$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa File: 401e0813-9670-37a2-9d6b-a3d8b19c9975.roa (raw, json) Hash identifier: qNA63C1kJJnTKOr442Uw7A1J1BHHvKzM6mm5QSdUYBg= Subject key identifier: A2:FC:69:91:7B:FC:A2:1A:09:36:B6:C5:00:3A:26:15:8D:52:2A:22 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B6EF1ADAB789BCA61A1135200 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa Signing time: Mon 06 Oct 2025 16:13:34 +0000 ROA not before: Mon 06 Oct 2025 16:13:34 +0000 ROA not after: Sun 04 Jan 2026 17:13:34 +0000 asID: 23473 IP address blocks: 153.33.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:f1:ad:ab:78:9b:ca:61:a1:13:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 6 16:13:34 2025 GMT Not After : Jan 4 17:13:34 2026 GMT Subject: CN=faede5ff-a8c4-4048-baa8-ad4dfb3c1cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:74:56:40:78:9a:81:73:5e:52:2e:86:2d: ca:16:2f:4a:e8:ed:98:39:0f:dc:c7:e4:18:fb:71: 79:b0:36:15:18:0c:fc:98:f8:76:34:5a:71:98:c8: ce:d0:e2:f9:15:ff:b4:89:10:94:6d:65:7a:8b:6a: fc:2d:86:72:c3:3a:97:52:68:86:01:37:09:79:9a: 6b:a0:df:b7:38:fc:ee:23:8a:af:72:8a:c5:76:52: 97:67:ae:e9:8a:6b:86:ec:0a:b0:71:0a:15:5f:27: 28:74:f4:47:51:d4:32:c5:49:2e:6c:9c:37:26:f5: e2:22:d9:a0:7b:38:4e:30:8d:88:a0:26:c7:7d:ee: 0e:5b:38:89:2f:0f:aa:83:41:fe:f0:45:1a:5e:ac: 06:96:2f:65:90:14:52:6b:af:50:7f:78:f5:70:62: a6:a3:d1:cb:38:8e:a4:59:28:3e:45:99:41:35:62: 60:46:bb:65:f8:e6:ab:51:4e:5b:21:b1:94:3e:8e: 3d:a5:a8:00:c5:04:62:be:40:c0:0c:43:f4:3f:b5: 05:cd:32:de:14:cf:0e:92:0b:a0:c7:c6:fb:94:f2: ec:ae:72:16:1e:e8:8b:cd:2d:42:a1:78:4e:6f:ce: cb:25:10:bf:3f:54:68:00:ca:1e:7f:b1:6e:d4:0d: 94:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FC:69:91:7B:FC:A2:1A:09:36:B6:C5:00:3A:26:15:8D:52:2A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/401e0813-9670-37a2-9d6b-a3d8b19c9975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:cc:44:08:b0:9e:2b:9a:28:c8:98:59:bb:93:89:8e:6b:cb: e3:a8:f3:88:fd:c3:0d:95:3e:6f:57:65:5d:78:92:be:4a:87: 77:04:b4:1b:ba:62:4d:86:dc:30:ab:bb:19:3c:5c:b6:d0:67: 18:d6:0a:97:f2:10:39:3e:34:80:b5:8e:51:2a:26:28:54:5f: 93:7c:47:ab:5f:62:af:d6:5b:6e:62:5b:35:41:6e:dd:43:af: a5:13:7d:d3:0a:c8:d2:95:0e:e4:7a:72:40:7b:4f:0a:40:8e: 5e:a6:ea:33:49:02:b4:2e:87:ad:d6:81:26:48:0c:f6:bd:ea: 9b:44:40:fb:da:4b:00:27:9c:9c:42:4d:0a:26:b2:32:ad:ee: d6:04:0c:03:e1:48:dc:5f:99:b2:5d:c4:ef:a1:75:6f:fa:88: 75:ad:3f:6d:5c:ef:88:25:e7:05:e9:d5:de:93:51:78:55:74: 26:14:3e:42:43:d7:1e:17:1c:e2:bb:57:19:86:ef:44:35:b8: 02:87:9f:6c:9c:33:3f:32:70:64:41:18:12:24:b1:22:ad:50: cc:c2:36:e7:bc:a4:19:e9:25:1e:c1:ad:ca:9a:e3:ea:91:f0: 69:d2:77:2f:2d:7c:34:63:87:9c:6e:6c:d4:0c:b0:20:c9:cc: 83:c3:73:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu8a2reJvKYaETUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwNjE2MTMzNFoXDTI2MDEwNDE3MTMzNFowLzEtMCsGA1UEAxMk ZmFlZGU1ZmYtYThjNC00MDQ4LWJhYTgtYWQ0ZGZiM2MxY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmt0VkB4moFzXlIuhi3KFi9K6O2YOQ/cx+QY +3F5sDYVGAz8mPh2NFpxmMjO0OL5Ff+0iRCUbWV6i2r8LYZywzqXUmiGATcJeZpr oN+3OPzuI4qvcorFdlKXZ67pimuG7AqwcQoVXycodPRHUdQyxUkubJw3JvXiItmg ezhOMI2IoCbHfe4OWziJLw+qg0H+8EUaXqwGli9lkBRSa69Qf3j1cGKmo9HLOI6k WSg+RZlBNWJgRrtl+OarUU5bIbGUPo49pagAxQRivkDADEP0P7UFzTLeFM8Okgug x8b7lPLsrnIWHuiLzS1CoXhOb87LJRC/P1RoAMoef7Fu1A2UBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKL8aZF7/KIaCTa2xQA6JhWNUioiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNDAxZTA4MTMtOTY3MC0z N2EyLTlkNmItYTNkOGIxOWM5OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7MRAiwniuaKMiYWbuTiY5ry+Oo84j9ww2VPm9XZV14kr5Kh3cEtBu6 Yk2G3DCruxk8XLbQZxjWCpfyEDk+NIC1jlEqJihUX5N8R6tfYq/WW25iWzVBbt1D r6UTfdMKyNKVDuR6ckB7TwpAjl6m6jNJArQuh63WgSZIDPa96ptEQPvaSwAnnJxC TQomsjKt7tYEDAPhSNxfmbJdxO+hdW/6iHWtP21c74gl5wXp1d6TUXhVdCYUPkJD 1x4XHOK7VxmG70Q1uAKHn2ycMz8ycGRBGBIksSKtUMzCNue8pBnpJR7Brcqa4+qR 8GnSdy8tfDRjh5xubNQMsCDJzIPDczk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:40 2025 by rpki-client