$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa File: 1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa (raw, json) Hash identifier: q7/+X561mlx/XcWdx1/kKamCxMeqjlcnydk2jHYRaZk= Subject key identifier: 19:62:2D:07:31:E2:58:62:A8:D8:C4:2C:72:0E:66:D3:99:C2:CD:A2 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B4081A3F7BA9B6DE0A4448D30 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 63199 IP address blocks: 148.153.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a3:f7:ba:9b:6d:e0:a4:44:8d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=5a205a63-56bb-4f16-976a-08a24e67c53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0d:b3:0c:68:f6:1f:8a:7b:2e:c6:7f:24:31: 1a:a5:b2:fa:65:2f:56:03:96:d9:54:19:84:f7:46: 4a:bd:9b:27:3b:d9:63:fe:f3:72:f6:9e:73:f5:0e: 1e:6d:ec:4a:1c:cd:92:85:85:e9:96:93:e5:ac:ed: 05:28:91:95:fd:12:d4:84:ef:a1:46:0d:55:45:f7: 8e:67:ac:d9:34:2d:d8:cd:9d:b0:a4:05:6e:4b:b6: aa:69:2f:4d:e2:3f:75:80:8e:68:eb:69:64:63:3b: 2d:94:77:d0:ec:aa:ff:4f:72:aa:1d:0a:d1:71:2a: b8:5d:71:c9:cf:a6:bf:0b:0a:1d:e2:eb:3a:d5:31: a5:3b:94:0b:a0:71:1a:d4:21:32:9b:83:7f:ac:25: af:ab:95:4c:c8:cb:c6:29:9a:4b:bc:5a:07:e5:d7: ad:aa:eb:e9:b8:38:88:41:f7:2b:0c:88:7a:ff:61: 5d:c5:a7:8b:8f:5e:74:18:30:d2:36:f2:f7:0f:40: 49:36:8a:13:f7:e2:f9:88:0f:f8:f5:fe:ed:90:3a: 3e:5e:61:db:91:69:99:73:bc:49:e9:c7:c0:b1:8e: cd:37:6c:a1:b1:ef:a5:fb:eb:0f:39:8c:5a:35:cc: 33:75:87:bb:d6:c5:41:f3:99:4e:00:7d:c1:5b:8a: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:62:2D:07:31:E2:58:62:A8:D8:C4:2C:72:0E:66:D3:99:C2:CD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:17:fd:0c:80:49:cf:92:e6:5c:02:de:7c:26:87:e5:7c:1d: d6:34:ae:b1:43:12:31:16:e0:db:b3:34:e8:bc:f7:92:af:e1: 85:57:da:46:51:49:40:7f:74:07:57:a0:35:e3:31:d8:57:b3: 97:3d:3f:c0:5e:c0:33:0f:6b:15:93:43:f3:fc:9d:08:05:2a: d5:38:f0:dd:29:61:8e:a6:6f:01:2b:09:48:ff:86:1f:21:ec: d8:4b:aa:30:26:be:90:b7:4c:9b:ef:b6:21:eb:df:1c:7c:88: 16:65:b4:f3:26:3b:d6:b5:be:44:e1:58:13:34:13:7c:12:96: 7c:35:2e:d3:86:41:3c:8a:c5:23:af:cb:7f:76:2f:cb:f3:68: 3a:d4:72:dd:ec:cb:e4:50:91:d2:f4:fb:9a:e1:1e:49:30:c2: ea:39:f9:c3:07:01:b5:77:02:30:97:2a:13:82:65:ac:05:f8: ce:74:76:7a:43:ce:66:1e:ca:3c:82:99:54:37:c8:91:e2:99: c6:23:04:aa:dc:76:d2:b2:ae:5f:1e:12:9a:40:3c:4c:ee:df: 84:81:1f:f9:f7:29:a7:3c:71:ba:1a:71:f7:4c:68:06:bd:4e: a4:96:6f:2f:2e:fe:37:f1:64:c2:e4:d6:fd:dd:ba:e1:5a:0a: 42:81:15:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaP3uptt4KREjTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NWEyMDVhNjMtNTZiYi00ZjE2LTk3NmEtMDhhMjRlNjdjNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q2zDGj2H4p7LsZ/JDEapbL6ZS9WA5bZVBmE 90ZKvZsnO9lj/vNy9p5z9Q4ebexKHM2ShYXplpPlrO0FKJGV/RLUhO+hRg1VRfeO Z6zZNC3YzZ2wpAVuS7aqaS9N4j91gI5o62lkYzstlHfQ7Kr/T3KqHQrRcSq4XXHJ z6a/Cwod4us61TGlO5QLoHEa1CEym4N/rCWvq5VMyMvGKZpLvFoH5detquvpuDiI QfcrDIh6/2FdxaeLj150GDDSNvL3D0BJNooT9+L5iA/49f7tkDo+XmHbkWmZc7xJ 6cfAsY7NN2yhse+l++sPOYxaNcwzdYe71sVB85lOAH3BW4otSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBliLQcx4lhiqNjELHIOZtOZws2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMWViNmFjMjYtZGU4YS0z NTU4LTkzOWYtYTdkY2FjNWNiOGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8X/QyASc+S5lwC3nwmh+V8HdY0rrFDEjEW4NuzNOi895Kv4YVX2kZR SUB/dAdXoDXjMdhXs5c9P8BewDMPaxWTQ/P8nQgFKtU48N0pYY6mbwErCUj/hh8h 7NhLqjAmvpC3TJvvtiHr3xx8iBZltPMmO9a1vkThWBM0E3wSlnw1LtOGQTyKxSOv y392L8vzaDrUct3sy+RQkdL0+5rhHkkwwuo5+cMHAbV3AjCXKhOCZawF+M50dnpD zmYeyjyCmVQ3yJHimcYjBKrcdtKyrl8eEppAPEzu34SBH/n3Kac8cboacfdMaAa9 TqSWby8u/jfxZMLk1v3duuFaCkKBFfs= -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:08 2025 by rpki-client