$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbb91198-6efe-3a63-ab5f-5a73db379c98.roa File: fbb91198-6efe-3a63-ab5f-5a73db379c98.roa (raw, json) Hash identifier: 7yCvPvG0DIXMwzkC/GZbHd9MW9FA14B5FkF+jfoXxpg= Subject key identifier: F7:E5:DC:AA:74:33:8B:DD:E6:AF:27:EC:1B:ED:D4:18:8E:D1:69:5E Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A231D3E0919002AB7DACB90 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbb91198-6efe-3a63-ab5f-5a73db379c98.roa Signing time: Fri 10 Oct 2025 16:27:04 +0000 ROA not before: Fri 10 Oct 2025 16:27:04 +0000 ROA not after: Thu 08 Jan 2026 17:27:04 +0000 asID: 23473 IP address blocks: 153.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:23:1d:3e:09:19:00:2a:b7:da:cb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 16:27:04 2025 GMT Not After : Jan 8 17:27:04 2026 GMT Subject: CN=ef7fd406-51c2-4391-8ff7-a02b9c01b77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:fd:18:53:40:9d:9f:3b:df:b6:a7:7f:66: b4:f1:2f:e5:5c:0e:e2:8d:e4:f8:e4:1e:2d:7f:53: a4:80:1e:32:e2:67:18:47:4e:fc:80:15:34:a7:b4: af:47:65:76:1a:93:54:3b:f7:06:a3:43:a2:aa:93: 17:9c:a4:9c:61:00:f7:d3:67:33:31:14:2a:8e:f4: 9d:61:e9:77:62:97:43:93:c5:e1:ef:41:4f:06:b4: 9f:cd:d9:be:ba:8e:56:ac:36:88:ac:76:bf:18:41: dd:1c:67:cd:25:8c:08:9a:e8:f4:e6:4e:b3:04:36: dd:64:e7:47:d6:34:30:cb:9b:72:0c:b3:89:d3:d6: d6:49:f3:7f:c9:a9:18:16:49:09:3f:a8:89:a6:34: de:a0:17:25:b0:f9:58:e7:5f:dd:46:ca:ac:10:2b: b7:10:cc:ed:7c:e4:b0:8a:d9:09:fd:96:c8:36:cc: 88:23:bc:4a:2e:f1:03:b0:21:40:dc:e4:d6:03:3c: 19:91:5c:18:74:ee:1c:b9:b2:a6:ce:cf:a4:c5:1a: 28:67:24:ea:28:97:bb:dd:ab:66:36:b3:c2:4a:19: eb:10:5a:26:0a:db:40:85:12:f2:e9:cb:93:41:8d: 4b:49:76:52:29:7e:b9:d9:92:a8:2c:7b:59:08:40: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E5:DC:AA:74:33:8B:DD:E6:AF:27:EC:1B:ED:D4:18:8E:D1:69:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbb91198-6efe-3a63-ab5f-5a73db379c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4f:37:67:57:43:4c:88:f7:45:77:e0:55:61:08:97:60:1d: a6:d5:73:c7:f4:20:18:c1:46:fd:a9:8e:a1:1e:ea:a8:d4:20: 9d:b9:44:00:f4:c6:3e:b6:8d:dd:2b:ed:8b:14:86:12:65:80: bb:54:4f:68:41:03:da:95:f2:90:c5:57:0f:8d:30:f8:1a:ad: df:5d:18:11:16:4d:c0:81:dc:b2:4f:b0:f5:a6:fa:6d:aa:0c: 9c:b0:95:69:c1:42:73:25:c5:3a:7e:89:36:d7:a4:d1:a4:d6: 6f:e7:22:7a:a5:3e:d5:36:3d:be:dc:d0:ad:88:c4:32:c8:11: b2:4f:ed:a7:b0:e8:13:51:69:04:04:6b:9c:91:0e:d2:d2:9f: d4:a8:52:b6:a0:ad:e8:8d:30:04:d1:76:a7:08:4f:58:80:64: 9a:3b:49:41:68:90:89:e3:66:46:96:5f:49:bc:fb:03:71:cc: eb:e4:81:ce:d4:d9:d0:56:91:aa:7a:eb:8a:69:96:58:22:01: ef:65:e1:7e:e6:9e:33:00:b5:82:3b:ef:ee:d7:bb:d9:67:86: 9e:fe:29:7f:ac:33:9f:01:5a:0b:3b:35:c0:c9:f3:ee:69:62: 0b:46:57:ab:ba:c7:9d:98:c1:d5:95:41:bd:c3:68:15:52:f3: 92:56:cf:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6Ix0+CRkAKrfay5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE2MjcwNFoXDTI2MDEwODE3MjcwNFowLzEtMCsGA1UEAxMk ZWY3ZmQ0MDYtNTFjMi00MzkxLThmZjctYTAyYjljMDFiNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNr9GFNAnZ8737anf2a08S/lXA7ijeT45B4t f1OkgB4y4mcYR078gBU0p7SvR2V2GpNUO/cGo0OiqpMXnKScYQD302czMRQqjvSd Yel3YpdDk8Xh70FPBrSfzdm+uo5WrDaIrHa/GEHdHGfNJYwImuj05k6zBDbdZOdH 1jQwy5tyDLOJ09bWSfN/yakYFkkJP6iJpjTeoBclsPlY51/dRsqsECu3EMztfOSw itkJ/ZbINsyII7xKLvEDsCFA3OTWAzwZkVwYdO4cubKmzs+kxRooZyTqKJe73atm NrPCShnrEFomCttAhRLy6cuTQY1LSXZSKX652ZKoLHtZCEB00wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfl3Kp0M4vd5q8n7Bvt1BiO0WleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZmJiOTExOTgtNmVmZS0z YTYzLWFiNWYtNWE3M2RiMzc5Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRPN2dXQ0yI90V34FVhCJdgHabVc8f0IBjBRv2pjqEe6qjUIJ25RAD0 xj62jd0r7YsUhhJlgLtUT2hBA9qV8pDFVw+NMPgard9dGBEWTcCB3LJPsPWm+m2q DJywlWnBQnMlxTp+iTbXpNGk1m/nInqlPtU2Pb7c0K2IxDLIEbJP7aew6BNRaQQE a5yRDtLSn9SoUragreiNMATRdqcIT1iAZJo7SUFokInjZkaWX0m8+wNxzOvkgc7U 2dBWkap664ppllgiAe9l4X7mnjMAtYI77+7Xu9lnhp7+KX+sM58BWgs7NcDJ8+5p YgtGV6u6x52YwdWVQb3DaBVS85JWzyc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:14 2025 by rpki-client