$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eff62756-2329-36b9-843a-46d139ea10c5.roa File: eff62756-2329-36b9-843a-46d139ea10c5.roa (raw, json) Hash identifier: LlDc0PDpNhQ0PQE6w8kBDwycKSnTp8y3lO8LBiM3bOU= Subject key identifier: 19:20:EE:DF:63:2D:9A:10:AE:33:3A:D1:72:07:E0:06:1F:A9:08:1B Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A1DDCD0060FF522C1E7F800 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eff62756-2329-36b9-843a-46d139ea10c5.roa Signing time: Fri 10 Oct 2025 16:16:29 +0000 ROA not before: Fri 10 Oct 2025 16:16:29 +0000 ROA not after: Thu 08 Jan 2026 17:16:29 +0000 asID: 23473 IP address blocks: 153.33.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:1d:dc:d0:06:0f:f5:22:c1:e7:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 16:16:29 2025 GMT Not After : Jan 8 17:16:29 2026 GMT Subject: CN=59270d8b-9259-452b-8d2b-b18b7643048e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:3c:90:b3:ea:d0:e6:64:71:87:b2:bd:7a: 33:78:7d:31:f4:9e:15:47:8d:62:5f:ca:df:c0:20: 96:f2:f0:3f:84:3b:dd:77:d3:08:ed:d1:2d:07:65: e2:40:be:06:60:81:6e:32:a6:b6:20:01:04:81:03: 3a:28:8f:5b:c9:03:3d:47:62:7a:7f:01:00:e3:51: 66:bb:81:98:0d:2f:3b:e6:54:ec:96:eb:7c:da:9d: 2e:f4:1b:88:0f:2f:15:83:fb:53:4d:3d:82:a4:0a: 7f:a5:3c:f6:25:06:67:bd:77:60:17:83:e9:cc:af: dd:9f:31:51:29:bb:68:d4:85:c3:d9:5f:e6:0e:e7: 4e:b8:42:b7:f4:1a:2b:8d:27:87:f1:65:bd:91:c9: c2:19:d7:22:9e:83:ad:0b:8b:db:a9:58:4f:4b:f1: 7f:29:c8:86:cc:d8:b8:e6:bc:86:b1:75:73:1d:a1: 60:ef:a9:d4:e2:2b:25:db:c1:6d:01:07:16:9f:f1: c1:3c:e5:8c:49:15:84:4b:c9:fe:21:91:df:42:52: c6:cb:79:32:8f:5d:41:ae:26:38:fa:8f:3a:e3:c7: e0:9c:d4:83:23:99:2f:2d:cb:98:86:65:95:96:c0: 79:d4:40:b0:8b:29:02:c9:d4:e4:cb:9a:d6:0f:b7: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:20:EE:DF:63:2D:9A:10:AE:33:3A:D1:72:07:E0:06:1F:A9:08:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eff62756-2329-36b9-843a-46d139ea10c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a5:fa:16:71:16:d5:84:8b:71:b3:57:af:12:af:4e:5f:cb: 86:8b:29:49:ce:5c:db:ca:cd:dd:e7:f4:e3:97:07:01:51:71: 07:0d:12:c8:d9:49:ac:9e:16:73:b0:f9:57:19:48:03:7f:70: d0:96:bf:a0:7d:16:75:bf:a7:6a:fb:0d:81:4e:0d:ac:c1:7a: b3:4b:b4:e7:89:45:76:96:6e:da:ed:0f:e2:ba:36:44:65:99: 9a:a9:83:29:44:97:21:70:93:13:c5:c2:f1:88:d5:3b:9c:55: 78:6f:96:e5:0f:c1:95:80:8e:04:ef:69:16:88:1e:d3:e9:28: 2f:3b:7b:e2:2b:38:e0:9e:c2:48:69:54:12:36:b8:72:a4:4a: 18:b2:42:f4:db:90:4e:db:c7:38:b4:b3:9b:0a:90:61:02:80: 87:2d:e1:75:3d:3b:a4:4e:3c:e4:84:a5:d5:c5:88:68:10:c8: 5b:bc:38:54:4e:29:33:0e:aa:94:41:01:b7:10:44:89:fa:81: 20:b0:ba:02:d3:9e:af:9b:67:58:8f:89:09:bd:14:01:eb:d9: 76:e5:6a:85:b6:69:dc:81:5a:28:5f:69:32:7c:b6:77:71:14: ed:eb:9c:35:3b:3a:f8:49:25:50:cb:07:e9:80:13:16:0c:cc: a2:0e:49:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6HdzQBg/1IsHn+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE2MTYyOVoXDTI2MDEwODE3MTYyOVowLzEtMCsGA1UEAxMk NTkyNzBkOGItOTI1OS00NTJiLThkMmItYjE4Yjc2NDMwNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTs8kLPq0OZkcYeyvXozeH0x9J4VR41iX8rf wCCW8vA/hDvdd9MI7dEtB2XiQL4GYIFuMqa2IAEEgQM6KI9byQM9R2J6fwEA41Fm u4GYDS875lTslut82p0u9BuIDy8Vg/tTTT2CpAp/pTz2JQZnvXdgF4PpzK/dnzFR Kbto1IXD2V/mDudOuEK39BorjSeH8WW9kcnCGdcinoOtC4vbqVhPS/F/KciGzNi4 5ryGsXVzHaFg76nU4isl28FtAQcWn/HBPOWMSRWES8n+IZHfQlLGy3kyj11BriY4 +o8648fgnNSDI5kvLcuYhmWVlsB51ECwiykCydTky5rWD7e3WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkg7t9jLZoQrjM60XIH4AYfqQgbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZWZmNjI3NTYtMjMyOS0z NmI5LTg0M2EtNDZkMTM5ZWExMGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEql+hZxFtWEi3GzV68Sr05fy4aLKUnOXNvKzd3n9OOXBwFRcQcNEsjZ SayeFnOw+VcZSAN/cNCWv6B9FnW/p2r7DYFODazBerNLtOeJRXaWbtrtD+K6NkRl mZqpgylElyFwkxPFwvGI1TucVXhvluUPwZWAjgTvaRaIHtPpKC87e+IrOOCewkhp VBI2uHKkShiyQvTbkE7bxzi0s5sKkGECgIct4XU9O6ROPOSEpdXFiGgQyFu8OFRO KTMOqpRBAbcQRIn6gSCwugLTnq+bZ1iPiQm9FAHr2XblaoW2adyBWihfaTJ8tndx FO3rnDU7OvhJJVDLB+mAExYMzKIOSc4= -----END CERTIFICATE-----Generated at Tue Oct 21 01:31:19 2025 by rpki-client