$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af5f0916-1baa-3f0f-b5af-c1f20106f7da.roa File: af5f0916-1baa-3f0f-b5af-c1f20106f7da.roa (raw, json) Hash identifier: 8zRkFYgiFA1fiWjtpGpAHCeYDZOQKdqssJfB7d1C8ts= Subject key identifier: 02:62:81:7A:E5:C3:9A:DB:60:5C:33:F6:59:69:39:B1:52:81:90:50 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B66B93537F0C9258311F75680 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af5f0916-1baa-3f0f-b5af-c1f20106f7da.roa Signing time: Fri 03 Oct 2025 17:33:19 +0000 ROA not before: Fri 03 Oct 2025 17:33:19 +0000 ROA not after: Thu 01 Jan 2026 18:33:19 +0000 asID: 23473 IP address blocks: 153.33.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:b9:35:37:f0:c9:25:83:11:f7:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 3 17:33:19 2025 GMT Not After : Jan 1 18:33:19 2026 GMT Subject: CN=ab33b5ff-10a7-41ff-82a7-b8d9db3b8ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:3e:1c:e9:20:1c:81:ab:df:74:d3:5b:bf: 14:e3:93:fd:56:d2:e3:52:9f:23:39:6d:b3:85:d5: 00:4f:08:a5:b4:06:0e:a0:2c:d1:d7:b7:ed:94:09: 43:9c:c0:b7:7d:8e:e8:40:97:56:81:c7:c5:22:83: 39:5e:34:f4:5b:9e:5a:33:46:e5:6c:c9:79:7b:27: 98:04:44:af:ca:c0:b9:94:d5:54:9b:3a:14:ba:d4: 40:0a:cf:82:30:a3:63:ad:e3:c7:4a:39:b4:68:10: f9:29:b6:6d:18:e4:40:78:e8:60:18:4a:e8:56:d0: 52:18:93:76:6e:4f:b9:08:04:d0:b3:db:32:73:8d: 2a:ea:d1:e5:cf:91:a5:f6:b6:94:99:6a:b8:e0:5b: 94:13:97:70:84:ed:4d:3f:62:fd:cb:7d:80:ca:19: 69:68:a1:8e:ba:e5:c8:17:52:4a:ab:d4:bc:b9:d5: 07:32:49:09:e9:35:ab:8d:37:b7:a2:f2:fb:99:4b: 54:7f:1c:d9:2b:ee:50:47:0d:a9:1b:0d:e1:af:7c: e5:08:2a:b0:9f:cf:30:5d:c5:93:5e:08:2f:9e:84: b2:6c:a8:b1:49:b5:58:34:02:05:d3:3d:45:85:c3: 2d:bc:90:3d:e7:da:4a:b5:1d:dd:ed:d5:57:e3:0f: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:62:81:7A:E5:C3:9A:DB:60:5C:33:F6:59:69:39:B1:52:81:90:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/af5f0916-1baa-3f0f-b5af-c1f20106f7da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:03:e1:f2:be:bd:93:10:89:38:bd:ee:ef:b4:56:8d:cd:93: ee:2e:f0:98:0a:d9:e8:bd:01:ea:e6:a3:9b:0c:ac:77:72:40: 88:42:6d:fd:ce:13:58:e0:20:7b:f5:9c:78:9c:c7:df:ae:2b: 7d:ae:f2:fa:bc:f8:9f:f3:bf:46:63:1b:64:d4:1a:d5:74:fb: 7d:b9:10:02:b5:64:fb:ee:00:03:9a:f7:f4:bd:39:c3:44:9f: e4:e3:38:e4:e7:d2:f7:9a:8f:fc:67:24:e9:db:8b:70:e6:3b: e6:9a:5a:09:66:57:94:9c:2d:4c:09:f2:9d:fe:78:08:03:be: 2d:df:8b:c4:a4:4a:11:f1:e6:1e:e8:c5:24:ef:f4:2f:0e:dd: 7b:e2:23:a2:2a:a3:4c:51:ce:0b:51:82:c2:f9:e0:d0:ed:d3: 72:03:be:71:2b:46:c1:18:da:1a:b2:10:9a:e8:7b:21:2f:ac: 9a:3a:70:a3:6c:8f:06:be:57:93:4b:09:e5:ae:91:6c:19:e6: 16:67:8d:cb:c7:48:38:0d:2f:6c:74:7a:0f:ef:27:20:8b:a0: 84:43:55:b4:5e:10:6f:13:e8:a4:5a:dc:dd:91:38:2d:62:67: 42:80:b7:3a:db:01:25:14:c5:80:21:6a:82:42:bd:e3:c1:a8: 21:34:74:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmuTU38MklgxH3VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwMzE3MzMxOVoXDTI2MDEwMTE4MzMxOVowLzEtMCsGA1UEAxMk YWIzM2I1ZmYtMTBhNy00MWZmLTgyYTctYjhkOWRiM2I4Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsc+HOkgHIGr33TTW78U45P9VtLjUp8jOW2z hdUATwiltAYOoCzR17ftlAlDnMC3fY7oQJdWgcfFIoM5XjT0W55aM0blbMl5eyeY BESvysC5lNVUmzoUutRACs+CMKNjrePHSjm0aBD5KbZtGORAeOhgGEroVtBSGJN2 bk+5CATQs9syc40q6tHlz5Gl9raUmWq44FuUE5dwhO1NP2L9y32AyhlpaKGOuuXI F1JKq9S8udUHMkkJ6TWrjTe3ovL7mUtUfxzZK+5QRw2pGw3hr3zlCCqwn88wXcWT XggvnoSybKixSbVYNAIF0z1FhcMtvJA959pKtR3d7dVX4w+OIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJigXrlw5rbYFwz9llpObFSgZBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYWY1ZjA5MTYtMWJhYS0z ZjBmLWI1YWYtYzFmMjAxMDZmN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMD4fK+vZMQiTi97u+0Vo3Nk+4u8JgK2ei9Aermo5sMrHdyQIhCbf3O E1jgIHv1nHicx9+uK32u8vq8+J/zv0ZjG2TUGtV0+325EAK1ZPvuAAOa9/S9OcNE n+TjOOTn0veaj/xnJOnbi3DmO+aaWglmV5ScLUwJ8p3+eAgDvi3fi8SkShHx5h7o xSTv9C8O3XviI6Iqo0xRzgtRgsL54NDt03IDvnErRsEY2hqyEJroeyEvrJo6cKNs jwa+V5NLCeWukWwZ5hZnjcvHSDgNL2x0eg/vJyCLoIRDVbReEG8T6KRa3N2ROC1i Z0KAtzrbASUUxYAhaoJCvePBqCE0dIk= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:40 2025 by rpki-client