$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa File: d23d6852-40f1-33ad-aedc-0f42655c7308.roa (raw, json) Hash identifier: bZOwcr2kylg4LI2YeFMx87tf23vo+wKPMEipEPWM/sU= Subject key identifier: D0:C7:D8:88:AF:E7:2B:A3:0C:58:54:C5:51:07:07:8D:60:88:CD:74 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A1623415DFDBEB45B277920 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa Signing time: Fri 10 Oct 2025 16:00:55 +0000 ROA not before: Fri 10 Oct 2025 16:00:55 +0000 ROA not after: Thu 08 Jan 2026 17:00:55 +0000 asID: 23473 IP address blocks: 153.33.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:16:23:41:5d:fd:be:b4:5b:27:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 16:00:55 2025 GMT Not After : Jan 8 17:00:55 2026 GMT Subject: CN=92acbd46-974e-446f-83a8-2b0fd11454e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b3:e7:35:2d:68:b5:61:ac:e7:0c:15:b2:bc: 2f:5e:7a:e0:3b:d5:4a:cc:af:c4:24:53:c5:00:20: af:4a:e5:45:02:0b:01:e8:57:1a:6b:66:a9:9f:72: 94:9e:31:9b:87:af:2c:5b:1a:62:ba:82:1a:28:31: 77:9e:01:86:c4:01:2d:8a:aa:1d:ed:b3:92:e3:df: 0c:ff:31:b7:98:bb:26:35:80:7d:02:8a:1e:13:1c: fa:d2:a2:15:0d:32:14:56:eb:d5:71:dd:e6:f9:32: 3f:d0:5e:83:1b:65:7c:24:26:fd:06:61:33:ef:0f: 24:65:75:ae:4b:93:47:66:46:21:ee:05:ff:8a:33: 35:00:92:bc:b6:b8:f1:95:4b:50:51:05:06:c4:14: 13:02:7e:6a:07:34:3f:ca:43:16:f7:fa:ec:ae:51: 19:b9:a1:a2:0e:74:4e:8d:82:a0:f5:25:e6:a3:98: 4c:b1:f8:50:3a:ce:08:06:93:78:61:d9:16:cf:3b: b6:25:41:2b:0f:18:73:6d:30:f2:60:90:f0:fd:72: af:dd:e5:3a:40:86:87:c0:17:69:09:03:a3:fe:78: f2:c2:78:12:a0:68:ff:a3:83:4b:26:0a:78:ea:6f: 46:69:82:cf:df:42:2b:8d:4f:56:44:19:d1:4f:b3: f2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C7:D8:88:AF:E7:2B:A3:0C:58:54:C5:51:07:07:8D:60:88:CD:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e4:60:a4:e0:8a:be:4f:c4:e1:f2:55:45:7c:55:8d:f6:af: 13:68:73:88:f3:59:e5:bd:2d:fa:ae:4e:bb:49:26:0f:b4:ce: c6:d6:f7:c6:a8:36:e1:dc:35:a1:2e:28:af:75:c0:48:b9:66: 2f:a1:83:7e:ba:11:12:fb:b1:f2:3e:9e:dc:c8:42:8a:b8:f5: bb:cd:44:3b:18:88:f0:bf:42:c3:72:fe:26:2b:94:ff:d4:0d: 00:18:16:07:58:04:01:af:88:81:33:e1:43:eb:3d:0b:d0:99: 8c:fd:3f:31:c2:d9:6b:48:68:c8:b6:2f:6b:55:b7:17:98:9e: a4:28:a2:85:28:78:42:de:2c:b0:2c:6e:fa:ce:12:66:cb:d4: 50:a2:c2:84:d4:56:d7:be:8e:a5:9c:9c:a9:a7:ab:99:1b:22: ae:2a:4b:e4:93:93:9d:d7:9e:24:24:26:4d:bd:f7:33:24:80: 35:b0:4f:93:92:dd:42:cb:f7:bf:a2:64:14:fd:d3:f1:a9:b3: d1:4f:40:4f:e4:6c:bd:c6:1d:1d:c5:ac:67:8c:ad:cd:26:ac: 48:40:4b:f7:e7:99:7a:c4:0f:29:62:f9:e1:6c:9e:20:ec:a9: 71:b6:72:65:d1:07:d8:ab:76:8a:ba:cf:20:ad:5f:53:f4:65: 67:42:b8:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6FiNBXf2+tFsneSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE2MDA1NVoXDTI2MDEwODE3MDA1NVowLzEtMCsGA1UEAxMk OTJhY2JkNDYtOTc0ZS00NDZmLTgzYTgtMmIwZmQxMTQ1NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrPnNS1otWGs5wwVsrwvXnrgO9VKzK/EJFPF ACCvSuVFAgsB6Fcaa2apn3KUnjGbh68sWxpiuoIaKDF3ngGGxAEtiqod7bOS498M /zG3mLsmNYB9AooeExz60qIVDTIUVuvVcd3m+TI/0F6DG2V8JCb9BmEz7w8kZXWu S5NHZkYh7gX/ijM1AJK8trjxlUtQUQUGxBQTAn5qBzQ/ykMW9/rsrlEZuaGiDnRO jYKg9SXmo5hMsfhQOs4IBpN4YdkWzzu2JUErDxhzbTDyYJDw/XKv3eU6QIaHwBdp CQOj/njywngSoGj/o4NLJgp46m9GaYLP30IrjU9WRBnRT7Py7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDH2Iiv5yujDFhUxVEHB41giM10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDIzZDY4NTItNDBmMS0z M2FkLWFlZGMtMGY0MjY1NWM3MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfkYKTgir5PxOHyVUV8VY32rxNoc4jzWeW9LfquTrtJJg+0zsbW98ao NuHcNaEuKK91wEi5Zi+hg366ERL7sfI+ntzIQoq49bvNRDsYiPC/QsNy/iYrlP/U DQAYFgdYBAGviIEz4UPrPQvQmYz9PzHC2WtIaMi2L2tVtxeYnqQoooUoeELeLLAs bvrOEmbL1FCiwoTUVte+jqWcnKmnq5kbIq4qS+STk53XniQkJk299zMkgDWwT5OS 3ULL97+iZBT90/Gps9FPQE/kbL3GHR3FrGeMrc0mrEhAS/fnmXrEDyli+eFsniDs qXG2cmXRB9irdoq6zyCtX1P0ZWdCuLg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:05:00 2025 by rpki-client