$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/05ebf755-cf01-3957-85c0-e52b2398f8fc.roa File: 05ebf755-cf01-3957-85c0-e52b2398f8fc.roa (raw, json) Hash identifier: rk+KOsIcBzJPb3vNIXm1C6rNTdQN/oWiF6Mo739gFFQ= Subject key identifier: E3:E6:E6:1F:A5:7D:4B:5F:50:25:78:E3:38:0E:22:5E:8C:E6:DD:85 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B3556F10F68B4FD9ED47D9C00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/05ebf755-cf01-3957-85c0-e52b2398f8fc.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 63199 IP address blocks: 148.153.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f1:0f:68:b4:fd:9e:d4:7d:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=e48b434f-712d-4f10-9654-c33ff72cca5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:c4:cd:f4:57:3c:f5:40:4e:03:44:5f:75: 95:bb:60:85:5d:e1:96:ae:15:fc:ab:3c:4b:c0:66: 5b:3d:6e:b1:c0:3d:2e:a7:f2:fc:f9:29:05:08:e6: 2d:f9:da:53:94:6c:c1:e2:c8:37:77:b6:ca:4a:e0: e3:5a:c7:e6:9c:75:a1:cf:86:6b:3a:b6:c8:dc:8e: 98:23:7c:88:83:29:2e:c9:cc:76:8d:8b:16:31:7f: e8:34:c3:46:17:23:ec:c1:0c:7d:7a:8e:89:b9:a6: 48:c8:3a:07:a7:e9:2c:d1:5b:73:5f:04:de:6a:df: 74:1b:1c:93:bc:c2:92:78:11:df:ca:a7:df:31:42: 4d:7f:98:87:a8:41:ed:65:a0:28:15:2d:52:66:72: 34:a1:6c:97:61:96:1b:1f:9d:46:1d:f5:9c:3c:e0: 71:67:21:6b:d7:0d:b9:3f:92:f1:d0:2a:9b:27:b5: c2:f3:60:62:e5:b2:5d:bc:f5:45:4d:be:3b:40:6e: 03:f3:83:d3:ae:83:46:5b:55:0e:01:3e:e4:a5:44: ed:4c:41:20:bc:80:70:15:6c:74:92:2c:8d:bb:f1: 51:75:a2:f9:bd:ba:90:39:bd:52:e7:4a:b3:b8:e2: db:eb:e6:1e:54:98:64:64:79:a7:f8:8c:93:e9:3a: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E6:E6:1F:A5:7D:4B:5F:50:25:78:E3:38:0E:22:5E:8C:E6:DD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/05ebf755-cf01-3957-85c0-e52b2398f8fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:60:8b:73:2d:ac:35:86:7b:92:e1:90:40:ae:99:af:40:a1: a9:11:13:70:f6:6c:da:dd:a6:f8:00:35:ed:3b:38:83:6b:c6: 21:8f:8d:f3:16:5e:87:66:7e:b7:2c:40:3e:09:5e:b0:1d:97: e3:d1:ca:db:15:fe:87:b0:fd:5e:3a:9d:d1:25:5f:f0:6b:65: de:00:89:f7:bb:3a:e4:26:aa:fc:5c:1b:2f:e1:a3:7f:5c:d7: 95:1f:fa:4e:97:61:4f:69:50:0a:e4:aa:43:51:66:92:68:ac: 60:72:3a:fc:48:97:6c:24:c3:15:16:80:4a:1d:cc:37:ab:b1: ef:89:b5:21:0a:d5:74:26:23:42:1a:1c:19:4a:e4:5a:4a:2c: 60:85:c4:9e:e7:46:83:cd:40:e6:6b:c3:30:c9:86:bd:01:ad: 5a:5b:2d:58:1e:8c:e3:95:75:6e:90:0f:7b:05:c2:6d:18:c8: 41:6e:3c:91:13:e0:bb:07:25:8d:67:2c:28:7d:b0:6a:58:0a: e7:35:99:68:2f:b2:f7:e2:11:c2:89:12:6e:12:36:87:4f:9d: 86:92:11:9a:7d:be:21:f3:12:6f:32:49:f4:0b:8a:dc:4a:30: a3:cc:ba:24:8c:5d:ea:6d:96:92:40:f3:42:ea:e8:57:c4:14: dd:75:2f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvEPaLT9ntR9nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTQ4YjQzNGYtNzEyZC00ZjEwLTk2NTQtYzMzZmY3MmNjYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yvEzfRXPPVATgNEX3WVu2CFXeGWrhX8qzxL wGZbPW6xwD0up/L8+SkFCOYt+dpTlGzB4sg3d7bKSuDjWsfmnHWhz4ZrOrbI3I6Y I3yIgykuycx2jYsWMX/oNMNGFyPswQx9eo6JuaZIyDoHp+ks0VtzXwTeat90GxyT vMKSeBHfyqffMUJNf5iHqEHtZaAoFS1SZnI0oWyXYZYbH51GHfWcPOBxZyFr1w25 P5Lx0CqbJ7XC82Bi5bJdvPVFTb47QG4D84PTroNGW1UOAT7kpUTtTEEgvIBwFWx0 kiyNu/FRdaL5vbqQOb1S50qzuOLb6+YeVJhkZHmn+IyT6Tr4jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPm5h+lfUtfUCV44zgOIl6M5t2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDVlYmY3NTUtY2YwMS0z OTU3LTg1YzAtZTUyYjIzOThmOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhgi3MtrDWGe5LhkECuma9AoakRE3D2bNrdpvgANe07OINrxiGPjfMW XodmfrcsQD4JXrAdl+PRytsV/oew/V46ndElX/BrZd4Aife7OuQmqvxcGy/ho39c 15Uf+k6XYU9pUArkqkNRZpJorGByOvxIl2wkwxUWgEodzDerse+JtSEK1XQmI0Ia HBlK5FpKLGCFxJ7nRoPNQOZrwzDJhr0BrVpbLVgejOOVdW6QD3sFwm0YyEFuPJET 4LsHJY1nLCh9sGpYCuc1mWgvsvfiEcKJEm4SNodPnYaSEZp9viHzEm8ySfQLitxK MKPMuiSMXeptlpJA80Lq6FfEFN11Lws= -----END CERTIFICATE-----Generated at Sat Oct 11 07:25:29 2025 by rpki-client