$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/8a33f882-982e-3be3-9431-5e4e49f2eaaf.roa File: 8a33f882-982e-3be3-9431-5e4e49f2eaaf.roa (raw, json) Hash identifier: dV3/71DjeJBAxwl++mkncnqIcGm+P/MN/kyG0aefHm0= Subject key identifier: 8B:01:E4:27:3A:F4:70:E6:01:13:5D:CB:86:DB:B3:BC:10:43:23:5F Certificate issuer: /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4 Certificate serial: 010D0C9F4328584FB3A6514F4465CFD64089ADC0 Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/8a33f882-982e-3be3-9431-5e4e49f2eaaf.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 62044 IP address blocks: 153.69.20.0/24 maxlen: 24 153.69.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:51:4f:44:65:cf:d6:40:89:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=33a1d381-e3c1-4d77-832c-65e655604e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:63:9f:58:63:13:11:f0:47:67:25:81:81: ed:f5:35:e8:2e:7b:ab:f9:30:3f:f9:e4:77:8b:81: a0:c8:87:c5:40:41:56:54:83:05:b5:50:be:2c:ff: c4:30:c7:2c:9a:6b:f5:21:f8:53:58:e7:56:41:dc: 19:67:bd:2f:be:fe:30:f0:0b:5d:6a:e9:65:ba:a2: 2d:2b:07:f1:58:6f:43:9a:18:cf:c3:59:3d:ae:50: ee:7d:28:c7:4c:05:e0:fe:71:06:2b:9d:db:be:3a: 3a:b5:3f:05:2c:c2:24:c3:1f:f3:b7:d7:80:6b:c8: 36:7c:1f:15:33:75:3e:df:24:09:75:d8:a7:c3:c8: 0e:ba:9b:47:e7:3b:1e:a6:9c:08:2d:5f:95:3b:9c: aa:09:da:97:02:25:2c:c2:11:e7:37:4e:df:40:fc: 10:53:06:5f:de:c9:59:62:76:01:a8:c3:99:59:9c: 5b:4a:3a:1a:21:26:1d:db:92:32:e7:10:9c:7e:ec: 75:9c:5e:d1:ff:af:91:f4:5b:83:00:b4:61:62:fd: 09:a4:42:1e:24:96:f9:d1:35:82:b2:2b:a2:0b:4e: f4:73:0b:9b:e0:e6:d6:7f:8f:53:b1:3e:3a:6b:32: 33:0a:a2:6f:f2:76:85:c9:3e:92:14:0e:2c:d1:4b: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:01:E4:27:3A:F4:70:E6:01:13:5D:CB:86:DB:B3:BC:10:43:23:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/8a33f882-982e-3be3-9431-5e4e49f2eaaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl X509v3 Authority Key Identifier: keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer sbgp-ipAddrBlock: critical IPv4: 153.69.20.0/24 153.69.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7a:ab:b9:14:fd:12:dc:60:62:b1:f0:1e:06:c0:5d:86:14: 9f:d3:08:45:e3:ae:2a:ad:bf:40:54:48:bd:49:ab:40:6f:6d: 58:68:90:54:b1:d0:73:57:aa:99:67:43:d6:74:29:05:d4:6f: 14:b1:a7:8c:6b:3a:64:b2:5e:76:0f:5e:c6:16:98:d8:5b:8f: 0e:24:13:04:53:73:9a:0c:1b:69:9b:da:35:8d:95:00:07:50: 3f:8f:9f:ca:5a:aa:f8:8e:aa:d1:66:45:ae:6f:ca:7a:8f:2f: 4b:dc:4a:04:ca:35:87:4f:79:4f:37:48:0e:80:52:06:c0:e7: 52:62:73:c0:6f:1f:a7:6e:e7:98:cd:27:4e:f6:d8:e2:ff:e5: 7c:ec:05:3d:0b:f8:be:77:f3:c6:c9:9e:5e:1d:b9:04:d0:4e: 51:18:f7:fa:64:8b:26:20:1b:b6:f6:41:0e:c4:cf:4f:a5:d9: bc:a7:13:59:e7:d0:ee:67:0d:1a:69:a3:67:92:76:af:12:e0: e8:d8:aa:ba:61:59:fa:8e:06:32:3c:9c:97:b4:b0:aa:bf:ef: 34:f8:f5:91:60:95:40:9f:1f:b7:86:2c:9e:99:13:ef:4e:fc: f9:bc:22:15:49:f6:12:27:e5:93:96:70:8c:20:f9:dc:29:27: 90:ad:2b:f1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+zplFPRGXP1kCJrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI1ZjRkOGUtMjIwZC00YjIxLWE4ZjgtNTdlZDkxYmE4 NmU0MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MzNhMWQzODEtZTNjMS00ZDc3LTgzMmMtNjVlNjU1NjA0ZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZxjn1hjExHwR2clgYHt9TXoLnur+TA/+eR3 i4GgyIfFQEFWVIMFtVC+LP/EMMcsmmv1IfhTWOdWQdwZZ70vvv4w8AtdaulluqIt KwfxWG9DmhjPw1k9rlDufSjHTAXg/nEGK53bvjo6tT8FLMIkwx/zt9eAa8g2fB8V M3U+3yQJddinw8gOuptH5zseppwILV+VO5yqCdqXAiUswhHnN07fQPwQUwZf3slZ YnYBqMOZWZxbSjoaISYd25Iy5xCcfux1nF7R/6+R9FuDALRhYv0JpEIeJJb50TWC siuiC070cwub4ObWf49TsT46azIzCqJv8naFyT6SFA4s0UsYMwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIsB5Cc69HDmARNdy4bbs7wQQyNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVm NGQ4ZS0yMjBkLTRiMjEtYThmOC01N2VkOTFiYTg2ZTQvOGEzM2Y4ODItOTgyZS0z YmUzLTk0MzEtNWU0ZTQ5ZjJlYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzI1ZjRkOGUtMjIwZC00YjIxLWE4 ZjgtNTdlZDkxYmE4NmU0L2MyNWY0ZDhlLTIyMGQtNGIyMS1hOGY4LTU3ZWQ5MWJh ODZlNC5jcmwwHwYDVR0jBBgwFoAULMAHHFwzZ6QTgXk+lrcV2bN7LlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVmNGQ4ZS0yMjBkLTRiMjEtYThmOC01N2Vk OTFiYTg2ZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmUUUAwQA mUUWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGN6q7kU/RLcYGKx8B4GwF2GFJ/TCEXjriqtv0BUSL1Jq0Bv bVhokFSx0HNXqplnQ9Z0KQXUbxSxp4xrOmSyXnYPXsYWmNhbjw4kEwRTc5oMG2mb 2jWNlQAHUD+Pn8paqviOqtFmRa5vynqPL0vcSgTKNYdPeU83SA6AUgbA51Jic8Bv H6du55jNJ0722OL/5XzsBT0L+L5388bJnl4duQTQTlEY9/pkiyYgG7b2QQ7Ez0+l 2bynE1nn0O5nDRppo2eSdq8S4OjYqrphWfqOBjI8nJe0sKq/7zT49ZFglUCfH7eG LJ6ZE+9O/Pm8IhVJ9hIn5ZOWcIwg+dwpJ5CtK/E= -----END CERTIFICATE-----Generated at Sun Nov 15 11:20:00 2026 by rpki-client