$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/07ccd7e2-8c08-38c0-845d-a3b905d280c5.roa File: 07ccd7e2-8c08-38c0-845d-a3b905d280c5.roa (raw, json) Hash identifier: tP63j0+jMItd1wk/VWixKFSVzsusJK+/lify4lTiDS0= Subject key identifier: 53:92:67:0B:FB:21:C7:27:17:89:78:EA:3D:B5:00:C7:75:88:7A:D9 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B73B832F2B28500F657C3BD80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/07ccd7e2-8c08-38c0-845d-a3b905d280c5.roa Signing time: Wed 08 Oct 2025 09:16:48 +0000 ROA not before: Wed 08 Oct 2025 09:16:48 +0000 ROA not after: Tue 06 Jan 2026 10:16:48 +0000 asID: 23473 IP address blocks: 153.33.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:b8:32:f2:b2:85:00:f6:57:c3:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 8 09:16:48 2025 GMT Not After : Jan 6 10:16:48 2026 GMT Subject: CN=db4c0763-d0a7-46fc-853e-f0f2158938fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:13:8b:57:08:5f:59:f0:17:2a:6b:14:57:81: f4:a0:03:0d:b6:6a:14:44:f1:d9:f0:7f:de:64:80: 02:15:89:3b:02:bd:8d:4a:22:2f:1c:d8:46:89:97: b6:fd:d7:47:85:d1:55:1f:36:91:97:cd:3b:b4:ea: af:64:cf:f4:1f:aa:37:d6:84:1a:a4:1b:1f:8b:83: 56:a2:5f:00:01:ba:2e:00:b1:95:b0:0a:05:40:5c: 7c:f0:2d:33:fa:48:5e:75:c5:3d:8d:64:f3:4b:12: 72:f0:aa:87:3a:25:04:13:fa:43:7f:70:f9:d5:40: 8e:cc:29:a1:bb:a3:27:aa:98:48:db:f9:46:2d:fc: 2a:69:27:c8:1f:e2:25:8a:da:93:a8:34:69:23:ac: 62:c2:e7:2b:dc:92:32:67:4a:cf:c3:21:8e:72:0e: ba:86:f7:5e:79:2a:6b:0c:fd:57:2a:fb:5a:67:ab: 99:b1:97:65:c5:36:fa:14:b9:a9:95:73:c4:01:af: 2c:64:d9:af:72:e2:a8:1e:97:c5:3f:38:57:7f:78: 76:9e:1d:78:4e:70:32:e5:26:4f:18:a7:2c:3a:49: 6d:41:9e:d5:2c:d0:35:f3:78:47:74:1a:2a:80:03: 57:f3:df:ad:8e:86:d9:ac:0f:eb:81:04:bf:94:e3: 23:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:92:67:0B:FB:21:C7:27:17:89:78:EA:3D:B5:00:C7:75:88:7A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/07ccd7e2-8c08-38c0-845d-a3b905d280c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:47:e5:4d:fc:05:0a:22:f1:35:b3:a9:ec:5d:a2:99:00:55: 0f:80:48:76:5a:91:d9:2f:b9:f3:7f:d1:20:f1:54:8c:06:01: 87:1d:14:4a:47:93:8c:99:8a:03:b5:62:d8:de:9d:9b:4a:21: 3a:42:2f:db:de:7c:5c:13:4b:c9:c0:4f:7a:01:0a:2a:01:65: 19:fd:0f:b7:4a:ac:9c:55:c5:b1:40:be:8a:95:1d:45:4c:e8: 28:cd:27:f3:aa:8e:a0:39:ce:6e:16:d9:07:a2:f5:25:ae:28: 27:80:72:0f:58:b6:a3:fd:53:9f:ca:6e:4d:c7:70:aa:64:a8: 94:4f:29:e5:79:22:ea:b2:83:a8:d2:b5:71:4d:37:9a:1c:97: e8:7e:37:6c:d9:c6:4b:3e:ee:ab:00:ce:01:8b:85:54:53:91: 1b:f4:a8:e8:ac:61:65:c4:fb:d1:36:4f:45:4b:a6:10:94:ce: fc:29:27:1d:95:48:f4:f6:4b:d1:8b:45:87:ad:f9:e1:c5:f2: f9:76:3c:e8:12:45:da:ca:89:8b:4f:a7:db:69:e9:47:4f:ca: 25:e4:e3:fd:1b:51:da:05:cc:8a:08:d1:aa:73:67:03:ea:b8: de:d8:47:c2:2d:ff:12:ac:9d:cc:73:45:ec:e7:04:35:d8:7d: 2c:26:45:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtzuDLysoUA9lfDvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwODA5MTY0OFoXDTI2MDEwNjEwMTY0OFowLzEtMCsGA1UEAxMk ZGI0YzA3NjMtZDBhNy00NmZjLTg1M2UtZjBmMjE1ODkzOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBOLVwhfWfAXKmsUV4H0oAMNtmoURPHZ8H/e ZIACFYk7Ar2NSiIvHNhGiZe2/ddHhdFVHzaRl807tOqvZM/0H6o31oQapBsfi4NW ol8AAbouALGVsAoFQFx88C0z+khedcU9jWTzSxJy8KqHOiUEE/pDf3D51UCOzCmh u6MnqphI2/lGLfwqaSfIH+IlitqTqDRpI6xiwucr3JIyZ0rPwyGOcg66hvdeeSpr DP1XKvtaZ6uZsZdlxTb6FLmplXPEAa8sZNmvcuKoHpfFPzhXf3h2nh14TnAy5SZP GKcsOkltQZ7VLNA183hHdBoqgANX89+tjobZrA/rgQS/lOMjOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOSZwv7IccnF4l46j21AMd1iHrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDdjY2Q3ZTItOGMwOC0z OGMwLTg0NWQtYTNiOTA1ZDI4MGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJH5U38BQoi8TWzqexdopkAVQ+ASHZakdkvufN/0SDxVIwGAYcdFEpH k4yZigO1YtjenZtKITpCL9vefFwTS8nAT3oBCioBZRn9D7dKrJxVxbFAvoqVHUVM 6CjNJ/OqjqA5zm4W2Qei9SWuKCeAcg9YtqP9U5/Kbk3HcKpkqJRPKeV5Iuqyg6jS tXFNN5ocl+h+N2zZxks+7qsAzgGLhVRTkRv0qOisYWXE+9E2T0VLphCUzvwpJx2V SPT2S9GLRYet+eHF8vl2POgSRdrKiYtPp9tp6UdPyiXk4/0bUdoFzIoI0apzZwPq uN7YR8It/xKsncxzReznBDXYfSwmRR0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:41 2025 by rpki-client