$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa File: 99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa (raw, json) Hash identifier: 1d1bgq2J23Nj581au4H/3jR1rQRS69LY8XHVvrzkwFQ= Subject key identifier: DC:64:12:E0:09:65:87:5C:EC:CD:9F:B1:A4:D5:B2:FF:FC:54:FE:08 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A1009FD49BC0F180C8EAB40 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa Signing time: Fri 10 Oct 2025 15:48:38 +0000 ROA not before: Fri 10 Oct 2025 15:48:38 +0000 ROA not after: Thu 08 Jan 2026 16:48:38 +0000 asID: 23473 IP address blocks: 153.33.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:10:09:fd:49:bc:0f:18:0c:8e:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 15:48:38 2025 GMT Not After : Jan 8 16:48:38 2026 GMT Subject: CN=231c9794-63be-4ec2-b094-c29cf9190d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:82:4c:93:31:28:88:cc:59:ee:dd:16:49: be:7b:9e:5c:39:64:5e:c8:37:36:27:47:d8:8b:83: 6b:42:ce:c1:6c:12:0d:c2:ee:b8:d0:97:ca:3c:e9: f4:8d:18:51:b2:f6:63:e3:15:e7:58:6b:5c:51:29: fc:1d:29:7b:09:42:bd:02:59:f4:5b:8e:a5:a2:d5: 9a:7c:c4:6e:9c:1f:8b:91:12:51:c2:fb:6e:e5:da: 04:a2:b6:6c:9f:17:8a:cf:c4:3e:8b:4e:d5:15:04: 3b:03:85:5d:20:34:c5:72:44:0e:24:2d:12:45:45: e1:1c:e4:87:2f:39:75:bf:18:68:e3:6d:71:b5:36: 76:58:3c:97:97:6e:7f:e9:93:7f:7a:af:26:1c:71: 70:63:6c:b3:13:cf:d5:71:46:2e:04:6e:8a:eb:f1: 9b:d3:5f:4d:98:c1:d5:08:93:5a:05:83:1b:04:c2: 11:6d:9a:46:10:cf:e5:c9:05:18:c3:a5:78:37:cb: dd:09:6c:2f:b2:01:24:37:63:09:cf:4c:70:4f:f0: 40:0a:c4:45:ae:cc:a7:3a:e6:d0:6e:8e:10:ee:5a: e7:8a:a1:47:d8:0d:bd:ff:0e:da:e2:99:30:b1:b8: f5:62:d4:26:52:c8:b3:77:96:cf:44:ba:c6:41:ec: e5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:64:12:E0:09:65:87:5C:EC:CD:9F:B1:A4:D5:B2:FF:FC:54:FE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:46:d6:b9:79:49:88:04:89:35:3c:62:4f:38:38:29:04:9b: c8:4f:9e:61:0b:d4:ab:87:4d:34:17:be:02:08:fd:52:c0:d5: 96:05:fc:26:a5:0c:7b:9e:3c:ab:e2:fd:20:c1:54:fe:6c:10: 0e:e6:d4:20:4e:ca:a8:25:c8:09:4e:52:a8:ca:ab:45:05:d2: 8e:2b:ed:df:20:2f:45:3e:47:cb:54:15:8f:e7:05:45:61:e9: db:f1:4f:a4:31:79:fc:5a:4c:a4:c3:14:36:7c:ee:4e:b6:99: 70:c7:69:6c:ec:ee:05:d2:ee:1e:d0:88:b8:46:b3:f3:5e:50: fe:55:f1:37:79:5b:0b:60:42:55:56:6c:6a:b4:51:34:7f:90: 95:bf:fb:88:db:20:55:72:ae:24:6a:86:e9:0c:fd:42:a7:3a: f0:2b:c5:72:9f:63:eb:d8:52:ce:2f:94:ed:f6:3e:17:0a:60: 75:79:42:65:ac:0d:73:08:a9:8e:c5:b1:46:b9:65:6b:99:f9: 82:64:12:38:50:c5:fb:22:6d:28:5d:a1:a5:38:21:2b:95:a9: 4d:c1:5f:5c:3e:2e:3f:24:d2:1b:9e:c0:f0:30:78:9b:be:35: f3:ed:96:af:6d:80:08:12:cb:4e:04:4c:ed:44:e4:c9:f3:fc: f5:fa:77:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6EAn9SbwPGAyOq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE1NDgzOFoXDTI2MDEwODE2NDgzOFowLzEtMCsGA1UEAxMk MjMxYzk3OTQtNjNiZS00ZWMyLWIwOTQtYzI5Y2Y5MTkwZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohWCTJMxKIjMWe7dFkm+e55cOWReyDc2J0fY i4NrQs7BbBINwu640JfKPOn0jRhRsvZj4xXnWGtcUSn8HSl7CUK9Aln0W46lotWa fMRunB+LkRJRwvtu5doEorZsnxeKz8Q+i07VFQQ7A4VdIDTFckQOJC0SRUXhHOSH Lzl1vxho421xtTZ2WDyXl25/6ZN/eq8mHHFwY2yzE8/VcUYuBG6K6/Gb019NmMHV CJNaBYMbBMIRbZpGEM/lyQUYw6V4N8vdCWwvsgEkN2MJz0xwT/BACsRFrsynOubQ bo4Q7lrniqFH2A29/w7a4pkwsbj1YtQmUsizd5bPRLrGQezlHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxkEuAJZYdc7M2fsaTVsv/8VP4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTlkOWRmNTYtMjkyMS0z ZTM5LWFiNGItZmIxYWZhZjZjMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBG1rl5SYgEiTU8Yk84OCkEm8hPnmEL1KuHTTQXvgII/VLA1ZYF/Cal DHuePKvi/SDBVP5sEA7m1CBOyqglyAlOUqjKq0UF0o4r7d8gL0U+R8tUFY/nBUVh 6dvxT6QxefxaTKTDFDZ87k62mXDHaWzs7gXS7h7QiLhGs/NeUP5V8Td5WwtgQlVW bGq0UTR/kJW/+4jbIFVyriRqhukM/UKnOvArxXKfY+vYUs4vlO32PhcKYHV5QmWs DXMIqY7FsUa5ZWuZ+YJkEjhQxfsibShdoaU4ISuVqU3BX1w+Lj8k0huewPAweJu+ NfPtlq9tgAgSy04ETO1E5Mnz/PX6d+Y= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:20 2025 by rpki-client