$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c63cc234-0c8b-36b8-af23-877c1ce6660e.roa File: c63cc234-0c8b-36b8-af23-877c1ce6660e.roa (raw, json) Hash identifier: DnYc24W7zPiSoaFg5jr8SZBmTBUJLEGFzWoPJfPzGFg= Subject key identifier: 57:C9:DD:AE:9D:1A:9D:3A:34:B7:1D:62:05:A9:3E:C1:25:AD:39:AC Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A11A939E7F62EFC33E6D0C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c63cc234-0c8b-36b8-af23-877c1ce6660e.roa Signing time: Fri 10 Oct 2025 15:51:54 +0000 ROA not before: Fri 10 Oct 2025 15:51:54 +0000 ROA not after: Thu 08 Jan 2026 16:51:54 +0000 asID: 23473 IP address blocks: 153.33.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:11:a9:39:e7:f6:2e:fc:33:e6:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 15:51:54 2025 GMT Not After : Jan 8 16:51:54 2026 GMT Subject: CN=67bbbfd4-7021-4756-82c4-3d0e6a938b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:e5:35:82:29:1d:38:2d:7e:c0:a7:1c:a5: 68:38:3e:a2:88:b9:5b:05:48:ee:f8:28:65:a5:0a: b3:2e:e5:f6:ae:34:59:6f:57:af:86:fc:a4:fc:0d: 2a:0d:fe:5c:7a:7f:7e:f6:d8:27:aa:58:a4:b4:c1: fa:72:10:d5:ae:0c:f6:a3:1b:28:fd:2b:0c:10:a2: b9:45:02:d1:a7:e3:cf:c1:10:27:42:5b:ac:4d:2b: de:4a:21:6a:d2:fd:8c:bf:94:d7:35:57:b6:d7:8f: 44:9f:d7:5d:93:61:98:7e:67:f5:42:34:13:8e:d0: 07:23:81:a2:e7:18:aa:93:fe:a8:82:5b:1a:81:fd: 0c:8d:27:78:f2:9b:bb:df:84:57:7d:9b:1a:de:1c: 4d:62:f6:3b:0a:3d:f7:2e:14:46:a7:fc:29:9d:60: e4:cf:ca:11:11:1f:e9:d5:50:cb:4d:1b:6b:db:eb: 51:b3:ba:47:f0:08:cc:e8:d5:31:2c:f3:f1:d4:01: 42:23:b3:4c:c4:9a:b2:c3:06:ec:0f:e1:a8:76:f6: 14:f0:50:c8:5c:fc:a5:78:ee:3f:fc:85:7b:48:a0: d3:2c:d9:da:f0:b6:30:84:8e:bb:c1:59:79:52:50: ea:9c:39:44:ce:21:5e:30:70:c1:e4:f0:00:c7:1b: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C9:DD:AE:9D:1A:9D:3A:34:B7:1D:62:05:A9:3E:C1:25:AD:39:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c63cc234-0c8b-36b8-af23-877c1ce6660e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8c:2c:90:53:13:77:62:b1:29:88:a9:ba:84:c8:d9:a2:9e: ea:cd:0d:9a:39:f5:26:7a:a1:c2:18:f9:7b:34:21:8a:6a:11: c1:3d:10:63:71:92:0a:f8:25:95:7a:d5:61:41:f0:2a:f9:b1: 35:9d:6f:7c:81:2f:2a:ab:21:6f:f8:72:e3:5c:58:63:d9:f3: 71:6f:26:ae:93:d0:bb:8f:84:a3:9e:ef:1a:88:1c:f4:29:5d: 66:0e:a7:76:21:cb:6a:7a:db:ce:bb:c3:1f:e2:58:29:ab:fc: 59:44:e7:b8:89:d6:d8:a2:bc:a8:b7:9b:cb:37:fe:8e:b7:6d: 65:38:65:7d:c2:e9:2d:27:95:ce:34:3b:7b:a2:0f:52:74:c7: 81:5a:8f:26:6a:4d:f8:c4:8c:15:49:f4:c7:40:f1:6c:df:a7: e3:ef:92:71:bf:a2:5b:4c:93:17:52:f6:03:43:b9:29:1c:7e: ea:33:0f:ad:b2:2b:89:0d:9e:f6:4f:f5:7d:7c:4e:ab:6c:c0: c5:f1:4c:e0:28:4b:23:0d:03:9e:21:3a:08:09:77:d6:cb:fe: e2:56:f3:af:dc:19:23:27:4c:a8:4f:f3:7b:9f:eb:8d:eb:0b: 58:e3:8b:1b:f7:50:84:6d:5c:8d:1a:70:f4:48:13:8c:79:c3: 49:91:68:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6Eak55/Yu/DPm0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE1NTE1NFoXDTI2MDEwODE2NTE1NFowLzEtMCsGA1UEAxMk NjdiYmJmZDQtNzAyMS00NzU2LTgyYzQtM2QwZTZhOTM4YjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTXlNYIpHTgtfsCnHKVoOD6iiLlbBUju+Chl pQqzLuX2rjRZb1evhvyk/A0qDf5cen9+9tgnqliktMH6chDVrgz2oxso/SsMEKK5 RQLRp+PPwRAnQlusTSveSiFq0v2Mv5TXNVe2149En9ddk2GYfmf1QjQTjtAHI4Gi 5xiqk/6oglsagf0MjSd48pu734RXfZsa3hxNYvY7Cj33LhRGp/wpnWDkz8oRER/p 1VDLTRtr2+tRs7pH8AjM6NUxLPPx1AFCI7NMxJqywwbsD+GodvYU8FDIXPyleO4/ /IV7SKDTLNna8LYwhI67wVl5UlDqnDlEziFeMHDB5PAAxxvsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfJ3a6dGp06NLcdYgWpPsElrTmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYzYzY2MyMzQtMGM4Yi0z NmI4LWFmMjMtODc3YzFjZTY2NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuMLJBTE3disSmIqbqEyNminurNDZo59SZ6ocIY+Xs0IYpqEcE9EGNx kgr4JZV61WFB8Cr5sTWdb3yBLyqrIW/4cuNcWGPZ83FvJq6T0LuPhKOe7xqIHPQp XWYOp3Yhy2p62867wx/iWCmr/FlE57iJ1tiivKi3m8s3/o63bWU4ZX3C6S0nlc40 O3uiD1J0x4FajyZqTfjEjBVJ9MdA8Wzfp+PvknG/oltMkxdS9gNDuSkcfuozD62y K4kNnvZP9X18TqtswMXxTOAoSyMNA54hOggJd9bL/uJW86/cGSMnTKhP83uf643r C1jjixv3UIRtXI0acPRIE4x5w0mRaGk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:37 2025 by rpki-client