$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bdf7854c-94d9-37c2-8638-226878759e86.roa File: bdf7854c-94d9-37c2-8638-226878759e86.roa (raw, json) Hash identifier: JFSYx2B4PoPSVPF1sfP9sGcTnahqv9p0bYnd0fgXAI4= Subject key identifier: AC:1A:03:FC:40:BC:AD:7C:00:92:A1:4B:D0:2E:56:ED:9D:29:E1:AD Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B66B10E12FC830A7CD40C88C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bdf7854c-94d9-37c2-8638-226878759e86.roa Signing time: Fri 03 Oct 2025 17:16:54 +0000 ROA not before: Fri 03 Oct 2025 17:16:54 +0000 ROA not after: Thu 01 Jan 2026 18:16:54 +0000 asID: 23473 IP address blocks: 153.33.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:b1:0e:12:fc:83:0a:7c:d4:0c:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 3 17:16:54 2025 GMT Not After : Jan 1 18:16:54 2026 GMT Subject: CN=94db9c33-592b-45e6-b5f9-4bcd613753a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:c7:c3:7c:05:7b:67:8b:30:d9:3d:1e:b6: 71:28:58:7f:3b:17:8e:c3:ce:2d:9b:f1:74:a4:80: 19:ca:fd:be:f3:f8:1b:d2:be:8b:8f:21:26:4d:7b: 27:20:24:d2:73:01:c0:4d:4e:fb:58:60:84:62:4a: f5:3a:77:5b:e5:a8:0e:dc:75:97:3d:22:44:a8:d0: 71:46:57:c8:f5:49:13:2a:e8:5b:e4:0c:23:d8:52: 6e:36:1a:11:cc:df:76:9f:50:54:38:12:d9:a5:5a: 89:75:fd:ec:95:8a:95:d3:d5:88:45:79:1a:b5:ef: 62:72:e6:c5:00:d4:ae:b0:f5:27:7b:e3:cd:15:b7: 80:cd:1c:9f:98:37:9e:39:7c:78:4c:e3:df:80:38: 7b:6f:eb:4e:cf:8a:30:a6:17:44:02:86:a9:93:8f: 58:a1:0d:14:1b:77:4a:18:b0:0a:fe:1a:88:a0:d9: 0e:6d:9f:9c:9f:30:79:76:0b:56:3e:4c:53:38:8b: 42:e0:b6:96:53:96:a3:aa:6c:90:cd:bd:7d:1f:1f: e1:55:e6:6b:51:09:39:b0:e0:d4:ca:fe:7c:59:76: 39:39:b6:13:93:60:9c:97:3f:b2:50:dc:ed:d3:54: 3b:1f:d8:d0:68:e0:db:a3:2e:f8:59:e7:eb:af:c6: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1A:03:FC:40:BC:AD:7C:00:92:A1:4B:D0:2E:56:ED:9D:29:E1:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bdf7854c-94d9-37c2-8638-226878759e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:43:79:94:42:eb:4c:af:0f:2b:23:cd:ab:c2:f3:e0:11:0a: 3b:8f:04:83:7a:f0:c2:5e:44:87:bb:ea:84:23:25:2a:33:59: 79:dd:ef:5d:30:33:49:1e:9f:f0:46:d2:eb:80:bb:16:71:95: 48:f7:b9:1d:1e:4b:37:b8:ae:36:91:6a:d0:e7:4f:08:d8:4e: 81:22:66:27:eb:80:d3:de:dc:38:23:e7:3b:2b:a3:ce:21:c1: bb:12:ff:34:14:38:ce:61:fe:59:56:05:ad:9b:e2:0e:8b:72: de:fe:6a:45:71:f2:91:f1:e6:45:56:bd:3f:1a:cd:a2:a1:a0: cd:6a:cd:40:ce:e1:26:a7:5a:92:42:e2:6b:ff:2f:35:49:95: de:fd:48:c5:a1:23:6a:2c:22:00:7a:a9:a3:75:7e:c2:76:3a: da:59:28:26:5c:9c:0d:f7:2c:8f:59:20:76:c0:63:09:2d:d6: 01:38:6c:27:91:61:6e:46:aa:ba:9f:92:31:30:b4:5a:41:ac: 89:cd:00:30:6a:20:5b:2c:1b:1f:f0:65:e3:cb:2c:a0:a6:81: 1c:28:6c:a6:7c:6e:6a:fa:b3:95:94:99:6c:f6:93:14:91:05: de:bf:1b:e9:8e:8d:3b:35:3f:8f:a0:fc:1f:55:4e:a2:31:f1: a4:12:41:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmsQ4S/IMKfNQMiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwMzE3MTY1NFoXDTI2MDEwMTE4MTY1NFowLzEtMCsGA1UEAxMk OTRkYjljMzMtNTkyYi00NWU2LWI1ZjktNGJjZDYxMzc1M2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtarHw3wFe2eLMNk9HrZxKFh/OxeOw84tm/F0 pIAZyv2+8/gb0r6LjyEmTXsnICTScwHATU77WGCEYkr1Ondb5agO3HWXPSJEqNBx RlfI9UkTKuhb5Awj2FJuNhoRzN92n1BUOBLZpVqJdf3slYqV09WIRXkate9icubF ANSusPUne+PNFbeAzRyfmDeeOXx4TOPfgDh7b+tOz4owphdEAoapk49YoQ0UG3dK GLAK/hqIoNkObZ+cnzB5dgtWPkxTOItC4LaWU5ajqmyQzb19Hx/hVeZrUQk5sODU yv58WXY5ObYTk2Cclz+yUNzt01Q7H9jQaODboy74Wefrr8Y8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwaA/xAvK18AJKhS9AuVu2dKeGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmRmNzg1NGMtOTRkOS0z N2MyLTg2MzgtMjI2ODc4NzU5ZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBDeZRC60yvDysjzavC8+ARCjuPBIN68MJeRIe76oQjJSozWXnd710w M0ken/BG0uuAuxZxlUj3uR0eSze4rjaRatDnTwjYToEiZifrgNPe3Dgj5zsro84h wbsS/zQUOM5h/llWBa2b4g6Lct7+akVx8pHx5kVWvT8azaKhoM1qzUDO4SanWpJC 4mv/LzVJld79SMWhI2osIgB6qaN1fsJ2OtpZKCZcnA33LI9ZIHbAYwkt1gE4bCeR YW5GqrqfkjEwtFpBrInNADBqIFssGx/wZePLLKCmgRwobKZ8bmr6s5WUmWz2kxSR Bd6/G+mOjTs1P4+g/B9VTqIx8aQSQRI= -----END CERTIFICATE-----Generated at Fri Oct 10 03:50:49 2025 by rpki-client