$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/481abaaf-bbea-33e0-9c47-ac42e7f2c2ad.roa File: 481abaaf-bbea-33e0-9c47-ac42e7f2c2ad.roa (raw, json) Hash identifier: dLDSA1NnAwdsPrUU46sctsFcPvztbFtYU2nv3QRuMuk= Subject key identifier: 47:52:1E:EE:20:E1:0A:F7:3D:7F:B4:69:04:A4:81:DE:B7:AB:7E:14 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A0AF4434B054C5E9BE27580 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/481abaaf-bbea-33e0-9c47-ac42e7f2c2ad.roa Signing time: Fri 10 Oct 2025 15:38:23 +0000 ROA not before: Fri 10 Oct 2025 15:38:23 +0000 ROA not after: Thu 08 Jan 2026 16:38:23 +0000 asID: 23473 IP address blocks: 153.33.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0a:f4:43:4b:05:4c:5e:9b:e2:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 15:38:23 2025 GMT Not After : Jan 8 16:38:23 2026 GMT Subject: CN=24f6d24e-6da6-4e15-972e-462f68284132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:fc:34:91:6d:f2:b7:cf:65:fc:1f:9e:f8: 0e:3e:3e:d3:82:ce:03:d0:bd:a5:89:01:ce:eb:cd: 28:50:fa:d1:27:71:25:79:7f:32:58:31:7a:2d:44: ff:e1:0f:41:52:2b:fa:5e:03:27:bb:41:86:51:08: 22:d6:b8:55:0d:98:36:0a:1c:90:18:8d:c4:14:42: e4:b2:f9:32:7b:3b:57:6f:88:41:8a:12:ab:72:c4: 72:9a:ef:9f:a5:9c:c7:ab:25:d3:67:ad:76:df:4c: c3:91:31:7e:37:57:fe:fe:92:84:92:bb:86:d6:a0: 3c:30:be:18:44:b3:62:59:1a:c4:5e:3c:ac:1d:2a: 13:21:83:e2:21:8c:22:40:10:f6:51:cd:64:c1:e7: 97:7b:c3:db:35:17:2c:07:f4:bc:6e:cf:99:41:2a: 21:27:ee:00:d1:ad:02:f5:a6:f3:37:d0:fc:5b:47: 82:ae:79:cc:8e:a3:89:e0:1c:97:a0:4e:8b:88:f5: 26:34:9e:a1:4c:04:df:40:b7:85:c9:00:78:cf:fd: c3:a6:ee:e5:57:40:a4:0c:23:ed:27:2e:13:91:ae: 1f:39:b5:1f:00:63:a8:a3:59:16:e8:8e:4d:d9:4c: 24:c6:fb:61:fe:06:b8:04:27:af:81:1a:b8:91:3f: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:52:1E:EE:20:E1:0A:F7:3D:7F:B4:69:04:A4:81:DE:B7:AB:7E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/481abaaf-bbea-33e0-9c47-ac42e7f2c2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:65:3e:95:c6:41:90:66:5a:6b:f7:ea:a0:01:71:2e:92:a7: df:6b:b1:bc:b8:06:df:0b:77:62:2e:76:70:9d:5b:08:51:59: 85:9d:91:a9:d1:d1:31:39:46:4f:6c:46:97:7d:09:3f:fe:54: 7a:8f:d6:b4:94:23:42:81:98:71:c4:1c:b8:43:ec:e0:1c:35: 14:e3:ec:6c:62:00:02:55:fe:21:eb:1a:26:85:bc:e4:c8:ae: f2:7a:0a:6f:00:e9:a6:06:b3:95:48:9b:16:db:58:51:87:55: bd:59:95:c4:58:b9:70:c9:48:70:2d:34:9e:81:ba:55:07:20: 61:90:aa:64:9c:33:2c:bf:bf:33:63:f0:09:13:45:26:58:67: 38:ed:69:53:68:06:55:95:b7:61:b9:0c:92:66:56:28:ea:5a: e6:ae:d2:1d:32:58:08:a4:5d:3b:b4:59:00:e5:2d:81:ea:ed: cd:e4:00:df:ed:d1:0f:58:e9:37:8f:13:a1:f1:80:bd:7d:fe: 5a:aa:1d:3d:d3:df:02:ba:80:d0:9c:9b:2e:a2:7c:14:a2:ed: 0b:a3:e5:0d:29:f5:2c:02:6e:71:9f:92:92:4a:f0:58:2b:dc: 92:4f:22:4c:64:04:65:89:30:c6:49:25:fb:0e:01:6a:f8:a4: 11:aa:a2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6CvRDSwVMXpvidYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE1MzgyM1oXDTI2MDEwODE2MzgyM1owLzEtMCsGA1UEAxMk MjRmNmQyNGUtNmRhNi00ZTE1LTk3MmUtNDYyZjY4Mjg0MTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhf8NJFt8rfPZfwfnvgOPj7Tgs4D0L2liQHO 680oUPrRJ3EleX8yWDF6LUT/4Q9BUiv6XgMnu0GGUQgi1rhVDZg2ChyQGI3EFELk svkyeztXb4hBihKrcsRymu+fpZzHqyXTZ61230zDkTF+N1f+/pKEkruG1qA8ML4Y RLNiWRrEXjysHSoTIYPiIYwiQBD2Uc1kweeXe8PbNRcsB/S8bs+ZQSohJ+4A0a0C 9abzN9D8W0eCrnnMjqOJ4ByXoE6LiPUmNJ6hTATfQLeFyQB4z/3Dpu7lV0CkDCPt Jy4Tka4fObUfAGOoo1kW6I5N2Uwkxvth/ga4BCevgRq4kT880wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdSHu4g4Qr3PX+0aQSkgd63q34UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDgxYWJhYWYtYmJlYS0z M2UwLTljNDctYWM0MmU3ZjJjMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5lPpXGQZBmWmv36qABcS6Sp99rsby4Bt8Ld2IudnCdWwhRWYWdkanR 0TE5Rk9sRpd9CT/+VHqP1rSUI0KBmHHEHLhD7OAcNRTj7GxiAAJV/iHrGiaFvOTI rvJ6Cm8A6aYGs5VImxbbWFGHVb1ZlcRYuXDJSHAtNJ6BulUHIGGQqmScMyy/vzNj 8AkTRSZYZzjtaVNoBlWVt2G5DJJmVijqWuau0h0yWAikXTu0WQDlLYHq7c3kAN/t 0Q9Y6TePE6HxgL19/lqqHT3T3wK6gNCcmy6ifBSi7Quj5Q0p9SwCbnGfkpJK8Fgr 3JJPIkxkBGWJMMZJJfsOAWr4pBGqooE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:37 2025 by rpki-client