$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/227708f3-5d43-3307-b896-e0f0fffdb617.roa File: 227708f3-5d43-3307-b896-e0f0fffdb617.roa (raw, json) Hash identifier: taUnQWEwFgK01vDxgEGgHgsWKsX7Fxv5AWZCPIu/KMU= Subject key identifier: 95:F6:12:9E:09:64:6B:31:3B:61:1A:99:9B:3C:0C:BD:7A:52:67:01 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A1BB110DBBA2996D09FBFC0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/227708f3-5d43-3307-b896-e0f0fffdb617.roa Signing time: Fri 10 Oct 2025 16:12:07 +0000 ROA not before: Fri 10 Oct 2025 16:12:07 +0000 ROA not after: Thu 08 Jan 2026 17:12:07 +0000 asID: 23473 IP address blocks: 153.33.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:1b:b1:10:db:ba:29:96:d0:9f:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 16:12:07 2025 GMT Not After : Jan 8 17:12:07 2026 GMT Subject: CN=e0e1707e-c90b-4f0e-8c89-d8b2a6a0e34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:8c:85:43:36:99:8b:26:0f:5a:08:96:5f: e1:65:17:d5:b0:2d:8f:82:de:35:25:cc:a5:e8:82: 5b:fd:cb:f9:1b:85:e5:aa:0b:57:71:57:a8:6f:39: bb:f4:eb:ba:88:a7:7e:d7:d9:4b:5c:83:d3:6c:85: ed:a5:99:51:1f:8a:e8:63:aa:a4:98:8f:06:e3:f4: 64:a4:f8:58:bf:ce:01:cf:69:55:8a:fa:35:23:31: ce:35:94:9e:62:27:85:b0:d9:9d:2f:ef:bc:49:88: 1f:89:e8:88:88:ef:82:a5:64:10:5c:fd:af:d9:66: 5a:19:83:36:94:7b:2d:d9:f5:0b:54:94:a5:a7:31: 65:70:1a:55:7c:2b:bc:be:4f:2f:f7:31:1d:b8:4e: 1b:5a:82:a8:3c:68:96:07:e8:e1:58:ba:45:b8:e0: da:6a:cc:98:55:d8:0a:6c:7c:76:5d:21:d9:72:a3: 90:93:4d:75:b2:f5:f3:83:b5:f4:a5:bd:5f:5f:5d: 2a:c0:4a:c2:23:52:ef:0b:df:7a:f5:c2:d5:a6:de: 7e:41:4f:3b:db:23:46:aa:e4:e9:fc:85:e1:97:b6: aa:43:69:55:fa:53:80:29:e1:5f:b9:b8:6e:9a:c2: 20:1c:1b:7e:a4:f8:0b:93:ee:88:49:a1:b5:6b:05: 48:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:12:9E:09:64:6B:31:3B:61:1A:99:9B:3C:0C:BD:7A:52:67:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/227708f3-5d43-3307-b896-e0f0fffdb617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:98:4e:be:ef:56:7b:47:6e:3a:a7:9b:49:53:42:21:ca:12: 50:67:80:83:cc:56:eb:f4:70:4a:61:e7:b5:2f:90:31:a3:1c: 29:5d:8a:14:70:41:69:12:c6:84:f0:00:5a:32:1a:c4:79:dc: 52:ac:ba:09:24:51:4f:e7:a9:5b:15:72:08:59:97:83:d3:1e: 41:ca:70:82:d1:33:9d:bf:62:50:c1:a7:20:90:f5:22:c0:aa: de:ee:c0:c2:5f:2d:ee:1c:75:32:88:53:ba:44:6e:64:c2:64: dc:1a:2a:78:a1:d0:20:71:78:be:4a:76:6d:d4:20:db:5c:54: 55:06:6c:02:fe:b7:46:11:25:f9:05:a3:66:54:50:0d:69:d6: d9:5d:59:49:e7:0d:59:4b:cd:9c:61:15:3a:dc:a5:0f:b6:d1: d8:9a:bf:67:09:dc:8e:26:7b:f6:26:9a:28:06:cc:38:23:83: dc:f3:1a:7b:d0:07:8b:f9:c9:06:66:80:be:b3:80:e5:51:85: e6:c2:01:dc:59:9e:8d:4f:d9:e0:c1:79:4b:1e:86:12:2e:80: e6:fb:eb:f3:fb:32:f5:02:0a:4d:fd:70:d6:fa:ba:72:04:12: 1e:ca:02:b5:ac:2c:77:20:dd:a0:9a:67:76:07:52:42:7e:c1: 48:f5:c3:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6G7EQ27opltCfv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE2MTIwN1oXDTI2MDEwODE3MTIwN1owLzEtMCsGA1UEAxMk ZTBlMTcwN2UtYzkwYi00ZjBlLThjODktZDhiMmE2YTBlMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVWMhUM2mYsmD1oIll/hZRfVsC2Pgt41Jcyl 6IJb/cv5G4XlqgtXcVeobzm79Ou6iKd+19lLXIPTbIXtpZlRH4roY6qkmI8G4/Rk pPhYv84Bz2lVivo1IzHONZSeYieFsNmdL++8SYgfieiIiO+CpWQQXP2v2WZaGYM2 lHst2fULVJSlpzFlcBpVfCu8vk8v9zEduE4bWoKoPGiWB+jhWLpFuODaasyYVdgK bHx2XSHZcqOQk011svXzg7X0pb1fX10qwErCI1LvC9969cLVpt5+QU872yNGquTp /IXhl7aqQ2lV+lOAKeFfubhumsIgHBt+pPgLk+6ISaG1awVIQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX2Ep4JZGsxO2EamZs8DL16UmcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjI3NzA4ZjMtNWQ0My0z MzA3LWI4OTYtZTBmMGZmZmRiNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWYTr7vVntHbjqnm0lTQiHKElBngIPMVuv0cEph57UvkDGjHCldihRw QWkSxoTwAFoyGsR53FKsugkkUU/nqVsVcghZl4PTHkHKcILRM52/YlDBpyCQ9SLA qt7uwMJfLe4cdTKIU7pEbmTCZNwaKnih0CBxeL5Kdm3UINtcVFUGbAL+t0YRJfkF o2ZUUA1p1tldWUnnDVlLzZxhFTrcpQ+20diav2cJ3I4me/YmmigGzDgjg9zzGnvQ B4v5yQZmgL6zgOVRhebCAdxZno1P2eDBeUsehhIugOb76/P7MvUCCk39cNb6unIE Eh7KArWsLHcg3aCaZ3YHUkJ+wUj1w/A= -----END CERTIFICATE-----Generated at Mon Oct 20 23:03:44 2025 by rpki-client