$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c70ca5b3-0d67-3375-a965-d41712fdd34d.roa File: c70ca5b3-0d67-3375-a965-d41712fdd34d.roa (raw, json) Hash identifier: ykSnYfgNvFFu3OC1qdx4FZLypiqox7xK1rIBuRV8UdY= Subject key identifier: 46:2A:F9:2A:7E:62:4E:D1:03:6F:8D:83:C1:D3:6A:E3:27:C7:1C:E5 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B73B959491ECA28D4A746D280 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c70ca5b3-0d67-3375-a965-d41712fdd34d.roa Signing time: Wed 08 Oct 2025 09:19:07 +0000 ROA not before: Wed 08 Oct 2025 09:19:07 +0000 ROA not after: Tue 06 Jan 2026 10:19:07 +0000 asID: 23473 IP address blocks: 153.33.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:73:b9:59:49:1e:ca:28:d4:a7:46:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 8 09:19:07 2025 GMT Not After : Jan 6 10:19:07 2026 GMT Subject: CN=24f4407e-fc64-49ca-b566-e851b0c04e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8c:1e:7e:a4:97:00:c6:c5:d5:a4:e9:bb:2f: 4b:2f:fb:d0:46:06:1f:4e:45:87:f3:4a:84:85:6e: 36:e2:94:d0:01:fe:f2:4f:c2:6b:6c:31:d1:23:b8: 1f:3c:08:47:1b:b5:05:d2:39:90:1e:ea:32:9d:c6: 25:ce:ad:d0:ff:e7:0a:ef:61:a3:58:0a:7f:31:0d: 84:00:07:e5:56:a1:21:53:9c:91:cb:96:30:d2:14: 1a:4f:2f:f0:85:ec:e2:c6:66:ac:b8:12:c5:15:d7: dd:e5:c5:53:10:2d:aa:9d:b6:f2:2a:30:d4:b8:ab: 29:45:ad:02:0a:b5:79:8a:bb:aa:a7:49:69:77:70: 61:b2:fb:15:6c:7c:2d:ba:3f:8a:74:cb:ae:e2:a5: dc:67:de:22:fe:67:ef:27:00:5b:fd:59:96:2c:43: f2:7b:bf:49:54:df:09:05:04:f4:eb:52:83:0a:8e: 62:6c:47:17:1a:aa:49:2b:32:7e:b1:e1:29:63:f2: c8:53:08:09:62:c7:55:62:19:e8:10:7e:45:fa:54: f7:c8:02:61:05:ee:c0:89:8d:b4:52:11:4e:d0:01: fa:52:9f:05:38:f7:f0:f2:b5:2a:f2:60:c2:10:3d: 21:96:64:81:9e:a1:bc:e0:51:f5:63:9e:87:c7:d2: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2A:F9:2A:7E:62:4E:D1:03:6F:8D:83:C1:D3:6A:E3:27:C7:1C:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c70ca5b3-0d67-3375-a965-d41712fdd34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1a:28:fb:ea:35:3f:89:a1:45:e8:e2:b7:cb:6a:fc:26:89: 55:40:6d:6f:15:ad:f2:19:0f:3c:fc:be:2c:10:4e:75:a2:e8: 1a:bb:b3:b4:b6:ca:7e:61:69:34:1d:2b:aa:9e:15:23:8c:8e: b4:bf:c6:8b:12:56:bd:f3:c0:72:b5:6b:d1:56:cd:06:fa:68: 34:45:e5:3a:b8:df:96:42:77:13:9c:07:4c:71:8b:14:5e:c6: 0a:27:97:52:b5:19:7a:e6:98:c3:72:4c:0f:45:69:ba:d8:94: c7:f0:e8:38:6d:d9:e2:c0:e9:72:a0:60:81:15:05:1c:44:c7: 1a:45:52:27:43:0a:89:f8:4d:d4:18:d6:34:cf:20:48:c6:4e: eb:09:d2:7f:30:b4:9e:12:92:59:57:dc:b3:c1:bf:93:53:5e: d4:e7:01:69:21:da:cb:a1:3b:15:04:b3:65:1a:dd:3a:76:b4: 99:ff:2e:48:a9:a6:73:6c:5f:35:8b:bd:ba:a6:5a:be:4c:97: 81:6f:59:ff:83:d9:f6:d3:ec:52:82:ff:3b:71:3b:82:8b:5e: a0:c7:04:0f:0f:bf:f6:15:0a:4f:58:1a:f3:d6:53:ae:de:97: 08:66:4f:cb:e0:f9:7b:fd:be:55:fe:27:f3:11:7b:b4:55:90: da:e2:8e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtzuVlJHsoo1KdG0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAwODA5MTkwN1oXDTI2MDEwNjEwMTkwN1owLzEtMCsGA1UEAxMk MjRmNDQwN2UtZmM2NC00OWNhLWI1NjYtZTg1MWIwYzA0ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIwefqSXAMbF1aTpuy9LL/vQRgYfTkWH80qE hW424pTQAf7yT8JrbDHRI7gfPAhHG7UF0jmQHuoyncYlzq3Q/+cK72GjWAp/MQ2E AAflVqEhU5yRy5Yw0hQaTy/whezixmasuBLFFdfd5cVTEC2qnbbyKjDUuKspRa0C CrV5iruqp0lpd3BhsvsVbHwtuj+KdMuu4qXcZ94i/mfvJwBb/VmWLEPye79JVN8J BQT061KDCo5ibEcXGqpJKzJ+seEpY/LIUwgJYsdVYhnoEH5F+lT3yAJhBe7AiY20 UhFO0AH6Up8FOPfw8rUq8mDCED0hlmSBnqG84FH1Y56Hx9IQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYq+Sp+Yk7RA2+Ng8HTauMnxxzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYzcwY2E1YjMtMGQ2Ny0z Mzc1LWE5NjUtZDQxNzEyZmRkMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSGCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0aKPvqNT+JoUXo4rfLavwmiVVAbW8VrfIZDzz8viwQTnWi6Bq7s7S2 yn5haTQdK6qeFSOMjrS/xosSVr3zwHK1a9FWzQb6aDRF5Tq435ZCdxOcB0xxixRe xgonl1K1GXrmmMNyTA9FabrYlMfw6Dht2eLA6XKgYIEVBRxExxpFUidDCon4TdQY 1jTPIEjGTusJ0n8wtJ4SkllX3LPBv5NTXtTnAWkh2suhOxUEs2Ua3Tp2tJn/Lkip pnNsXzWLvbqmWr5Ml4FvWf+D2fbT7FKC/ztxO4KLXqDHBA8Pv/YVCk9YGvPWU67e lwhmT8vg+Xv9vlX+J/MRe7RVkNrijt4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:06:29 2025 by rpki-client