$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991fb43d-159e-3eca-805f-38c7ba72120b.roa File: 991fb43d-159e-3eca-805f-38c7ba72120b.roa (raw, json) Hash identifier: wvIlx/jtXjWXyUcL+r3InRLxPxCBccgXQ8LBLdPsDhM= Subject key identifier: B0:FD:07:36:7D:E0:E1:2F:FE:FC:5B:DD:1F:E5:98:A0:FD:38:C1:DD Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B773B3A07EFB2FB0DED827000 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991fb43d-159e-3eca-805f-38c7ba72120b.roa Signing time: Thu 09 Oct 2025 15:28:14 +0000 ROA not before: Thu 09 Oct 2025 15:28:14 +0000 ROA not after: Wed 07 Jan 2026 16:28:14 +0000 asID: 23473 IP address blocks: 153.33.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:3b:3a:07:ef:b2:fb:0d:ed:82:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 9 15:28:14 2025 GMT Not After : Jan 7 16:28:14 2026 GMT Subject: CN=6e168807-1bdb-4f30-9dfb-188365def8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:68:bc:b5:7d:76:3d:7a:cb:3a:97:25:5f: 02:98:70:05:6e:3d:85:59:e8:57:a2:4c:4b:c3:7f: 68:2d:85:78:37:8a:65:39:12:0d:f8:28:07:bd:b2: 7d:68:46:3e:9d:e8:37:8c:18:62:a6:f4:2e:32:c8: 46:bc:15:e4:ad:88:52:89:ee:fe:04:69:35:62:af: d3:74:c6:46:8f:cd:13:f2:9f:8e:be:17:7a:f0:51: 02:7e:a0:a6:6a:e8:51:56:83:ab:92:dd:96:90:1a: 6c:11:fe:e3:e4:25:05:50:41:e6:7f:ac:13:ea:14: ce:07:d7:27:b9:b8:fc:5c:cc:84:0f:6f:ae:87:a4: f8:cf:c2:73:6e:6b:84:07:94:d0:8f:a1:5e:ea:4b: 98:ca:4b:1f:cf:3e:a0:60:3e:ff:cb:05:ff:35:32: 1e:f3:3d:02:f6:b2:2f:37:64:df:72:67:fa:bd:7d: 03:75:ae:16:88:78:4e:3f:79:60:cf:fc:81:ff:d9: bf:84:ab:44:4b:2e:19:b3:4f:cc:93:c7:64:15:21: 31:ce:80:bb:a9:ff:a0:f8:f0:eb:32:81:c3:c2:92: 00:66:ec:06:f3:46:30:73:ff:87:5c:6f:77:1e:b2: e9:47:36:b8:93:ed:e4:07:62:f5:1c:b7:92:e4:a8: 66:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FD:07:36:7D:E0:E1:2F:FE:FC:5B:DD:1F:E5:98:A0:FD:38:C1:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/991fb43d-159e-3eca-805f-38c7ba72120b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7f:04:e4:27:b9:13:34:76:0d:08:1c:71:db:5e:e3:62:14: 2e:ee:22:84:79:f8:be:d0:87:7d:98:1c:a7:9c:35:15:8f:f6: ce:93:df:0d:43:d0:93:e9:ab:39:5e:ea:8f:fb:b4:20:09:22: 91:01:42:a6:c7:b7:ec:74:1d:f7:b0:22:e5:17:02:09:b8:e7: 35:70:07:e4:55:cd:7f:4f:ba:5d:ac:54:cc:3d:41:6d:4f:4a: 5d:a2:e6:59:46:ec:b1:52:da:f9:ff:92:32:1b:89:f0:63:df: 20:3d:2a:4a:70:7b:90:77:2c:a7:98:f5:5e:2a:a2:fd:01:56: f9:08:df:85:92:2d:63:35:fd:5a:d4:39:0b:73:83:bb:5e:46: b3:46:75:37:de:99:36:05:c5:26:18:9f:0c:c6:31:25:85:9c: fb:13:31:36:f2:03:3f:41:b1:73:f6:45:16:76:cb:a9:af:a6: ee:0a:87:33:02:45:29:e1:74:e6:33:a7:c4:13:51:48:6a:5b: 0f:80:63:e8:37:e1:ac:da:83:9e:63:fa:e1:6b:5d:f6:50:b5: 96:ce:f0:40:05:2a:af:6d:9a:53:26:f8:da:04:17:b1:9d:7e: 32:f6:50:53:b6:3b:9c:6b:18:50:c8:7c:f3:74:72:26:18:40: 0b:d8:19:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3OzoH77L7De2CcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwOTE1MjgxNFoXDTI2MDEwNzE2MjgxNFowLzEtMCsGA1UEAxMk NmUxNjg4MDctMWJkYi00ZjMwLTlkZmItMTg4MzY1ZGVmOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXhovLV9dj16yzqXJV8CmHAFbj2FWehXokxL w39oLYV4N4plORIN+CgHvbJ9aEY+neg3jBhipvQuMshGvBXkrYhSie7+BGk1Yq/T dMZGj80T8p+Ovhd68FECfqCmauhRVoOrkt2WkBpsEf7j5CUFUEHmf6wT6hTOB9cn ubj8XMyED2+uh6T4z8JzbmuEB5TQj6Fe6kuYyksfzz6gYD7/ywX/NTIe8z0C9rIv N2Tfcmf6vX0Dda4WiHhOP3lgz/yB/9m/hKtESy4Zs0/Mk8dkFSExzoC7qf+g+PDr MoHDwpIAZuwG80Ywc/+HXG93HrLpRza4k+3kB2L1HLeS5KhmRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD9BzZ94OEv/vxb3R/lmKD9OMHdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTkxZmI0M2QtMTU5ZS0z ZWNhLTgwNWYtMzhjN2JhNzIxMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl/BOQnuRM0dg0IHHHbXuNiFC7uIoR5+L7Qh32YHKecNRWP9s6T3w1D 0JPpqzle6o/7tCAJIpEBQqbHt+x0HfewIuUXAgm45zVwB+RVzX9Pul2sVMw9QW1P Sl2i5llG7LFS2vn/kjIbifBj3yA9Kkpwe5B3LKeY9V4qov0BVvkI34WSLWM1/VrU OQtzg7teRrNGdTfemTYFxSYYnwzGMSWFnPsTMTbyAz9BsXP2RRZ2y6mvpu4KhzMC RSnhdOYzp8QTUUhqWw+AY+g34azag55j+uFrXfZQtZbO8EAFKq9tmlMm+NoEF7Gd fjL2UFO2O5xrGFDIfPN0ciYYQAvYGcc= -----END CERTIFICATE-----Generated at Fri Oct 10 03:50:52 2025 by rpki-client