$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0485cc04-0e74-3c8a-bffc-2e41b9857469.roa File: 0485cc04-0e74-3c8a-bffc-2e41b9857469.roa (raw, json) Hash identifier: sUWV3ScHveP6u2+RwFftpm7WSMUDo+wQc1e6lfe+XLI= Subject key identifier: 36:26:8E:C5:EB:8E:2F:66:53:BA:A4:18:83:A6:A1:F7:96:45:55:63 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B79D7EDEAFE5AC82BA7FB7100 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0485cc04-0e74-3c8a-bffc-2e41b9857469.roa Signing time: Fri 10 Oct 2025 13:55:35 +0000 ROA not before: Fri 10 Oct 2025 13:55:35 +0000 ROA not after: Thu 08 Jan 2026 14:55:35 +0000 asID: 23473 IP address blocks: 153.33.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:d7:ed:ea:fe:5a:c8:2b:a7:fb:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 13:55:35 2025 GMT Not After : Jan 8 14:55:35 2026 GMT Subject: CN=3886964d-5a62-45ed-b841-07a0724b245d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:c0:8c:01:53:c3:ac:15:41:7a:1e:e5:6d: ce:12:00:4f:88:11:6a:d4:e9:5a:85:74:13:7a:81: 4c:28:1e:96:bf:a2:d1:df:44:7d:8f:bc:00:ac:7f: ee:17:f2:17:48:5d:f6:46:67:21:2e:c1:da:0f:71: 1a:a5:79:9e:69:7c:ec:38:9f:e1:1e:8a:aa:16:ff: fb:d3:4b:83:e3:46:97:e5:97:c3:10:fd:53:37:1b: d4:05:d4:8c:22:45:77:80:5a:08:ec:ab:b3:6e:b3: 16:c4:4f:26:b2:0a:95:a0:23:ad:5e:b6:ae:e8:1a: 80:2d:0c:52:0b:6e:18:6c:73:7c:b1:03:ec:46:00: 07:dc:13:42:b1:4c:33:6c:23:15:70:5a:e5:72:0a: de:86:26:d2:3a:a9:2d:4f:01:a4:6f:b9:12:81:2f: b5:b3:75:e5:81:46:57:34:31:97:a2:d0:21:60:5f: 0d:dd:35:f6:62:d6:41:ae:e3:73:16:d4:19:cb:93: a0:4c:1c:e1:f7:d5:57:98:6a:cc:ad:b8:db:2f:91: 5f:70:37:38:6f:f1:61:0c:6c:72:9d:18:e3:72:4c: fb:29:57:be:bd:04:24:66:af:60:11:2e:4e:de:07: ee:55:ca:1a:07:c3:03:87:01:dd:07:d1:76:3e:be: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:26:8E:C5:EB:8E:2F:66:53:BA:A4:18:83:A6:A1:F7:96:45:55:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0485cc04-0e74-3c8a-bffc-2e41b9857469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:54:b5:73:dc:bb:e0:8f:dc:a1:46:64:6a:20:05:04:67:7e: fc:94:65:f9:6b:af:fd:40:3b:c6:dc:db:46:cb:6c:fc:01:96: 0b:99:c6:05:75:05:1d:ac:ac:9b:e5:0a:b2:25:3a:8d:ad:cd: 65:4a:61:f7:b3:23:78:2c:d2:4f:e6:bf:8d:86:49:f0:8c:62: 0e:ad:da:e6:7d:d5:f2:b0:09:66:34:87:42:09:0a:61:57:4d: e6:19:b3:b9:c2:7d:a3:de:9f:bb:61:e7:7f:98:28:65:55:ee: e0:63:35:69:b4:5a:02:c6:12:21:8a:ab:1a:2e:10:0f:ef:43: a2:63:fc:4e:56:48:f7:d1:7f:f8:77:d4:28:d1:6e:6c:ed:9c: 8c:9a:5a:c5:e3:fe:f0:4f:1d:8b:7f:85:1c:24:5d:9d:35:9f: 02:dc:fc:ec:f1:16:64:49:c4:a9:7a:d4:52:23:ac:8e:96:8c: 1c:de:68:64:1f:3e:4f:5a:5f:74:ba:9c:4a:5e:eb:51:ab:e7: 26:f3:17:d9:d4:5d:c2:c9:64:a9:14:53:a0:ab:67:2e:63:fa: 47:e1:05:b5:bf:c2:4d:0d:71:0d:b6:7a:cf:da:3f:61:11:90: ab:fd:5c:07:f8:fe:a9:e1:b3:24:88:86:c2:ce:e6:f2:76:07: 9a:ae:21:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt51+3q/lrIK6f7cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDEzNTUzNVoXDTI2MDEwODE0NTUzNVowLzEtMCsGA1UEAxMk Mzg4Njk2NGQtNWE2Mi00NWVkLWI4NDEtMDdhMDcyNGIyNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubzAjAFTw6wVQXoe5W3OEgBPiBFq1OlahXQT eoFMKB6Wv6LR30R9j7wArH/uF/IXSF32RmchLsHaD3EapXmeaXzsOJ/hHoqqFv/7 00uD40aX5ZfDEP1TNxvUBdSMIkV3gFoI7KuzbrMWxE8msgqVoCOtXrau6BqALQxS C24YbHN8sQPsRgAH3BNCsUwzbCMVcFrlcgrehibSOqktTwGkb7kSgS+1s3XlgUZX NDGXotAhYF8N3TX2YtZBruNzFtQZy5OgTBzh99VXmGrMrbjbL5FfcDc4b/FhDGxy nRjjckz7KVe+vQQkZq9gES5O3gfuVcoaB8MDhwHdB9F2Pr5qEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYmjsXrji9mU7qkGIOmofeWRVVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDQ4NWNjMDQtMGU3NC0z YzhhLWJmZmMtMmU0MWI5ODU3NDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhUtXPcu+CP3KFGZGogBQRnfvyUZflrr/1AO8bc20bLbPwBlguZxgV1 BR2srJvlCrIlOo2tzWVKYfezI3gs0k/mv42GSfCMYg6t2uZ91fKwCWY0h0IJCmFX TeYZs7nCfaPen7th53+YKGVV7uBjNWm0WgLGEiGKqxouEA/vQ6Jj/E5WSPfRf/h3 1CjRbmztnIyaWsXj/vBPHYt/hRwkXZ01nwLc/OzxFmRJxKl61FIjrI6WjBzeaGQf Pk9aX3S6nEpe61Gr5ybzF9nUXcLJZKkUU6CrZy5j+kfhBbW/wk0NcQ22es/aP2ER kKv9XAf4/qnhsySIhsLO5vJ2B5quISE= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:31 2025 by rpki-client