$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ab8ad28d-0d43-3d74-b0cd-c2c26d0e58d2.roa File: ab8ad28d-0d43-3d74-b0cd-c2c26d0e58d2.roa (raw, json) Hash identifier: ZsmeYD6dfYqHC6r/bDu91Pn1JCyq962LTGSo7GYVaLA= Subject key identifier: 9A:5D:58:7F:C4:93:54:32:6B:61:03:70:BB:EB:A1:47:F5:D2:C7:71 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B6EEF97D679F31092885835E0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ab8ad28d-0d43-3d74-b0cd-c2c26d0e58d2.roa Signing time: Mon 06 Oct 2025 16:09:22 +0000 ROA not before: Mon 06 Oct 2025 16:09:22 +0000 ROA not after: Sun 04 Jan 2026 17:09:22 +0000 asID: 23473 IP address blocks: 153.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:ef:97:d6:79:f3:10:92:88:58:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 6 16:09:22 2025 GMT Not After : Jan 4 17:09:22 2026 GMT Subject: CN=48b038a2-0e30-429f-adad-a1d92a0c668c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3c:21:ca:d4:01:60:4e:c4:28:05:8a:4e:e2: 91:ae:63:cc:54:e5:04:c8:1a:c2:cd:b6:9c:da:db: 25:88:26:bf:04:2f:92:cc:9a:ff:da:5e:5d:4d:e2: 02:d1:30:5e:8d:75:1c:3b:a4:dd:f9:c8:d8:11:f8: 6f:0c:7c:60:cb:67:c8:fb:f0:88:cd:95:70:ca:ab: f5:2b:47:d4:5a:32:76:fd:68:d6:d8:cb:1e:c4:17: 2f:f8:01:34:ab:d9:64:77:c4:f4:db:92:08:e8:b4: 01:4b:b7:6d:31:d7:8f:ff:26:2b:75:a4:33:db:32: a2:3e:3b:95:ab:48:20:11:ff:09:9f:73:f3:79:2d: 7d:31:e0:11:97:91:ef:49:f8:b0:e2:b4:1b:f5:d0: 6d:68:a7:d4:86:36:e4:ee:bc:b4:bf:1f:bf:e0:bd: 9c:70:7b:f5:91:f2:a8:c6:d3:5e:b5:53:1f:d0:0a: 3e:4c:06:b4:03:5d:3e:7a:2d:53:f0:6a:1e:f1:25: cc:e2:b4:db:f1:69:ea:41:f8:55:d0:f3:c7:14:b0: 3c:c2:08:d9:64:13:79:41:c8:43:90:73:67:b7:20: 03:5a:c3:75:bc:e3:d0:5d:c8:01:8e:ea:77:0e:83: 8a:f9:96:9d:cd:db:44:23:6c:de:b2:3b:5e:cb:98: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:58:7F:C4:93:54:32:6B:61:03:70:BB:EB:A1:47:F5:D2:C7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ab8ad28d-0d43-3d74-b0cd-c2c26d0e58d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3d:0b:dc:f4:ca:7b:23:dd:92:12:80:3f:dd:18:6e:1d:57: c4:64:5b:31:52:80:5f:47:7e:d9:42:08:4d:70:e3:dd:62:7e: 96:1e:0e:47:cc:91:a8:e8:3f:2a:5e:66:4c:3a:18:c1:a3:32: f3:6e:77:47:40:71:6b:d7:c4:98:22:23:c4:c5:79:c6:bb:9b: 4b:12:41:4b:5b:62:27:58:d1:d2:7f:e6:71:b5:db:eb:3b:18: 36:e2:49:89:47:d8:29:fc:70:a2:6a:61:ee:01:85:88:26:f2: 8b:b6:41:78:4f:43:31:50:31:4f:b0:6d:6a:ff:0c:5d:23:b4: d9:49:11:00:63:4b:01:6d:00:3c:9a:e4:ca:73:d6:62:39:65: 9b:a3:ff:f1:26:ed:b7:a3:17:c6:91:f9:0d:15:4b:01:f8:e5: 1f:61:f7:a3:6b:1c:7c:7f:55:e6:38:e0:57:c3:d7:f1:ca:41: 29:b3:09:18:3d:e1:81:d9:3c:9d:f2:0f:16:d7:66:8d:2b:35: b1:30:ee:f8:43:79:44:ee:97:29:d5:29:f1:f9:ec:ec:da:46: 26:23:4f:f5:a1:b6:9c:78:ff:83:ff:a7:90:5c:8d:05:b8:39: 00:26:73:19:c9:c3:68:39:a1:22:54:71:ad:f1:bb:e3:e7:05: a8:3a:fe:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu75fWefMQkohYNeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwNjE2MDkyMloXDTI2MDEwNDE3MDkyMlowLzEtMCsGA1UEAxMk NDhiMDM4YTItMGUzMC00MjlmLWFkYWQtYTFkOTJhMGM2NjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTwhytQBYE7EKAWKTuKRrmPMVOUEyBrCzbac 2tsliCa/BC+SzJr/2l5dTeIC0TBejXUcO6Td+cjYEfhvDHxgy2fI+/CIzZVwyqv1 K0fUWjJ2/WjW2MsexBcv+AE0q9lkd8T025II6LQBS7dtMdeP/yYrdaQz2zKiPjuV q0ggEf8Jn3PzeS19MeARl5HvSfiw4rQb9dBtaKfUhjbk7ry0vx+/4L2ccHv1kfKo xtNetVMf0Ao+TAa0A10+ei1T8Goe8SXM4rTb8WnqQfhV0PPHFLA8wgjZZBN5QchD kHNntyADWsN1vOPQXcgBjup3DoOK+ZadzdtEI2zesjtey5g9+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpdWH/Ek1Qya2EDcLvroUf10sdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWI4YWQyOGQtMGQ0My0z ZDc0LWIwY2QtYzJjMjZkMGU1OGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw9C9z0ynsj3ZISgD/dGG4dV8RkWzFSgF9HftlCCE1w491ifpYeDkfM kajoPypeZkw6GMGjMvNud0dAcWvXxJgiI8TFeca7m0sSQUtbYidY0dJ/5nG12+s7 GDbiSYlH2Cn8cKJqYe4BhYgm8ou2QXhPQzFQMU+wbWr/DF0jtNlJEQBjSwFtADya 5Mpz1mI5ZZuj//Em7bejF8aR+Q0VSwH45R9h96NrHHx/VeY44FfD1/HKQSmzCRg9 4YHZPJ3yDxbXZo0rNbEw7vhDeUTulynVKfH57OzaRiYjT/Whtpx4/4P/p5BcjQW4 OQAmcxnJw2g5oSJUca3xu+PnBag6/jU= -----END CERTIFICATE-----Generated at Fri Oct 10 03:58:28 2025 by rpki-client