$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/878f4de7-b29a-37a1-8710-86ab65e839fe.roa File: 878f4de7-b29a-37a1-8710-86ab65e839fe.roa (raw, json) Hash identifier: TyhTFECtWJkriHEan9rxHCrUQ7gxpdpXdEzqr3/Peus= Subject key identifier: 42:12:E0:28:64:E7:35:B1:50:6D:06:D1:EC:C9:E5:14:5F:76:FC:80 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B73C300740EEB40AFDD934540 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/878f4de7-b29a-37a1-8710-86ab65e839fe.roa Signing time: Wed 08 Oct 2025 09:38:34 +0000 ROA not before: Wed 08 Oct 2025 09:38:34 +0000 ROA not after: Tue 06 Jan 2026 10:38:34 +0000 asID: 23473 IP address blocks: 153.33.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:c3:00:74:0e:eb:40:af:dd:93:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 8 09:38:34 2025 GMT Not After : Jan 6 10:38:34 2026 GMT Subject: CN=fc20042e-e2be-40fc-9d87-5b0a811fb25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:fa:d8:42:cf:03:dd:5c:04:9b:9e:e8:88: e1:49:07:d1:2d:5e:db:70:1d:2b:88:53:70:23:98: 0e:6b:dd:74:39:96:06:51:42:7c:74:a5:ed:da:73: 3c:20:8c:6c:97:3f:fb:c2:d5:a4:94:5c:88:a2:c4: d7:8b:69:28:23:b6:58:4c:83:5d:72:1e:06:a9:fb: 72:13:b5:b7:d8:e7:83:0f:4d:6b:1c:21:aa:ac:ae: 3d:bf:96:f0:8b:a6:28:24:3b:66:2f:77:25:50:e6: 00:88:20:52:5b:51:ac:60:98:88:68:5c:d6:e2:92: 46:a6:44:c1:15:53:f1:da:11:db:52:57:b3:85:75: b2:61:51:43:ff:87:f4:5e:4b:d8:0a:e5:93:2c:bf: fd:f9:64:13:59:6a:76:83:41:28:3e:e6:80:fc:1e: 69:bf:9b:1e:bf:94:2a:97:a7:88:6d:d3:f1:a3:c8: 61:29:6d:d2:5f:7c:01:32:bd:ec:8c:1a:9c:e0:e8: 00:63:8d:1e:a3:f1:47:af:29:eb:8f:d8:d2:e8:0c: 68:fe:e0:82:3b:1d:c3:6f:e3:5e:db:fb:8e:ac:ae: 99:f0:b3:b4:43:ae:84:c8:51:6b:ba:11:b8:5b:a6: 76:f3:7f:3b:52:85:71:7a:e7:5e:db:e4:65:84:b4: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:E0:28:64:E7:35:B1:50:6D:06:D1:EC:C9:E5:14:5F:76:FC:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/878f4de7-b29a-37a1-8710-86ab65e839fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:10:ca:4d:a5:cd:e1:ef:50:b6:09:67:75:77:72:5e:2a:a3: 7d:0c:a4:88:db:62:22:00:d2:ec:0f:84:b7:a2:df:6d:fd:e9: 01:c1:66:8f:53:8d:48:6f:88:58:92:46:08:c5:6a:55:c7:ac: 2d:93:f9:8a:f5:3d:fc:48:f7:8c:5d:56:ba:ab:42:97:82:fb: 17:47:e0:6c:0f:d5:c0:5a:a6:d5:38:c1:9d:66:6c:80:c0:bc: 32:3b:91:06:c0:58:cc:fd:3d:6d:24:c5:9e:87:e6:20:20:f3: e5:1b:3c:e0:75:81:d5:40:f7:2a:22:d9:51:7f:33:3b:90:54: 6b:f8:59:c0:0b:b2:5b:a6:28:58:3a:7e:fa:0e:23:b0:36:7f: 99:98:e8:52:f2:82:76:5e:e0:5d:06:07:89:18:fe:b9:4b:8e: 90:05:48:27:41:ab:3c:93:d7:ae:44:4a:5f:9c:e7:b9:be:81: 54:27:02:aa:20:09:d0:ed:23:2d:95:dd:4e:2b:dd:3e:a9:9c: c2:1e:62:cf:cb:8f:74:f6:aa:dc:c5:d6:82:f2:ad:fb:28:94: 3b:a7:2f:20:3c:5b:c2:93:90:76:01:b8:81:e0:f2:e9:fa:ed: 13:8e:d6:d8:19:3e:24:a0:d1:77:65:78:7e:30:82:8d:d2:c4: ec:85:c8:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtzwwB0DutAr92TRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwODA5MzgzNFoXDTI2MDEwNjEwMzgzNFowLzEtMCsGA1UEAxMk ZmMyMDA0MmUtZTJiZS00MGZjLTlkODctNWIwYTgxMWZiMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEP62ELPA91cBJue6IjhSQfRLV7bcB0riFNw I5gOa910OZYGUUJ8dKXt2nM8IIxslz/7wtWklFyIosTXi2koI7ZYTINdch4Gqfty E7W32OeDD01rHCGqrK49v5bwi6YoJDtmL3clUOYAiCBSW1GsYJiIaFzW4pJGpkTB FVPx2hHbUlezhXWyYVFD/4f0XkvYCuWTLL/9+WQTWWp2g0EoPuaA/B5pv5sev5Qq l6eIbdPxo8hhKW3SX3wBMr3sjBqc4OgAY40eo/FHrynrj9jS6Axo/uCCOx3Db+Ne 2/uOrK6Z8LO0Q66EyFFruhG4W6Z28387UoVxeude2+RlhLTUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIS4Chk5zWxUG0G0ezJ5RRfdvyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODc4ZjRkZTctYjI5YS0z N2ExLTg3MTAtODZhYjY1ZTgzOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMQyk2lzeHvULYJZ3V3cl4qo30MpIjbYiIA0uwPhLei32396QHBZo9T jUhviFiSRgjFalXHrC2T+Yr1PfxI94xdVrqrQpeC+xdH4GwP1cBaptU4wZ1mbIDA vDI7kQbAWMz9PW0kxZ6H5iAg8+UbPOB1gdVA9yoi2VF/MzuQVGv4WcALslumKFg6 fvoOI7A2f5mY6FLygnZe4F0GB4kY/rlLjpAFSCdBqzyT165ESl+c57m+gVQnAqog CdDtIy2V3U4r3T6pnMIeYs/Lj3T2qtzF1oLyrfsolDunLyA8W8KTkHYBuIHg8un6 7ROO1tgZPiSg0XdleH4wgo3SxOyFyDA= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:38 2025 by rpki-client