5f: 89:10:71:06:e9:b7:50:bf:3a:c9:d8:8c:6b:e4:d9:eb:28:65: 68:b8:c5:24:8b:fc:42:1a:11:b8:fb:8c:1c:2a:d9:56:6f:c9: d7:bb:63:21:d8:ec:1c:6e:a0:7b:0c:3d:a0:40:1b:64:96:e1: f8:3b:53:77:b7:7d:8f:c2:f8:f9:9a:d5:ad:03:e2:28:b8:93: d8:36:ca:07:c6:a3:63:e5:f0:00:49:d1:04:e5:39:2f:6a:05: b7:98:1c:43:2d:93:d4:46:3c:b3:15:4b:b1:24:79:cc:57:89: 27:3e:36:d7:7b:fa:19:1b:a0:52:8f:be:94:89:12:5d:f9:bb: 79:43:c4:6f:f6:b1:dc:e7:77:11:d2:8f:7f:a2:11:d0:b1:c0: 11:8c:fc:4f:e8:e0:bd:6c:8e:a3:aa:63:64:e4:b5:94:9d:8e: 22:bd:84:52:e2:e5:37:f3:b6:00:0e:7a:01:46:6a:70:05:e6: bc:ff:7b:72:f8:2a:46:76:f6:ba:92:c2:7d:41:ca:cd:00:3e: 80:e3:8c:82:cd:47:9a:44:20:a2:a3:7d:91:14:5f:ee:76:c6: ae:b4:40:2d:14:10:61:8a:2b:92:5a:4f:3a:54:23:fd:9a:7f: 3f:bb:fa:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtuywUJ1okj5zf3duAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwNjE0NTU0MVoXDTI2MDEwNDE1NTU0MVowLzEtMCsGA1UEAxMk ODg5ZGFlODktZmZjYS00NDc3LWIxNWYtNjg3Y2U5MjhiN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9lX7aa5d+cp5n3JCdMGtPqX/+xewb+5omda JczVnRp68RMm+8QKK7QKkKvfMPP5y9Z7dWMfpXqUhRb7mhu/DTem9ejUcHO+wDSO 8lRaIdDYzNoNlT52Q8HvHnhJzPxcV3NBaFXEagrr87+aIhBEW+vpUdK4x9jAV5q8 DPTDMfSQJagEGJQop9GcpmJU2vyjigQzO4WwCQGOsXdF7j/ncGaRSxXd8JVNM7xR HXRKquoDF/XqIPBaLJpgb3+nPgrtcwn0CL2SK5LXmqJgf80IUZ9KXCagRCRyOEtd 5tJ7U/TQOkE0U53VJP+Dm5xiSFPXTMXs8qJuiWrziUnZMgmKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf6mA1ubfyRYmUSTIh8Z+UY9xXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNzExNDY3NmUtZjFkOC0z ZTU5LTgxYjktMWQ1ZTE0ZDczYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU0puudWhoYehX113aAOwE1X4kQcQbpt1C/OsnYjGvk2esoZWi4xSSL /EIaEbj7jBwq2VZvyde7YyHY7BxuoHsMPaBAG2SW4fg7U3e3fY/C+Pma1a0D4ii4 k9g2ygfGo2Pl8ABJ0QTlOS9qBbeYHEMtk9RGPLMVS7EkecxXiSc+Ntd7+hkboFKP vpSJEl35u3lDxG/2sdzndxHSj3+iEdCxwBGM/E/o4L1sjqOqY2TktZSdjiK9hFLi 5TfztgAOegFGanAF5rz/e3L4KkZ29rqSwn1Bys0APoDjjILNR5pEIKKjfZEUX+52 xq60QC0UEGGKK5JaTzpUI/2afz+7+mw= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:45 2025 by rpki-client