$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd23d12c-d686-395c-ab94-64a7966c1e53.roa File: cd23d12c-d686-395c-ab94-64a7966c1e53.roa (raw, json) Hash identifier: 18jE4c/LGHkck0qSa06m4ss2XQ0N/OhomL5+sBAzuxo= Subject key identifier: 89:BA:84:59:B2:DE:9F:6B:52:B7:D6:73:64:AF:3C:55:09:8B:2C:F1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B6ED637E0F1A3323AC235C380 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd23d12c-d686-395c-ab94-64a7966c1e53.roa Signing time: Mon 06 Oct 2025 15:18:14 +0000 ROA not before: Mon 06 Oct 2025 15:18:14 +0000 ROA not after: Sun 04 Jan 2026 16:18:14 +0000 asID: 23473 IP address blocks: 153.33.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:d6:37:e0:f1:a3:32:3a:c2:35:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 6 15:18:14 2025 GMT Not After : Jan 4 16:18:14 2026 GMT Subject: CN=947ca852-2aa4-42e1-99b6-2762521cefb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:b0:ec:d7:70:c8:33:12:65:7b:18:85:56: 48:e4:7c:db:69:a6:ac:0b:f7:36:e5:12:21:66:2e: 61:c1:d1:dd:b9:d9:99:5f:65:fb:5d:ac:07:d3:7e: ea:67:32:77:33:5d:fd:7a:42:93:fa:c9:45:1a:f9: 5f:71:0a:28:f9:8d:23:b5:ec:2c:38:79:17:7e:25: 10:23:e5:0b:9c:6b:a6:c3:fa:ab:7b:a4:d8:19:63: 96:74:56:cb:d3:2b:7e:5d:15:6c:ed:b5:95:38:8a: 00:d1:fb:f6:5c:3e:0e:71:c4:77:ae:f4:41:4a:5e: 5b:aa:b2:14:9b:7b:cb:09:72:1c:82:df:0b:a4:5e: 46:4e:ba:24:ce:ce:9e:9d:f2:13:3f:fb:28:0d:93: 98:6c:ab:05:b1:9b:05:31:87:92:04:3d:d6:53:9b: 02:45:26:fc:63:97:9d:6d:41:e0:9a:4f:58:43:6d: 85:3d:f3:26:dd:72:45:f3:3d:b1:c0:27:a8:8e:99: 02:c3:20:bc:9d:b4:3e:7f:fa:ce:f3:76:ef:ce:c7: f0:d8:7c:51:1a:2f:a3:94:3c:0b:80:9d:6e:58:78: 03:51:c9:7c:a8:17:03:d3:4d:c4:08:ba:12:62:de: 14:cd:a9:0c:ea:1a:b1:3e:89:0c:61:88:46:50:6a: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BA:84:59:B2:DE:9F:6B:52:B7:D6:73:64:AF:3C:55:09:8B:2C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd23d12c-d686-395c-ab94-64a7966c1e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:58:fd:a6:09:30:b4:e7:b3:ca:14:81:60:23:32:99:2f:35: 3e:38:b0:10:4c:a5:4c:87:76:2a:ee:22:6c:34:89:58:66:68: df:f3:d8:bc:13:b9:23:41:6c:f9:e5:1e:62:4c:6c:a2:d7:9f: 31:4e:00:b0:ae:d7:92:9b:b7:88:32:1c:ff:84:64:19:68:61: ea:f6:0a:24:11:6a:fe:4c:1e:9e:5b:45:35:5c:cd:35:3d:fa: 6c:b7:a8:83:58:0d:84:b9:36:3a:49:7a:c5:0f:46:ca:22:ae: 66:b1:21:5b:ed:b7:10:ec:0f:75:32:ce:49:59:28:e3:b3:12: 53:06:10:32:7f:7b:51:85:59:21:4b:28:5a:20:8a:ef:4b:f2: 45:05:21:ed:98:5d:25:91:d5:57:e2:1b:3e:bc:13:4f:52:40: e7:54:64:be:c2:df:64:ef:bd:af:ea:aa:de:11:70:d2:07:ad: ac:39:50:09:25:29:da:7c:0e:72:48:19:2f:a3:7f:5d:ff:6b: 8e:a2:7b:68:e2:23:af:0f:24:9f:20:7e:24:78:28:b0:5e:60: d4:45:02:c9:76:bf:a3:dd:c7:15:0b:f2:83:6f:01:2c:d3:65: e0:e6:ee:87:e2:6a:0c:90:bb:c1:66:86:dc:09:66:c9:50:41: a6:73:d0:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu1jfg8aMyOsI1w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwNjE1MTgxNFoXDTI2MDEwNDE2MTgxNFowLzEtMCsGA1UEAxMk OTQ3Y2E4NTItMmFhNC00MmUxLTk5YjYtMjc2MjUyMWNlZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0+w7NdwyDMSZXsYhVZI5HzbaaasC/c25RIh Zi5hwdHdudmZX2X7XawH037qZzJ3M139ekKT+slFGvlfcQoo+Y0jtewsOHkXfiUQ I+ULnGumw/qre6TYGWOWdFbL0yt+XRVs7bWVOIoA0fv2XD4OccR3rvRBSl5bqrIU m3vLCXIcgt8LpF5GTrokzs6enfITP/soDZOYbKsFsZsFMYeSBD3WU5sCRSb8Y5ed bUHgmk9YQ22FPfMm3XJF8z2xwCeojpkCwyC8nbQ+f/rO83bvzsfw2HxRGi+jlDwL gJ1uWHgDUcl8qBcD003ECLoSYt4UzakM6hqxPokMYYhGUGrTcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm6hFmy3p9rUrfWc2SvPFUJiyzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2QyM2QxMmMtZDY4Ni0z OTVjLWFiOTQtNjRhNzk2NmMxZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRY/aYJMLTns8oUgWAjMpkvNT44sBBMpUyHdiruImw0iVhmaN/z2LwT uSNBbPnlHmJMbKLXnzFOALCu15Kbt4gyHP+EZBloYer2CiQRav5MHp5bRTVczTU9 +my3qINYDYS5NjpJesUPRsoirmaxIVvttxDsD3UyzklZKOOzElMGEDJ/e1GFWSFL KFogiu9L8kUFIe2YXSWR1VfiGz68E09SQOdUZL7C32Tvva/qqt4RcNIHraw5UAkl Kdp8DnJIGS+jf13/a46ie2jiI68PJJ8gfiR4KLBeYNRFAsl2v6PdxxUL8oNvASzT ZeDm7ofiagyQu8FmhtwJZslQQaZz0Ps= -----END CERTIFICATE-----Generated at Fri Oct 10 03:46:46 2025 by rpki-client