$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f2d25dfd-8696-3f96-9648-d0048a6447af.roa File: f2d25dfd-8696-3f96-9648-d0048a6447af.roa (raw, json) Hash identifier: YKGXK33twY600d4EuE03jp0qxYhLnsFUe1cyhAt/uRM= Subject key identifier: 16:68:8B:FC:D3:2F:E9:DE:CB:09:A2:4E:B9:8A:00:53:11:AA:FD:81 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A194668614C3BB5FFD53870 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f2d25dfd-8696-3f96-9648-d0048a6447af.roa Signing time: Fri 10 Oct 2025 16:07:15 +0000 ROA not before: Fri 10 Oct 2025 16:07:15 +0000 ROA not after: Thu 08 Jan 2026 17:07:15 +0000 asID: 23473 IP address blocks: 153.33.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:19:46:68:61:4c:3b:b5:ff:d5:38:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 16:07:15 2025 GMT Not After : Jan 8 17:07:15 2026 GMT Subject: CN=e2c4ee7b-146f-4bf5-9806-351134bf309b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ce:3f:f5:a1:38:4e:fb:ee:21:68:17:8f:e4: 51:62:52:2f:0d:5b:60:f9:4a:16:5f:9a:7f:e6:d6: 6a:12:85:cf:9e:01:3d:8a:22:38:ff:e2:0c:9f:4a: e3:e9:43:14:8d:5a:04:8e:a8:0c:bd:36:10:54:f3: d1:03:21:76:53:22:e7:e3:1e:44:f3:70:7a:c7:07: 79:0d:bf:34:94:93:58:b5:28:68:dc:e1:59:31:d8: 5e:28:33:08:46:b4:24:84:27:d1:04:94:45:ec:19: b1:dd:90:1c:d7:a2:5e:d5:72:72:58:aa:06:85:53: ab:f1:47:a9:81:9a:07:17:19:1a:47:57:9f:f3:66: a3:40:de:05:77:68:c4:78:b0:68:9c:12:21:68:bc: 4a:7f:96:3e:c3:7f:b3:75:73:f7:92:bb:78:e3:54: ee:4f:68:15:ea:32:fd:2d:e4:5d:36:0a:db:e7:ab: 23:94:32:5c:45:f1:37:b5:a5:56:65:da:2e:75:6a: ef:0a:89:b2:02:33:12:d0:95:d5:0d:e7:58:7e:b4: e4:b5:19:2f:2b:85:f9:aa:82:d5:72:fb:f2:2e:ad: b6:ef:a5:27:e2:f8:1a:72:ae:6c:dd:69:70:02:13: 88:1c:57:be:3e:d3:ca:1c:d3:9b:b0:35:5e:f7:4c: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:68:8B:FC:D3:2F:E9:DE:CB:09:A2:4E:B9:8A:00:53:11:AA:FD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f2d25dfd-8696-3f96-9648-d0048a6447af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9f:de:97:f2:52:a9:0f:f6:3e:b2:ec:9b:2c:2d:cd:87:bc: ad:a2:de:ef:2f:c0:a8:18:82:b9:bc:a3:e8:4f:2c:76:b5:ad: 07:76:2c:9a:4f:23:b2:1e:1b:b0:95:3b:49:e2:12:a2:37:de: 78:b3:18:2c:8c:df:5f:7d:bb:d1:e3:df:6a:d7:06:af:21:21: 9d:96:1f:81:7b:c6:f6:b9:a3:72:58:1f:98:d4:68:bb:d2:2a: 78:3e:eb:dc:3f:55:c7:22:e8:14:58:a0:94:88:bc:e2:eb:2d: 23:ab:ea:d5:91:b5:a3:c9:e0:f6:b8:63:39:11:0e:f1:35:c5: a1:1e:6f:50:17:8d:73:0d:36:88:31:b5:b0:b9:c2:64:59:74: 5d:8e:3b:9a:e6:18:8b:b6:26:72:bd:0d:48:a6:de:6a:87:63: 10:b9:92:17:9c:06:11:4f:97:e3:71:4a:a5:d6:61:56:49:ab: a3:6a:78:9b:8e:d9:19:d0:7d:67:2d:65:57:29:3e:ff:0d:41: 91:e6:a2:e7:2e:e1:4b:b9:ee:92:0e:86:b7:cd:b2:6d:18:31: db:30:e4:88:21:1b:3c:f4:12:40:0f:07:0d:c5:5c:c4:b1:34: c9:61:26:63:3f:53:c2:4f:dc:c0:20:10:1c:d5:c0:cd:14:d3: 5b:ef:00:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6GUZoYUw7tf/VOHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE2MDcxNVoXDTI2MDEwODE3MDcxNVowLzEtMCsGA1UEAxMk ZTJjNGVlN2ItMTQ2Zi00YmY1LTk4MDYtMzUxMTM0YmYzMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA484/9aE4TvvuIWgXj+RRYlIvDVtg+UoWX5p/ 5tZqEoXPngE9iiI4/+IMn0rj6UMUjVoEjqgMvTYQVPPRAyF2UyLn4x5E83B6xwd5 Db80lJNYtSho3OFZMdheKDMIRrQkhCfRBJRF7Bmx3ZAc16Je1XJyWKoGhVOr8Uep gZoHFxkaR1ef82ajQN4Fd2jEeLBonBIhaLxKf5Y+w3+zdXP3krt441TuT2gV6jL9 LeRdNgrb56sjlDJcRfE3taVWZdoudWrvComyAjMS0JXVDedYfrTktRkvK4X5qoLV cvvyLq2276Un4vgacq5s3WlwAhOIHFe+PtPKHNObsDVe90xN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZoi/zTL+neywmiTrmKAFMRqv2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjJkMjVkZmQtODY5Ni0z Zjk2LTk2NDgtZDAwNDhhNjQ0N2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2f3pfyUqkP9j6y7JssLc2HvK2i3u8vwKgYgrm8o+hPLHa1rQd2LJpP I7IeG7CVO0niEqI33nizGCyM3199u9Hj32rXBq8hIZ2WH4F7xva5o3JYH5jUaLvS Kng+69w/Vcci6BRYoJSIvOLrLSOr6tWRtaPJ4Pa4YzkRDvE1xaEeb1AXjXMNNogx tbC5wmRZdF2OO5rmGIu2JnK9DUim3mqHYxC5khecBhFPl+NxSqXWYVZJq6NqeJuO 2RnQfWctZVcpPv8NQZHmoucu4Uu57pIOhrfNsm0YMdsw5IghGzz0EkAPBw3FXMSx NMlhJmM/U8JP3MAgEBzVwM0U01vvAGw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:05:35 2025 by rpki-client