$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa File: 00a67443-0fc8-3ea5-9b70-edf9d806b098.roa (raw, json) Hash identifier: js0xN2tfeaxX5/3iGU/fGlS6shYFIUa9Vzayu8W1bUE= Subject key identifier: 6B:B2:74:17:A7:AB:E1:C8:4C:EF:C8:A3:C0:A6:12:AA:E3:58:CE:D8 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B62020EB016AE11C264376880 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 63199 IP address blocks: 148.153.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0e:b0:16:ae:11:c2:64:37:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=7d7543e6-500a-43f0-a724-8eded467f605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:4e:b3:0d:08:e1:65:89:f9:2b:fb:77:2f: c1:f3:b1:53:21:b3:54:00:31:75:a2:9e:17:c0:8b: 9e:9d:97:56:d3:76:b8:0c:aa:21:80:b6:cb:28:4d: ca:5e:35:d0:c2:35:53:4f:27:5d:4a:19:b3:40:fc: 9c:c1:50:71:a5:31:5c:a7:10:7c:fd:67:0e:ba:d3: 6d:10:b4:8a:f3:4e:90:9c:1a:37:87:9d:77:68:cc: 23:72:4a:f6:d9:ad:c8:e7:7b:be:97:0b:53:76:78: c4:34:f9:99:67:76:9e:f9:4b:af:b9:42:59:b9:cc: 4c:8f:01:9c:da:1f:a7:aa:dd:f5:e2:c8:db:6e:fc: 2a:66:e5:26:60:dd:4b:d4:2c:e2:3c:cc:1d:ff:b9: 98:02:f7:e5:ee:c6:03:31:13:4a:78:3d:f2:27:49: 84:2b:e2:22:e3:a0:30:76:b7:7f:1f:d7:86:dc:f3: bd:6a:61:29:cb:9d:26:3a:c5:6a:1a:d2:85:e2:f0: 68:ef:51:b3:37:5c:80:bc:49:20:54:23:a1:27:e0: 2e:5d:b1:b9:c5:f6:9b:46:f2:0c:7a:39:85:7a:c5: fe:bf:16:94:05:79:30:92:42:b5:49:2d:73:ee:ad: f9:bc:a0:4a:9c:1c:5f:23:37:86:65:51:2c:3f:e1: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:74:17:A7:AB:E1:C8:4C:EF:C8:A3:C0:A6:12:AA:E3:58:CE:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0d:60:f7:4d:10:27:5c:f1:20:ee:9d:1c:27:25:8a:4e:b4: 76:ea:1e:0a:b0:33:aa:b8:2f:e3:1b:b2:c9:10:f9:ee:74:a0: e2:5e:2b:36:0e:93:c7:c1:a3:98:a4:8a:65:cf:04:e8:86:16: c8:a4:7c:97:3e:ad:ee:d4:e9:e2:eb:86:c4:3b:82:23:99:28: 9a:a3:90:29:f7:af:76:78:aa:33:85:0d:db:0d:0c:ba:cb:b3: 55:35:b3:ee:60:0e:78:61:35:5c:ef:08:8d:dd:90:dd:50:e2: 40:0f:43:81:7b:ac:9c:6c:5e:8c:f6:54:c9:bd:3a:a5:0d:b6: 5a:8c:50:da:df:5a:69:2f:6b:f7:0b:d5:f8:29:63:59:49:3b: 93:ef:64:3b:ef:81:c3:54:26:28:d8:c9:ca:80:60:25:66:fe: 78:51:76:2a:59:6b:73:ec:8a:74:5a:94:5f:1b:06:3c:a4:33: 03:f7:29:c2:f2:60:dc:c3:52:f5:34:32:75:ca:15:89:00:a1: e3:62:39:7e:22:8c:5f:31:b9:3f:36:14:be:c5:52:df:f3:a5: ef:06:8d:b4:73:d8:24:78:ff:8a:d1:47:0d:4f:47:95:14:c3: c7:4b:cb:8a:39:8c:bc:fb:04:46:d0:86:38:3a:29:d1:dc:42: 1b:8e:8d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAg6wFq4RwmQ3aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk N2Q3NTQzZTYtNTAwYS00M2YwLWE3MjQtOGVkZWQ0NjdmNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4ZOsw0I4WWJ+Sv7dy/B87FTIbNUADF1op4X wIuenZdW03a4DKohgLbLKE3KXjXQwjVTTyddShmzQPycwVBxpTFcpxB8/WcOutNt ELSK806QnBo3h513aMwjckr22a3I53u+lwtTdnjENPmZZ3ae+UuvuUJZucxMjwGc 2h+nqt314sjbbvwqZuUmYN1L1CziPMwd/7mYAvfl7sYDMRNKeD3yJ0mEK+Ii46Aw drd/H9eG3PO9amEpy50mOsVqGtKF4vBo71GzN1yAvEkgVCOhJ+AuXbG5xfabRvIM ejmFesX+vxaUBXkwkkK1SS1z7q35vKBKnBxfIzeGZVEsP+EITQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuydBenq+HITO/Io8CmEqrjWM7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDBhNjc0NDMtMGZjOC0z ZWE1LTliNzAtZWRmOWQ4MDZiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcNYPdNECdc8SDunRwnJYpOtHbqHgqwM6q4L+MbsskQ+e50oOJeKzYO k8fBo5ikimXPBOiGFsikfJc+re7U6eLrhsQ7giOZKJqjkCn3r3Z4qjOFDdsNDLrL s1U1s+5gDnhhNVzvCI3dkN1Q4kAPQ4F7rJxsXoz2VMm9OqUNtlqMUNrfWmkva/cL 1fgpY1lJO5PvZDvvgcNUJijYycqAYCVm/nhRdipZa3PsinRalF8bBjykMwP3KcLy YNzDUvU0MnXKFYkAoeNiOX4ijF8xuT82FL7FUt/zpe8GjbRz2CR4/4rRRw1PR5UU w8dLy4o5jLz7BEbQhjg6KdHcQhuOjRo= -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:09 2025 by rpki-client