$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d4532a85-4a88-3f27-a822-5cc354cdb975.roa File: d4532a85-4a88-3f27-a822-5cc354cdb975.roa (raw, json) Hash identifier: WngK/sBRb7uBmV952fjlRgCXT6j48AHgklCJTKua6oo= Subject key identifier: 33:DE:EE:02:E0:D0:CB:7E:61:E7:EA:D2:B2:BB:A8:A9:82:9C:60:9A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A0E9AAA4C90DE6FB1604180 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d4532a85-4a88-3f27-a822-5cc354cdb975.roa Signing time: Fri 10 Oct 2025 15:45:45 +0000 ROA not before: Fri 10 Oct 2025 15:45:45 +0000 ROA not after: Thu 08 Jan 2026 16:45:45 +0000 asID: 23473 IP address blocks: 153.33.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0e:9a:aa:4c:90:de:6f:b1:60:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 15:45:45 2025 GMT Not After : Jan 8 16:45:45 2026 GMT Subject: CN=134bea19-a815-49eb-9753-5c5a7e4b72e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:31:62:ea:38:c6:35:f3:52:99:6f:7c:4e: 96:d6:ed:6e:a0:fa:99:51:56:86:e7:56:06:22:c5: 42:14:b6:d7:4b:fb:31:5a:09:53:c9:b3:5a:61:a9: 60:11:60:e0:0e:ef:6b:ad:5a:9f:3a:eb:73:8f:f2: b4:b5:20:d1:53:1e:b9:f8:f0:53:f2:bf:04:da:3f: 84:1c:ee:50:2c:8c:eb:33:bb:d6:43:ef:36:4f:cc: 23:a1:d1:44:e0:99:17:3f:ec:14:be:d1:a4:89:8c: ca:a6:b6:2d:48:eb:7d:46:e9:81:df:5f:9c:71:9b: fd:72:18:4d:a9:dc:79:3e:4d:f2:54:35:f5:7c:74: 03:26:bb:e3:35:8e:17:6b:bb:94:e0:08:82:e0:d5: 80:cc:d8:7c:2a:d2:b5:a1:de:23:ee:8e:76:de:91: 75:74:29:12:5b:d5:b5:b0:ce:5a:c3:60:d7:ab:6f: 22:54:ff:36:58:91:8f:f9:53:63:3f:78:6a:40:5b: 77:ee:58:b4:04:1d:c4:a4:06:34:ac:fd:b0:17:2f: 9f:75:5e:87:51:81:a7:5c:f4:b8:21:9c:05:3e:af: 0f:3e:dd:45:4b:03:9e:60:38:e5:77:85:d1:21:eb: f6:25:18:32:05:d4:84:2d:96:e3:5c:b6:da:7e:e5: bc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DE:EE:02:E0:D0:CB:7E:61:E7:EA:D2:B2:BB:A8:A9:82:9C:60:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d4532a85-4a88-3f27-a822-5cc354cdb975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fc:8b:e4:41:e8:70:c9:72:8c:df:ad:56:3b:3d:73:ce:61: 22:97:7d:28:27:fd:a6:d5:d7:96:88:95:59:56:cd:75:b0:59: b8:22:b7:2a:7a:7d:e5:69:b6:19:ae:bf:65:49:16:26:dd:d3: d9:43:6a:08:38:5a:7b:55:a5:67:2e:e6:9c:92:8b:4f:21:ce: e5:62:60:c3:a8:be:9d:cb:3d:b8:69:aa:44:77:a5:74:e4:35: a6:35:92:1c:37:49:74:55:57:d0:88:c3:01:3f:bf:c1:6c:6c: 09:d1:8f:12:34:32:12:92:c4:5f:85:63:d3:42:b7:05:66:bc: 65:5c:17:d9:3c:b5:c4:03:60:35:b7:6c:81:93:6f:c9:da:d3: f7:f0:ae:3d:58:29:a1:02:87:b8:3f:e7:2a:ce:cf:a1:d6:81: ed:96:be:7c:37:6c:7a:c1:2d:76:97:9a:19:c2:2d:cf:68:f6: 43:bd:6c:dc:18:17:5e:60:f2:66:f6:d8:f4:ac:7c:98:fc:4b: bd:1d:04:d3:01:6a:1c:9c:6c:f0:79:d1:83:6a:30:a3:04:d6: b8:23:c7:9d:0b:ad:45:31:7b:13:71:7a:45:db:4f:f5:b4:6e: a0:5e:48:a5:21:80:fc:ea:8d:1d:d4:76:7c:5b:df:f6:53:af: 48:c9:e9:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DpqqTJDeb7FgQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE1NDU0NVoXDTI2MDEwODE2NDU0NVowLzEtMCsGA1UEAxMk MTM0YmVhMTktYTgxNS00OWViLTk3NTMtNWM1YTdlNGI3MmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgUxYuo4xjXzUplvfE6W1u1uoPqZUVaG51YG IsVCFLbXS/sxWglTybNaYalgEWDgDu9rrVqfOutzj/K0tSDRUx65+PBT8r8E2j+E HO5QLIzrM7vWQ+82T8wjodFE4JkXP+wUvtGkiYzKprYtSOt9RumB31+ccZv9chhN qdx5Pk3yVDX1fHQDJrvjNY4Xa7uU4AiC4NWAzNh8KtK1od4j7o523pF1dCkSW9W1 sM5aw2DXq28iVP82WJGP+VNjP3hqQFt37li0BB3EpAY0rP2wFy+fdV6HUYGnXPS4 IZwFPq8PPt1FSwOeYDjld4XRIev2JRgyBdSELZbjXLbafuW8RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPe7gLg0Mt+Yefq0rK7qKmCnGCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZDQ1MzJhODUtNGE4OC0z ZjI3LWE4MjItNWNjMzU0Y2RiOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT8i+RB6HDJcozfrVY7PXPOYSKXfSgn/abV15aIlVlWzXWwWbgityp6 feVpthmuv2VJFibd09lDagg4WntVpWcu5pySi08hzuViYMOovp3LPbhpqkR3pXTk NaY1khw3SXRVV9CIwwE/v8FsbAnRjxI0MhKSxF+FY9NCtwVmvGVcF9k8tcQDYDW3 bIGTb8na0/fwrj1YKaECh7g/5yrOz6HWge2Wvnw3bHrBLXaXmhnCLc9o9kO9bNwY F15g8mb22PSsfJj8S70dBNMBahycbPB50YNqMKME1rgjx50LrUUxexNxekXbT/W0 bqBeSKUhgPzqjR3Udnxb3/ZTr0jJ6Ss= -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:18 2025 by rpki-client