$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa File: 2a68d3e0-9c3a-3216-aec4-379da22a5892.roa (raw, json) Hash identifier: SNjo569orm9J73NrTvPUAknvqyYO+4QNwIGL7Qt156k= Subject key identifier: C6:6D:99:80:8C:1F:5D:40:70:CA:C2:8A:BC:05:30:EA:2F:22:9E:56 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A24169194F98A50C73CF480 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa Signing time: Fri 10 Oct 2025 16:29:02 +0000 ROA not before: Fri 10 Oct 2025 16:29:02 +0000 ROA not after: Thu 08 Jan 2026 17:29:02 +0000 asID: 23473 IP address blocks: 153.33.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:24:16:91:94:f9:8a:50:c7:3c:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 16:29:02 2025 GMT Not After : Jan 8 17:29:02 2026 GMT Subject: CN=dacad7be-2f62-489b-bddb-f33fc8ca4c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:47:ab:47:c6:9e:9a:f2:5e:7d:74:76:c4: 1b:8f:9a:b0:37:5d:51:5a:06:e6:e3:c3:52:86:0b: 62:00:a0:84:50:d4:04:c9:31:78:41:18:2e:56:76: aa:58:ad:33:ed:dd:72:2a:88:ed:6b:82:e1:7f:54: 6a:29:15:22:6e:af:da:9e:f3:c0:94:ea:07:8b:cb: 0f:c4:c5:86:ac:79:dd:12:7a:00:20:08:ec:af:1f: 0d:5a:62:fe:ce:92:27:2b:48:84:26:24:05:49:9c: 6b:32:0c:03:57:86:a4:06:3e:df:ff:0d:e6:64:24: 72:c6:64:ef:6a:87:38:c2:99:ea:87:38:8a:99:46: 98:8f:64:a2:6f:0d:53:7e:33:73:8a:db:ef:11:a6: 94:8e:53:80:23:d1:a0:84:02:3d:c0:e9:92:03:a4: fc:ab:88:af:fa:15:16:6c:e2:98:28:8c:4d:0b:b9: 5f:79:c3:25:99:e8:48:ec:3b:56:6f:c9:c3:0f:2c: 91:ba:62:b7:db:3a:49:a2:a3:5e:db:ab:8e:58:fd: 8a:9d:f2:05:6f:67:cf:11:2d:98:11:98:31:7e:02: 5f:25:98:49:30:78:e4:5f:bd:c4:f4:df:c4:5e:6e: a9:ac:6b:84:61:42:10:ef:90:e0:d5:a1:56:85:3c: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6D:99:80:8C:1F:5D:40:70:CA:C2:8A:BC:05:30:EA:2F:22:9E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a68d3e0-9c3a-3216-aec4-379da22a5892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e4:87:6a:d0:63:4e:9b:2f:7e:c7:d2:3b:a2:24:af:5b:78: ad:8e:ea:50:3d:92:53:a3:81:b2:9f:c7:fe:29:a4:16:3b:aa: db:6a:a5:2e:c0:5c:ad:be:b1:13:84:70:30:57:52:c5:e1:86: c6:63:04:0c:6c:f8:3c:5a:00:30:08:42:31:50:62:d9:12:90: 03:1f:7d:05:3a:c7:75:08:73:05:b9:b1:39:1c:90:c1:ca:74: 9b:f7:18:9b:00:1f:0b:8a:35:62:00:3c:f1:c9:7a:b5:23:84: 9f:5c:09:ab:c6:ea:c8:48:d2:8e:62:65:3a:19:ab:53:01:d1: cb:26:55:13:60:53:4a:0f:8e:13:cf:85:df:70:a4:40:b2:8d: d4:01:7c:55:8c:48:58:dc:95:dd:ee:b9:02:1b:8d:65:09:3a: 1b:1a:0f:76:63:c2:0c:57:87:0c:96:d9:b5:c3:fe:3c:80:38: 5f:9a:c6:f0:6b:10:b1:b6:00:6e:65:7e:cf:91:11:63:2d:95: cb:d8:ee:a9:e1:5e:63:df:b6:68:34:f6:17:d9:54:a1:39:03: 4d:88:7c:7a:ad:8c:17:c0:e7:04:35:54:f7:56:e8:51:80:a2: 29:15:23:cd:dd:20:9f:7f:cc:6e:70:7a:65:46:af:27:0b:8b: e3:56:66:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6JBaRlPmKUMc89IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE2MjkwMloXDTI2MDEwODE3MjkwMlowLzEtMCsGA1UEAxMk ZGFjYWQ3YmUtMmY2Mi00ODliLWJkZGItZjMzZmM4Y2E0YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqJHq0fGnpryXn10dsQbj5qwN11RWgbm48NS hgtiAKCEUNQEyTF4QRguVnaqWK0z7d1yKojta4Lhf1RqKRUibq/anvPAlOoHi8sP xMWGrHndEnoAIAjsrx8NWmL+zpInK0iEJiQFSZxrMgwDV4akBj7f/w3mZCRyxmTv aoc4wpnqhziKmUaYj2Sibw1TfjNzitvvEaaUjlOAI9GghAI9wOmSA6T8q4iv+hUW bOKYKIxNC7lfecMlmehI7DtWb8nDDyyRumK32zpJoqNe26uOWP2KnfIFb2fPES2Y EZgxfgJfJZhJMHjkX73E9N/EXm6prGuEYUIQ75Dg1aFWhTz9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZtmYCMH11AcMrCirwFMOovIp5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmE2OGQzZTAtOWMzYS0z MjE2LWFlYzQtMzc5ZGEyMmE1ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSH2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3kh2rQY06bL37H0juiJK9beK2O6lA9klOjgbKfx/4ppBY7qttqpS7A XK2+sROEcDBXUsXhhsZjBAxs+DxaADAIQjFQYtkSkAMffQU6x3UIcwW5sTkckMHK dJv3GJsAHwuKNWIAPPHJerUjhJ9cCavG6shI0o5iZToZq1MB0csmVRNgU0oPjhPP hd9wpECyjdQBfFWMSFjcld3uuQIbjWUJOhsaD3ZjwgxXhwyW2bXD/jyAOF+axvBr ELG2AG5lfs+REWMtlcvY7qnhXmPftmg09hfZVKE5A02IfHqtjBfA5wQ1VPdW6FGA oikVI83dIJ9/zG5wemVGrycLi+NWZoY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:15 2025 by rpki-client