$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c11e11fd-a6ee-3f93-bede-af2b52b0fcaa.roa File: c11e11fd-a6ee-3f93-bede-af2b52b0fcaa.roa (raw, json) Hash identifier: 9NX3LToa/2aDtZylf6WQeqO+CanLazgtwpsWn4PRb08= Subject key identifier: 49:4C:4D:8D:78:CA:AC:05:E7:0A:CF:70:ED:25:5F:3C:8C:A3:05:87 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584BBB75A2C58E0CE0E707959240 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c11e11fd-a6ee-3f93-bede-af2b52b0fcaa.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 23473 IP address blocks: 66.253.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:a2:c5:8e:0c:e0:e7:07:95:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=73fb5ae9-ca1f-4f6f-9c7a-28736a226b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6d:4e:06:78:1c:16:a3:a8:ac:c3:db:36:60: db:b8:42:85:4c:35:f9:d4:4b:38:fd:94:54:97:f9: 13:3d:48:95:58:e7:15:e8:21:cc:78:5a:6f:52:c0: 63:b6:26:ca:81:24:51:66:3d:5e:fb:0c:d1:f9:cd: 06:00:c9:c6:d0:0e:c6:80:ba:96:b7:49:07:73:ef: e7:5c:ff:92:58:f4:ca:ac:93:74:a5:a4:c3:34:e2: 7d:be:fe:57:ed:32:da:26:5e:53:50:ab:de:54:7d: 7d:fe:f0:2e:b3:f5:2c:7b:f4:00:06:f2:d9:af:9c: fb:26:bf:b8:1f:93:3f:a8:96:32:ef:2d:10:d4:75: 91:b3:df:03:a7:ef:90:1a:00:4d:91:5b:45:33:7f: 04:c5:be:ff:9f:81:bd:67:cc:30:d6:86:e5:04:b0: 34:79:25:a2:16:17:fb:e2:5b:e2:f1:16:48:c2:d6: a8:d1:6d:12:be:8d:77:a8:96:c7:21:ee:e5:19:7c: 27:69:69:65:af:00:40:03:f1:9d:f5:53:a6:c6:4a: b8:48:42:38:50:d8:86:91:af:cb:82:2b:b0:b1:df: a3:6a:f0:7b:ed:8f:9e:47:11:fb:7b:95:cc:6a:29: 55:3f:ba:3e:a9:d0:02:c3:d0:d0:28:1d:e4:62:ce: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4C:4D:8D:78:CA:AC:05:E7:0A:CF:70:ED:25:5F:3C:8C:A3:05:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c11e11fd-a6ee-3f93-bede-af2b52b0fcaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 66.253.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:dd:db:8b:fb:13:c3:43:19:d0:0b:e0:ef:74:af:af:89:34: 57:85:b9:cd:3b:3b:c4:6a:87:4f:93:cc:60:2e:9a:64:44:32: 8c:74:d6:ed:f2:86:e6:36:38:27:01:2f:4c:03:39:4f:3a:7a: 8a:eb:95:67:b8:6f:1c:b3:bf:39:79:94:1e:30:76:1a:72:4c: 54:c8:ab:4e:23:d4:80:c8:2d:3b:91:97:81:c1:45:c1:97:cf: 65:08:59:ec:2a:00:4b:c1:39:4c:d9:13:65:22:0d:ad:dc:f4: 2e:e1:e9:2f:af:97:ae:5a:01:27:49:a2:34:28:46:8a:d6:e0: 6c:85:59:3c:e7:33:01:d7:4e:6d:68:fa:5d:ec:68:57:80:e3: 31:8f:20:70:b1:a8:6b:e0:30:52:c9:9c:ce:5f:90:a4:e2:43: 3d:86:18:7e:90:18:b8:16:6b:97:95:4e:b8:ce:96:bd:c0:2e: a8:b8:ff:98:0c:ff:e8:30:4a:ce:fa:fc:45:ce:86:e1:7c:14: 0b:12:00:60:bc:c3:62:2f:5b:50:eb:6c:34:e6:c9:d7:8f:10: 88:e0:83:c8:53:93:93:81:8b:88:e1:91:24:78:e6:9b:ce:e9: e1:02:15:52:e9:a3:4c:3b:3f:83:ac:04:93:72:50:ac:46:30: d1:23:98:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7daLFjgzg5weVkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NzNmYjVhZTktY2ExZi00ZjZmLTljN2EtMjg3MzZhMjI2YjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg21OBngcFqOorMPbNmDbuEKFTDX51Es4/ZRU l/kTPUiVWOcV6CHMeFpvUsBjtibKgSRRZj1e+wzR+c0GAMnG0A7GgLqWt0kHc+/n XP+SWPTKrJN0paTDNOJ9vv5X7TLaJl5TUKveVH19/vAus/Use/QABvLZr5z7Jr+4 H5M/qJYy7y0Q1HWRs98Dp++QGgBNkVtFM38Exb7/n4G9Z8ww1oblBLA0eSWiFhf7 4lvi8RZIwtao0W0Svo13qJbHIe7lGXwnaWllrwBAA/Gd9VOmxkq4SEI4UNiGka/L giuwsd+javB77Y+eRxH7e5XMailVP7o+qdACw9DQKB3kYs4iawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElMTY14yqwF5wrPcO0lXzyMowWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYzExZTExZmQtYTZlZS0z ZjkzLWJlZGUtYWYyYjUyYjBmY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/d24v7E8NDGdAL4O90r6+JNFeFuc07O8Rqh0+TzGAummREMox01u3y huY2OCcBL0wDOU86eorrlWe4bxyzvzl5lB4wdhpyTFTIq04j1IDILTuRl4HBRcGX z2UIWewqAEvBOUzZE2UiDa3c9C7h6S+vl65aASdJojQoRorW4GyFWTznMwHXTm1o +l3saFeA4zGPIHCxqGvgMFLJnM5fkKTiQz2GGH6QGLgWa5eVTrjOlr3ALqi4/5gM /+gwSs76/EXOhuF8FAsSAGC8w2IvW1DrbDTmydePEIjgg8hTk5OBi4jhkSR45pvO 6eECFVLpo0w7P4OsBJNyUKxGMNEjmMM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:37 2025 by rpki-client