$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a2025e09-2d87-34d9-b8f3-5e73b0f13494.roa File: a2025e09-2d87-34d9-b8f3-5e73b0f13494.roa (raw, json) Hash identifier: syjGqX5v2MzCUzsdBfPmZuPExgUVw8ijc7QedPJ9vN4= Subject key identifier: 74:D8:49:BA:3E:62:81:EB:91:4B:11:A9:36:86:C2:FE:D7:37:75:24 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B6EED362F9A11AC8BB345EA80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a2025e09-2d87-34d9-b8f3-5e73b0f13494.roa Signing time: Mon 06 Oct 2025 16:04:34 +0000 ROA not before: Mon 06 Oct 2025 16:04:34 +0000 ROA not after: Sun 04 Jan 2026 17:04:34 +0000 asID: 23473 IP address blocks: 153.33.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:ed:36:2f:9a:11:ac:8b:b3:45:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 6 16:04:34 2025 GMT Not After : Jan 4 17:04:34 2026 GMT Subject: CN=3056635a-fd37-4b9a-8226-87f7c318c4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:c1:8e:a0:32:91:cd:73:7a:02:1d:7e:c7: 34:8c:d8:54:06:73:48:ec:d0:8c:f5:ac:a7:a2:78: 23:dd:ca:47:38:73:1c:7d:60:5d:fb:d4:f4:0b:6e: b8:69:80:a0:34:d2:55:2b:9f:31:b8:42:d3:44:90: 81:0d:46:2f:ee:ed:8c:75:e1:bf:98:af:12:50:20: f2:b4:41:79:bb:ab:da:8a:87:64:50:6b:fa:ef:94: 49:35:f2:f7:82:b8:c4:45:60:78:26:3c:4f:70:90: 5f:65:b0:b3:b8:7a:e2:b7:2d:28:ec:1d:12:1f:31: 6a:b7:f8:60:4e:19:15:ef:32:75:49:83:b2:7c:4a: 28:88:d8:76:1d:0d:75:74:bd:a1:38:65:b3:56:72: c8:94:20:19:f1:83:f1:de:4a:ba:d4:2c:83:99:8d: a1:63:ee:44:50:02:f7:5a:ce:cb:34:f8:78:a9:e6: 47:34:83:e5:a9:f4:ce:fc:e2:6b:1c:e3:32:10:a4: 0d:1b:cf:09:c5:74:68:31:10:2f:23:8d:85:1c:80: c4:52:35:1b:b5:17:46:d6:6e:c8:41:2c:ff:72:bf: 16:a9:57:69:c2:f7:a5:c1:24:72:fd:0a:80:5f:d3: 92:ba:a3:ba:d8:87:04:40:f8:3f:d6:a2:7d:b1:9a: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D8:49:BA:3E:62:81:EB:91:4B:11:A9:36:86:C2:FE:D7:37:75:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a2025e09-2d87-34d9-b8f3-5e73b0f13494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b0:89:7b:78:1c:c5:53:db:e9:f6:c9:cc:8a:d8:9e:35:8e: 01:15:aa:23:15:ff:d6:8c:04:b1:46:cc:41:c1:53:46:e8:39: f2:b7:57:c4:32:56:e5:78:57:28:fc:62:49:4f:f3:dd:ac:43: 99:bb:53:1a:41:e3:68:04:49:ea:13:e0:41:80:b7:1a:34:26: b5:c8:c1:9f:3c:bf:78:c2:fa:1b:4b:8e:5c:8b:f5:f8:9b:3c: 0a:7a:06:e2:fe:f1:da:6f:9a:80:ac:a1:6e:af:85:f6:59:f3: 57:f1:9c:d5:d1:0b:3d:98:66:78:0b:40:30:28:e7:56:b1:ad: 68:16:3b:ce:9f:4e:2e:00:1f:4b:2f:4b:bc:16:98:7a:b3:d2: 4a:1e:5e:1e:c3:cb:2e:05:ab:05:94:20:a7:cd:28:c0:27:5a: 4e:25:af:32:96:91:2e:03:27:47:3d:71:aa:cd:d6:8a:c3:81: 4b:29:71:f6:01:8b:a8:2c:9f:92:f5:75:a0:ab:d5:63:1c:f0: 0c:b9:c3:8c:70:d8:18:be:28:8a:1f:ea:49:52:bb:10:e5:3f: 20:dc:14:6e:58:e4:f9:19:1c:6d:9f:4e:29:0b:74:4c:b0:cb: e1:56:59:cb:13:d2:ce:d5:55:19:0d:60:69:e9:e6:24:ff:b0: 99:66:bc:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu7TYvmhGsi7NF6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwNjE2MDQzNFoXDTI2MDEwNDE3MDQzNFowLzEtMCsGA1UEAxMk MzA1NjYzNWEtZmQzNy00YjlhLTgyMjYtODdmN2MzMThjNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD/BjqAykc1zegIdfsc0jNhUBnNI7NCM9ayn ongj3cpHOHMcfWBd+9T0C264aYCgNNJVK58xuELTRJCBDUYv7u2MdeG/mK8SUCDy tEF5u6vaiodkUGv675RJNfL3grjERWB4JjxPcJBfZbCzuHrity0o7B0SHzFqt/hg ThkV7zJ1SYOyfEooiNh2HQ11dL2hOGWzVnLIlCAZ8YPx3kq61CyDmY2hY+5EUAL3 Ws7LNPh4qeZHNIPlqfTO/OJrHOMyEKQNG88JxXRoMRAvI42FHIDEUjUbtRdG1m7I QSz/cr8WqVdpwvelwSRy/QqAX9OSuqO62IcEQPg/1qJ9sZqHPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTYSbo+YoHrkUsRqTaGwv7XN3UkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTIwMjVlMDktMmQ4Ny0z NGQ5LWI4ZjMtNWU3M2IwZjEzNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKwiXt4HMVT2+n2ycyK2J41jgEVqiMV/9aMBLFGzEHBU0boOfK3V8Qy VuV4Vyj8YklP892sQ5m7UxpB42gESeoT4EGAtxo0JrXIwZ88v3jC+htLjlyL9fib PAp6BuL+8dpvmoCsoW6vhfZZ81fxnNXRCz2YZngLQDAo51axrWgWO86fTi4AH0sv S7wWmHqz0koeXh7Dyy4FqwWUIKfNKMAnWk4lrzKWkS4DJ0c9carN1orDgUspcfYB i6gsn5L1daCr1WMc8Ay5w4xw2Bi+KIof6klSuxDlPyDcFG5Y5PkZHG2fTikLdEyw y+FWWcsT0s7VVRkNYGnp5iT/sJlmvMI= -----END CERTIFICATE-----Generated at Fri Oct 10 03:58:23 2025 by rpki-client