$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fca7f489-20bb-3f8e-82e9-ca0d59d3126b.roa File: fca7f489-20bb-3f8e-82e9-ca0d59d3126b.roa (raw, json) Hash identifier: dBB9FsJ+7g8I0gOpXdJjpaIZ9LmK8n4y9muN+HHQ/oY= Subject key identifier: DC:23:7F:65:7C:F7:2C:0B:11:91:AC:95:CC:44:A2:74:A3:C7:8B:14 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B7A11384B2172D727164A2F80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fca7f489-20bb-3f8e-82e9-ca0d59d3126b.roa Signing time: Fri 10 Oct 2025 15:51:01 +0000 ROA not before: Fri 10 Oct 2025 15:51:01 +0000 ROA not after: Thu 08 Jan 2026 16:51:01 +0000 asID: 23473 IP address blocks: 153.33.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:11:38:4b:21:72:d7:27:16:4a:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 10 15:51:01 2025 GMT Not After : Jan 8 16:51:01 2026 GMT Subject: CN=3991796b-4961-4982-8bce-0efdb0552420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:d3:fe:44:61:28:9b:05:c6:25:8a:b6:6e: b0:5c:c2:f0:03:ef:85:7e:3f:e4:9d:49:6d:1f:2f: 9a:70:2f:71:00:03:88:ff:60:b5:5e:3c:ec:7e:eb: fd:fa:e4:e7:6c:8c:7f:bc:9c:df:91:f0:b5:3a:10: c8:63:e9:57:7e:e6:de:9a:11:a1:c8:d7:29:57:32: 44:7d:c0:c4:89:e5:8a:53:81:bf:51:b7:8e:d8:b8: 5c:05:85:52:a8:d4:85:2a:f0:51:bf:b8:9f:c5:82: 29:b6:6f:50:ca:34:f4:62:c9:2f:6a:1a:e6:c2:8e: 14:be:12:c6:a7:84:ba:39:6d:7e:fb:2c:c1:9a:0c: 44:e9:ee:30:0e:a3:27:aa:35:ea:d7:54:82:60:2b: 0f:fd:07:65:14:6f:a1:43:ee:17:47:d0:41:e0:40: b9:7e:c1:29:0b:f0:3c:5b:c6:5d:1e:39:22:e0:37: 9f:bc:3f:08:61:3e:72:c7:47:cf:d1:d7:cf:8c:98: 9e:c5:36:5f:d0:64:a3:eb:4d:ef:ac:3d:e1:18:42: cc:79:eb:99:b8:7e:ec:72:5e:59:97:76:01:24:09: 14:bf:ca:3c:29:73:21:ed:a3:b4:20:ae:3a:49:0c: 56:65:df:4b:23:3c:62:4f:9e:17:cb:66:54:c5:85: 75:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:23:7F:65:7C:F7:2C:0B:11:91:AC:95:CC:44:A2:74:A3:C7:8B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fca7f489-20bb-3f8e-82e9-ca0d59d3126b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 153.33.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:aa:df:8f:4b:11:c6:9f:2a:72:63:77:81:54:61:07:55:8a: b0:32:dc:c0:e8:c2:f4:f6:35:67:b5:67:eb:02:45:fb:81:16: c8:93:b7:42:a9:c0:a5:d1:34:07:31:08:08:76:3b:a5:33:0f: 6b:23:df:eb:ad:86:65:23:b4:05:95:cb:02:e1:b2:36:ba:86: 96:c5:fe:68:c4:5f:c1:51:6f:d6:e8:ed:95:92:29:90:19:c9: d9:a8:26:54:6f:02:97:5d:a7:97:a2:65:21:27:c9:15:bd:6a: e2:c6:0b:c3:2b:33:64:f0:72:d5:3e:c2:d5:b9:ba:33:c8:c7: b7:19:cb:5c:74:e6:c9:12:bd:76:7c:80:5f:be:cb:a1:b2:be: 50:cf:97:fd:15:dc:dc:85:00:9c:3e:bb:49:79:b5:e6:b9:a0: 5e:67:7a:30:03:53:70:87:94:6f:90:77:37:90:9b:65:ee:c2: 8d:45:ab:0d:03:e5:b8:dc:7a:8a:1e:dd:68:c8:3c:c4:bb:be: 08:45:bf:ba:4b:37:39:0a:be:3f:45:0e:2e:42:38:09:a3:d7: 1b:32:b8:f3:77:68:95:af:2f:47:d8:68:6c:7a:26:15:99:03: 03:5a:10:7e:85:6f:d7:9d:f4:df:00:c3:5a:78:2e:ad:6f:a9: 58:46:0e:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6EThLIXLXJxZKL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxMDE1NTEwMVoXDTI2MDEwODE2NTEwMVowLzEtMCsGA1UEAxMk Mzk5MTc5NmItNDk2MS00OTgyLThiY2UtMGVmZGIwNTUyNDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztLT/kRhKJsFxiWKtm6wXMLwA++Ffj/knUlt Hy+acC9xAAOI/2C1Xjzsfuv9+uTnbIx/vJzfkfC1OhDIY+lXfubemhGhyNcpVzJE fcDEieWKU4G/UbeO2LhcBYVSqNSFKvBRv7ifxYIptm9QyjT0Yskvahrmwo4UvhLG p4S6OW1++yzBmgxE6e4wDqMnqjXq11SCYCsP/QdlFG+hQ+4XR9BB4EC5fsEpC/A8 W8ZdHjki4DefvD8IYT5yx0fP0dfPjJiexTZf0GSj603vrD3hGELMeeuZuH7scl5Z l3YBJAkUv8o8KXMh7aO0IK46SQxWZd9LIzxiT54Xy2ZUxYV1EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwjf2V89ywLEZGslcxEonSjx4sUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZmNhN2Y0ODktMjBiYi0z ZjhlLTgyZTktY2EwZDU5ZDMxMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiq349LEcafKnJjd4FUYQdVirAy3MDowvT2NWe1Z+sCRfuBFsiTt0Kp wKXRNAcxCAh2O6UzD2sj3+uthmUjtAWVywLhsja6hpbF/mjEX8FRb9bo7ZWSKZAZ ydmoJlRvApddp5eiZSEnyRW9auLGC8MrM2TwctU+wtW5ujPIx7cZy1x05skSvXZ8 gF++y6GyvlDPl/0V3NyFAJw+u0l5tea5oF5nejADU3CHlG+QdzeQm2Xuwo1Fqw0D 5bjceooe3WjIPMS7vghFv7pLNzkKvj9FDi5COAmj1xsyuPN3aJWvL0fYaGx6JhWZ AwNaEH6Fb9ed9N8Aw1p4Lq1vqVhGDjE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:17:17 2025 by rpki-client