$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ecca567c-6556-3a14-bd9b-8f72794ec4bc.roa File: ecca567c-6556-3a14-bd9b-8f72794ec4bc.roa (raw, json) Hash identifier: Se+Ol0/bkzAtlUw6fvD3xaOqvmMftUfe5a2tiyn2nQw= Subject key identifier: 07:AD:85:D8:89:09:40:1B:69:AF:F4:4D:D9:E4:BC:4D:3D:EA:D6:29 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A1B2FD01C4AB25CD14FE900 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ecca567c-6556-3a14-bd9b-8f72794ec4bc.roa Signing time: Fri 10 Oct 2025 16:11:06 +0000 ROA not before: Fri 10 Oct 2025 16:11:06 +0000 ROA not after: Thu 08 Jan 2026 17:11:06 +0000 asID: 23473 IP address blocks: 153.33.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:1b:2f:d0:1c:4a:b2:5c:d1:4f:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 16:11:06 2025 GMT Not After : Jan 8 17:11:06 2026 GMT Subject: CN=6e1cfff2-a88e-451a-9f25-1d378b946509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:81:45:08:2f:10:b6:f4:c8:d1:1b:85:44: f1:75:74:e8:97:d0:a3:0d:b6:57:d1:83:43:78:d3: 4b:bf:52:ff:ac:04:73:92:bd:8a:9b:92:24:0d:14: 4a:8b:ee:0a:3c:9c:d4:64:9f:42:e1:a7:f9:7f:d8: 7c:09:62:91:f9:34:1d:b3:ab:46:4f:21:b4:6e:a7: 96:bf:b9:ce:74:88:7d:eb:c3:60:31:f4:40:3d:d1: 22:48:b5:8e:49:03:f7:4a:e1:ba:c4:71:95:6c:c1: f8:21:92:f1:01:e8:85:89:44:98:eb:13:0f:4a:e5: 13:20:1d:aa:24:b5:a8:ba:31:b6:6d:a0:2b:27:7a: 18:47:01:9d:2b:8c:fd:29:d3:7d:12:82:61:0e:d1: 74:48:41:b6:b5:4b:d9:64:58:48:a3:42:28:0a:11: a6:5f:bb:86:0f:23:8f:7c:ee:c9:be:bc:62:43:c3: 8d:4f:ed:07:7a:f8:30:54:bc:db:c3:96:1e:e4:1f: 74:c3:b5:dc:ea:36:0f:71:b1:ce:cd:c5:67:95:3e: 14:08:d6:df:fe:a3:fd:97:60:e8:47:28:c0:6f:c0: 8b:9d:b7:40:a9:dd:61:6b:39:89:45:ef:e7:f6:78: 8b:1d:ac:89:a9:bc:21:ce:6d:f6:68:e6:ab:ef:15: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AD:85:D8:89:09:40:1B:69:AF:F4:4D:D9:E4:BC:4D:3D:EA:D6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ecca567c-6556-3a14-bd9b-8f72794ec4bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ed:35:c9:4b:2b:fe:73:42:c7:65:40:1f:5d:56:49:dc:09: b5:46:78:4a:45:e8:59:2f:0c:3b:87:4a:8d:f8:3d:3d:74:08: d0:bf:db:25:b7:e7:6e:43:18:35:72:70:01:df:c7:eb:92:56: aa:94:87:8a:6d:13:ab:80:d7:a9:62:2b:ec:6c:b6:cd:08:5c: 27:87:be:8d:98:1b:48:ea:74:b0:7f:42:1d:e1:b7:d1:1c:70: 09:b8:a7:ca:a6:79:17:31:cb:1e:67:d0:67:a5:94:cc:60:35: 91:ff:e7:87:ca:2e:99:e4:88:11:c0:e0:ef:64:27:b6:f5:19: 74:10:a1:18:5a:0b:45:ad:bb:b0:be:c1:c6:f2:08:1d:d0:8e: 20:80:62:aa:3b:65:60:bc:31:f9:bd:b1:fe:3a:b6:e0:54:e1: c5:38:b1:d0:24:71:85:c7:39:e6:ba:a3:27:2d:2a:a2:a7:8f: a5:4c:ff:b9:56:f3:5b:0f:02:11:e9:0f:d5:90:e2:d1:f8:8e: 75:19:3d:07:b9:1e:92:e5:d5:40:9b:3b:65:98:63:e3:8e:2e: 67:bc:1f:70:3d:40:e9:af:b9:af:f5:90:79:93:a7:2e:bb:7a: bc:fc:a5:cd:04:7c:8b:08:2c:e6:18:e4:9b:0d:4a:0d:aa:41: 30:36:e1:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6Gy/QHEqyXNFP6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE2MTEwNloXDTI2MDEwODE3MTEwNlowLzEtMCsGA1UEAxMk NmUxY2ZmZjItYTg4ZS00NTFhLTlmMjUtMWQzNzhiOTQ2NTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3iBRQgvELb0yNEbhUTxdXTol9CjDbZX0YND eNNLv1L/rARzkr2Km5IkDRRKi+4KPJzUZJ9C4af5f9h8CWKR+TQds6tGTyG0bqeW v7nOdIh968NgMfRAPdEiSLWOSQP3SuG6xHGVbMH4IZLxAeiFiUSY6xMPSuUTIB2q JLWoujG2baArJ3oYRwGdK4z9KdN9EoJhDtF0SEG2tUvZZFhIo0IoChGmX7uGDyOP fO7JvrxiQ8ONT+0HevgwVLzbw5Ye5B90w7Xc6jYPcbHOzcVnlT4UCNbf/qP9l2Do RyjAb8CLnbdAqd1hazmJRe/n9niLHayJqbwhzm32aOar7xUZMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAethdiJCUAbaa/0TdnkvE096tYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZWNjYTU2N2MtNjU1Ni0z YTE0LWJkOWItOGY3Mjc5NGVjNGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFntNclLK/5zQsdlQB9dVkncCbVGeEpF6FkvDDuHSo34PT10CNC/2yW3 525DGDVycAHfx+uSVqqUh4ptE6uA16liK+xsts0IXCeHvo2YG0jqdLB/Qh3ht9Ec cAm4p8qmeRcxyx5n0GellMxgNZH/54fKLpnkiBHA4O9kJ7b1GXQQoRhaC0Wtu7C+ wcbyCB3QjiCAYqo7ZWC8Mfm9sf46tuBU4cU4sdAkcYXHOea6oyctKqKnj6VM/7lW 81sPAhHpD9WQ4tH4jnUZPQe5HpLl1UCbO2WYY+OOLme8H3A9QOmvua/1kHmTpy67 erz8pc0EfIsILOYY5JsNSg2qQTA24Rw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:17 2025 by rpki-client