$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa File: dba58025-2a8f-3dfd-87db-07fd507151e0.roa (raw, json) Hash identifier: H5AYtem1wOX9WfCR0ST0+/hBxIoYwl25UOLgp+ARxkg= Subject key identifier: 91:DA:CA:E9:00:D3:56:B0:C4:2F:1B:2A:A7:D5:06:1F:22:41:F2:14 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B66A9B3D07E2C9A6828DD6400 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa Signing time: Fri 03 Oct 2025 17:02:05 +0000 ROA not before: Fri 03 Oct 2025 17:02:05 +0000 ROA not after: Thu 01 Jan 2026 18:02:05 +0000 asID: 23473 IP address blocks: 153.33.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:a9:b3:d0:7e:2c:9a:68:28:dd:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 3 17:02:05 2025 GMT Not After : Jan 1 18:02:05 2026 GMT Subject: CN=a9af0c84-7436-402d-95bf-43598b515719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ab:64:38:b6:66:ac:9e:4e:b5:ae:5c:e7:4c: 04:30:01:06:60:66:f0:51:a9:db:58:8c:ee:91:7c: 04:d1:e2:d6:b0:2a:e0:2e:8b:6c:0f:ec:9d:52:be: 06:2e:ba:ba:64:2c:19:20:8b:f5:91:3d:f7:b2:3c: bc:49:3c:ec:c8:eb:74:70:63:17:85:71:40:5b:8d: b8:4c:79:70:17:b4:dc:f9:0d:ce:9f:11:e1:35:11: cf:4e:54:0a:e0:5e:d9:f1:d8:ca:03:99:83:dc:78: 6e:b3:3b:01:23:58:ca:11:49:6c:50:e5:7f:ce:e6: 72:7a:63:c6:30:40:2d:22:0f:42:ab:43:5c:77:9d: ec:20:23:6f:14:97:64:3a:a7:7b:16:a2:44:0f:03: 9b:c3:1b:3b:23:19:bf:e1:29:79:57:41:2a:c4:59: c1:dd:33:1e:cd:8c:7a:02:c8:a3:3c:68:6c:48:e4: 70:56:96:5e:10:f6:d9:f8:f1:33:47:d6:75:eb:6e: 14:57:db:13:0c:29:07:0e:62:76:16:ac:f3:1d:c5: 0c:53:bb:e3:8d:4e:f4:3c:8d:28:4b:09:37:a6:19: 20:83:fa:c8:78:fc:3e:b2:21:9c:a5:81:5c:d5:ee: 0f:94:c0:df:a4:1a:ec:db:4e:81:85:f6:92:a1:37: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:CA:E9:00:D3:56:B0:C4:2F:1B:2A:A7:D5:06:1F:22:41:F2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dba58025-2a8f-3dfd-87db-07fd507151e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fa:0c:55:83:cb:48:b8:8b:77:8c:a3:ca:fc:e4:f3:dc:36: 57:ce:c2:55:78:bf:60:23:84:b9:55:72:58:dc:2d:ef:4c:a9: de:bf:a0:55:06:e0:8b:e4:88:9d:3f:e8:fe:43:98:da:3c:5e: fd:a8:b9:cb:7a:d7:a0:65:96:a8:98:35:c6:04:4c:d9:e2:1d: f7:38:09:7a:d4:f3:77:b3:f2:a2:5e:25:3c:41:ae:af:93:c7: 94:d9:be:ae:9f:b1:5e:82:41:4a:9b:d4:93:1e:10:58:23:02: 4b:a0:14:be:ec:3d:82:79:3a:e6:10:56:17:74:c8:84:8b:a9: 6b:8e:81:41:2f:1a:7a:54:58:d2:a7:13:1e:a9:a3:d4:51:0e: 56:54:56:b2:b6:3a:dc:2f:3b:65:fa:67:fe:e6:5b:fd:c3:dc: 46:1b:d9:d7:b7:2b:c2:04:80:6c:c9:45:ae:c8:80:77:0e:01: b5:9f:34:c5:42:47:0e:bf:60:9f:ac:bc:90:1b:7d:42:27:7d: 30:f2:ac:fb:9c:93:67:3a:cf:ad:7a:f8:f5:6f:25:e1:ac:12: 26:93:d7:c3:8d:ba:47:d1:11:40:94:78:e7:8c:66:30:39:e6: e5:ed:65:e5:7c:e2:17:49:07:c4:16:ad:b5:df:ce:75:1a:3a: 30:2e:58:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmqbPQfiyaaCjdZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwMzE3MDIwNVoXDTI2MDEwMTE4MDIwNVowLzEtMCsGA1UEAxMk YTlhZjBjODQtNzQzNi00MDJkLTk1YmYtNDM1OThiNTE1NzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KtkOLZmrJ5Ota5c50wEMAEGYGbwUanbWIzu kXwE0eLWsCrgLotsD+ydUr4GLrq6ZCwZIIv1kT33sjy8STzsyOt0cGMXhXFAW424 THlwF7Tc+Q3OnxHhNRHPTlQK4F7Z8djKA5mD3HhuszsBI1jKEUlsUOV/zuZyemPG MEAtIg9Cq0Ncd53sICNvFJdkOqd7FqJEDwObwxs7Ixm/4Sl5V0EqxFnB3TMezYx6 AsijPGhsSORwVpZeEPbZ+PEzR9Z1624UV9sTDCkHDmJ2FqzzHcUMU7vjjU70PI0o Swk3phkgg/rIePw+siGcpYFc1e4PlMDfpBrs206BhfaSoTefJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHayukA01awxC8bKqfVBh8iQfIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZGJhNTgwMjUtMmE4Zi0z ZGZkLTg3ZGItMDdmZDUwNzE1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz6DFWDy0i4i3eMo8r85PPcNlfOwlV4v2AjhLlVcljcLe9Mqd6/oFUG 4IvkiJ0/6P5DmNo8Xv2ouct616BllqiYNcYETNniHfc4CXrU83ez8qJeJTxBrq+T x5TZvq6fsV6CQUqb1JMeEFgjAkugFL7sPYJ5OuYQVhd0yISLqWuOgUEvGnpUWNKn Ex6po9RRDlZUVrK2OtwvO2X6Z/7mW/3D3EYb2de3K8IEgGzJRa7IgHcOAbWfNMVC Rw6/YJ+svJAbfUInfTDyrPuck2c6z616+PVvJeGsEiaT18ONukfREUCUeOeMZjA5 5uXtZeV84hdJB8QWrbXfznUaOjAuWJ4= -----END CERTIFICATE-----Generated at Fri Oct 10 03:58:31 2025 by rpki-client