$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/da7a7b19-55e2-30bf-91a7-dfac913269bf.roa File: da7a7b19-55e2-30bf-91a7-dfac913269bf.roa (raw, json) Hash identifier: vTJGmkS/96aO9qqHuKuf6rnBLyowg0TlxWw8ebuwOhU= Subject key identifier: BF:E0:8C:D2:70:63:60:53:70:6E:E3:BF:D6:DC:12:55:4F:4E:93:5A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7731F79E1D649060988FA2C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/da7a7b19-55e2-30bf-91a7-dfac913269bf.roa Signing time: Thu 09 Oct 2025 15:09:34 +0000 ROA not before: Thu 09 Oct 2025 15:09:34 +0000 ROA not after: Wed 07 Jan 2026 16:09:34 +0000 asID: 23473 IP address blocks: 153.33.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:31:f7:9e:1d:64:90:60:98:8f:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 9 15:09:34 2025 GMT Not After : Jan 7 16:09:34 2026 GMT Subject: CN=bed97efa-4e92-4f46-a5b2-8405ea3a4013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:88:a8:79:9c:8e:ff:c0:15:aa:94:6c:33: 09:0c:7c:65:12:31:c3:54:e6:51:64:b5:4b:be:06: de:ff:5d:fd:84:21:76:4e:7b:8b:1b:01:f5:32:c3: 9b:74:cd:76:5d:a1:c8:30:35:a6:f8:63:2d:e1:43: 98:df:83:11:ea:07:64:d2:8f:4e:e3:7b:3c:8c:1c: 21:e3:47:5d:62:0d:8b:d1:92:91:3e:60:75:f1:97: a1:a1:77:f3:80:15:f2:a9:f4:db:66:f4:18:72:2c: ce:02:30:ac:7a:8c:d8:52:6b:a7:ee:dd:70:8f:f6: d3:1f:8b:ed:9d:77:39:83:0c:35:a4:38:9c:79:7c: c4:d3:da:2e:76:d3:d6:f5:f5:5a:ce:db:2b:0a:de: 62:b7:e9:e4:dd:34:05:ee:41:38:9e:a3:84:4e:9c: d7:cb:93:21:79:99:69:b6:c4:2a:4f:19:fc:96:a8: d0:3f:fe:92:0c:91:4c:4c:d3:1e:74:b6:fb:38:aa: 61:e8:d1:64:5b:a1:4e:66:70:6b:9f:1e:c8:ed:03: 06:b5:ba:45:07:b7:52:1d:d2:58:d1:70:a7:ea:dd: bb:b6:b8:ac:64:8c:b8:c1:9f:e6:0e:89:07:a5:3a: fa:3b:1d:dd:c4:c3:ba:e0:71:1c:a2:9e:f2:ef:7d: 20:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E0:8C:D2:70:63:60:53:70:6E:E3:BF:D6:DC:12:55:4F:4E:93:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/da7a7b19-55e2-30bf-91a7-dfac913269bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cf:3d:60:2c:7e:3b:bc:a3:03:9b:da:73:3a:48:c1:1d:eb: d3:98:8b:87:91:ff:79:73:69:7a:56:df:32:26:65:bd:56:25: 6d:f3:d7:59:98:72:e7:d0:49:71:d4:63:73:58:81:81:60:8e: d8:10:4d:ad:41:21:36:1d:73:77:af:30:8c:94:0f:5c:1e:c8: 0f:ee:b9:c1:68:8f:c2:5a:a4:cc:c7:c3:c1:9d:a0:48:fd:c9: d1:25:7f:ee:61:51:f3:30:ce:39:e0:ec:b7:ff:c4:4d:13:77: 89:80:bb:05:c4:5f:af:08:b2:36:38:fd:79:d6:de:0d:0b:5e: 6a:c3:d1:7c:5a:de:63:83:db:67:b0:f3:28:aa:cd:75:fa:4c: 2b:32:4c:74:22:fb:be:20:ee:ae:db:a1:56:b2:93:79:54:64: fe:ae:b4:11:e2:e7:eb:20:69:71:a7:02:c6:13:76:f7:50:d0: 9b:7b:b4:a6:97:52:df:93:7a:a2:6d:ee:a8:16:0e:22:a7:06: 81:d5:46:6e:5b:8d:27:c5:00:fe:f3:90:ac:45:23:fc:f7:3e: 32:74:44:14:e5:28:31:50:a9:75:6c:e7:5f:0d:9e:04:aa:39: dd:d9:a5:87:ef:e2:12:a2:8a:cf:52:94:57:cc:50:b8:ac:20: d6:37:e3:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3MfeeHWSQYJiPosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwOTE1MDkzNFoXDTI2MDEwNzE2MDkzNFowLzEtMCsGA1UEAxMk YmVkOTdlZmEtNGU5Mi00ZjQ2LWE1YjItODQwNWVhM2E0MDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPiIqHmcjv/AFaqUbDMJDHxlEjHDVOZRZLVL vgbe/139hCF2TnuLGwH1MsObdM12XaHIMDWm+GMt4UOY34MR6gdk0o9O43s8jBwh 40ddYg2L0ZKRPmB18ZehoXfzgBXyqfTbZvQYcizOAjCseozYUmun7t1wj/bTH4vt nXc5gww1pDiceXzE09oudtPW9fVaztsrCt5it+nk3TQF7kE4nqOETpzXy5MheZlp tsQqTxn8lqjQP/6SDJFMTNMedLb7OKph6NFkW6FOZnBrnx7I7QMGtbpFB7dSHdJY 0XCn6t27trisZIy4wZ/mDokHpTr6Ox3dxMO64HEcop7y730gjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/gjNJwY2BTcG7jv9bcElVPTpNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGE3YTdiMTktNTVlMi0z MGJmLTkxYTctZGZhYzkxMzI2OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjPPWAsfju8owOb2nM6SMEd69OYi4eR/3lzaXpW3zImZb1WJW3z11mY cufQSXHUY3NYgYFgjtgQTa1BITYdc3evMIyUD1weyA/uucFoj8JapMzHw8GdoEj9 ydElf+5hUfMwzjng7Lf/xE0Td4mAuwXEX68IsjY4/XnW3g0LXmrD0Xxa3mOD22ew 8yiqzXX6TCsyTHQi+74g7q7boVayk3lUZP6utBHi5+sgaXGnAsYTdvdQ0Jt7tKaX Ut+TeqJt7qgWDiKnBoHVRm5bjSfFAP7zkKxFI/z3PjJ0RBTlKDFQqXVs518NngSq Od3ZpYfv4hKiis9SlFfMULisINY34xY= -----END CERTIFICATE-----Generated at Fri Oct 10 03:49:25 2025 by rpki-client