$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b856ee64-2d27-34b7-9f48-d6f533ccb1b9.roa File: b856ee64-2d27-34b7-9f48-d6f533ccb1b9.roa (raw, json) Hash identifier: nfaXMbAO5FPuHvY8FYHa1+GPVCTrQoFamfYFh2VyHVs= Subject key identifier: C3:3A:AB:A3:52:53:FF:84:9B:27:00:89:64:77:E8:44:BC:87:6B:E1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A0C5EE2DB7CDECC6FF37280 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b856ee64-2d27-34b7-9f48-d6f533ccb1b9.roa Signing time: Fri 10 Oct 2025 15:41:15 +0000 ROA not before: Fri 10 Oct 2025 15:41:15 +0000 ROA not after: Thu 08 Jan 2026 16:41:15 +0000 asID: 23473 IP address blocks: 153.33.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:5e:e2:db:7c:de:cc:6f:f3:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 15:41:15 2025 GMT Not After : Jan 8 16:41:15 2026 GMT Subject: CN=fb6a23a5-a5d2-4520-9bf1-da04252996a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9f:e4:ee:e5:70:c2:2c:8c:e4:73:58:da:d3: fe:a3:64:6f:af:e1:63:5b:e4:86:bc:7d:3a:70:2e: f3:ad:84:cf:6c:13:cf:9c:0e:45:39:a0:c3:40:93: 41:7d:cf:da:86:bf:62:43:3c:35:a8:aa:18:90:57: b9:fb:37:f5:a0:f0:45:3b:5c:7c:26:84:b9:0e:fc: 77:1f:9e:de:cd:30:54:0d:bf:7b:7b:0a:68:9b:05: ae:f6:b5:09:5a:80:62:40:91:55:59:79:c8:6a:9b: 7e:48:11:bf:60:60:cb:62:f5:16:b9:8e:87:ba:1a: 44:f8:10:bb:a1:d1:ae:d2:95:7e:22:d6:94:61:0b: bf:dd:ab:c7:08:06:19:e6:78:72:56:22:c1:e6:e2: 16:ba:17:de:97:59:3e:02:f7:c1:0d:bb:48:19:d0: ce:43:71:6a:c7:c4:bf:8a:e2:30:8f:85:ef:6c:22: 8b:c7:98:b5:35:73:99:1e:bc:db:e7:0f:bc:9a:c4: 61:34:e8:d4:32:b9:7a:92:af:c8:24:83:39:be:f7: 62:4c:b1:d2:f5:e7:40:df:d2:5d:22:a2:9e:75:f8: 13:82:3e:1b:08:49:1a:52:86:24:b0:46:8b:f7:bb: 04:92:6b:ad:32:8e:6b:65:1f:b8:25:7f:ee:3a:9c: e8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3A:AB:A3:52:53:FF:84:9B:27:00:89:64:77:E8:44:BC:87:6B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b856ee64-2d27-34b7-9f48-d6f533ccb1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:25:13:f9:19:3f:90:8f:fa:62:5c:80:e5:fb:a1:1d:89:4a: c8:e1:f9:ac:2e:68:48:82:1a:31:62:bc:dd:89:6d:96:25:c8: 61:2a:47:f8:7a:67:c4:62:6c:cb:4f:48:25:63:e5:16:7e:ef: 03:e5:1c:1e:01:33:dc:22:03:69:0c:f7:52:92:ef:99:46:2e: 61:e6:a4:70:b1:65:52:e6:a0:e4:74:57:8b:87:25:cd:53:16: e0:5d:df:96:5d:84:2a:00:5e:1b:ae:33:ff:ed:92:06:58:8d: f4:c6:f6:4e:11:45:e0:d8:37:c9:5a:4b:30:de:d5:99:7c:9e: 94:33:e8:ae:8f:52:70:b0:fe:d0:cd:36:14:d2:0e:cc:38:f5: 02:16:00:72:25:ae:38:09:50:6d:7a:e9:87:c1:54:f2:a8:60: 6a:52:79:a8:1f:1a:02:68:e6:ad:86:1b:fa:23:96:21:89:f3: 99:6e:5d:e0:9f:81:f5:62:02:f9:3f:b5:a0:66:b2:c7:26:78: 4b:55:51:2b:97:34:15:d1:34:9a:93:28:1c:b6:2c:f0:55:6d: 54:c9:85:5c:c9:a0:71:30:73:c3:a5:a4:30:39:7a:38:80:c7: 6a:ac:7b:ed:94:8c:ac:22:95:6b:58:0f:e8:22:e5:05:29:71: 1c:a6:8a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DF7i23zezG/zcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE1NDExNVoXDTI2MDEwODE2NDExNVowLzEtMCsGA1UEAxMk ZmI2YTIzYTUtYTVkMi00NTIwLTliZjEtZGEwNDI1Mjk5NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ/k7uVwwiyM5HNY2tP+o2Rvr+FjW+SGvH06 cC7zrYTPbBPPnA5FOaDDQJNBfc/ahr9iQzw1qKoYkFe5+zf1oPBFO1x8JoS5Dvx3 H57ezTBUDb97ewpomwWu9rUJWoBiQJFVWXnIapt+SBG/YGDLYvUWuY6HuhpE+BC7 odGu0pV+ItaUYQu/3avHCAYZ5nhyViLB5uIWuhfel1k+AvfBDbtIGdDOQ3Fqx8S/ iuIwj4XvbCKLx5i1NXOZHrzb5w+8msRhNOjUMrl6kq/IJIM5vvdiTLHS9edA39Jd IqKedfgTgj4bCEkaUoYksEaL97sEkmutMo5rZR+4JX/uOpzo2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM6q6NSU/+EmycAiWR36ES8h2vhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYjg1NmVlNjQtMmQyNy0z NGI3LTlmNDgtZDZmNTMzY2NiMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYlE/kZP5CP+mJcgOX7oR2JSsjh+awuaEiCGjFivN2JbZYlyGEqR/h6 Z8RibMtPSCVj5RZ+7wPlHB4BM9wiA2kM91KS75lGLmHmpHCxZVLmoOR0V4uHJc1T FuBd35ZdhCoAXhuuM//tkgZYjfTG9k4RReDYN8laSzDe1Zl8npQz6K6PUnCw/tDN NhTSDsw49QIWAHIlrjgJUG166YfBVPKoYGpSeagfGgJo5q2GG/ojliGJ85luXeCf gfViAvk/taBmsscmeEtVUSuXNBXRNJqTKBy2LPBVbVTJhVzJoHEwc8OlpDA5ejiA x2qse+2UjKwilWtYD+gi5QUpcRymiok= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:37 2025 by rpki-client