$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa File: 5fd740b0-36b5-3924-ab89-baf72be4370e.roa (raw, json) Hash identifier: wjoSq/nliUCbAfYuodQGVbG/ydwpuPd39gjpim3lwKg= Subject key identifier: 71:13:DB:07:5C:3F:EA:A7:60:B3:B7:71:39:3B:9E:66:3C:13:9D:5D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B3556F15FA1C8D0DDDB13AB00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 63199 IP address blocks: 148.153.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f1:5f:a1:c8:d0:dd:db:13:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=84376799-f49d-4fe7-af23-e767833d7967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:04:7d:39:2d:e2:44:3c:1a:4b:b1:04:92: ee:86:6d:d9:1e:4a:73:54:b4:92:47:68:93:46:df: 07:fd:fe:24:78:be:6c:8c:ec:54:76:86:e4:c2:da: 08:59:14:25:88:75:82:ff:34:6a:6f:ed:ce:1c:1d: a1:75:36:82:a2:18:4e:c7:47:38:7a:f8:6e:c6:84: 19:5c:d1:37:12:3c:e9:1e:f4:af:ae:26:81:00:42: 37:e7:7e:46:ca:29:01:24:6e:a7:6c:de:11:92:6f: e3:3b:1e:2d:52:be:db:42:1c:a5:3f:78:10:62:d5: 36:c6:30:7a:24:d9:94:a4:cb:85:44:09:f0:e8:a6: 63:60:c6:47:f6:32:6a:98:b2:b6:b9:98:92:53:e7: e8:4a:42:70:89:6a:9f:a7:b9:2c:ab:bf:7a:53:75: 9c:36:24:59:86:53:41:6f:4e:af:6d:da:72:72:81: 63:2b:12:be:ed:de:e0:29:21:d5:8e:d2:02:af:18: 0c:54:cf:b1:b0:10:40:40:99:30:fc:e2:de:c1:80: 31:0b:9b:bb:a6:76:06:be:50:2c:a3:2d:b8:83:cf: 1c:1b:64:f1:b2:bc:d4:b7:6c:90:c8:e8:16:11:64: 8b:b5:84:1f:31:10:72:6a:68:2f:83:8b:f5:72:ea: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:13:DB:07:5C:3F:EA:A7:60:B3:B7:71:39:3B:9E:66:3C:13:9D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:64:74:4b:04:25:bb:ae:78:36:a3:60:04:64:7c:85:e6:fc: 57:6b:c4:a0:5f:3d:64:94:cf:35:eb:e8:56:fd:82:39:20:39: 26:24:23:ae:2b:d9:4e:03:29:75:ba:98:f5:cb:54:2a:66:7a: 99:10:c3:95:74:e5:33:7e:75:39:7a:77:e2:e4:d6:1e:e3:1f: 0a:97:68:68:03:fa:0c:06:b7:db:6d:2d:48:ae:e4:83:24:2d: df:77:1d:38:7b:19:fe:1d:4e:e9:65:ef:7d:fe:23:26:77:19: 78:bd:0c:f3:b8:97:bb:ba:47:a7:0e:3f:99:7d:1f:4b:0e:3e: 7c:ca:05:9f:4e:cf:ec:ef:dc:53:66:1c:2a:3c:87:9c:10:ad: a2:32:f1:91:70:57:8e:2f:36:6d:e2:45:bc:d6:9b:01:d8:fc: f2:e3:0f:e2:db:ea:2d:93:29:4f:1f:e9:21:72:2e:2d:97:5c: 99:fd:0f:0c:e8:8e:c4:4f:17:63:82:47:d2:1d:aa:cd:a8:ab: 3d:ea:86:ba:d6:e7:19:22:5b:d3:44:7d:70:29:76:92:5b:2a: f4:95:a8:a0:60:e7:85:ad:2b:c9:bb:32:34:40:61:a3:69:46: fc:fd:4e:71:c9:85:c3:39:5e:af:6a:3e:1b:e6:f4:8d:ec:9b: 37:2e:b5:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvFfocjQ3dsTqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ODQzNzY3OTktZjQ5ZC00ZmU3LWFmMjMtZTc2NzgzM2Q3OTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvIEfTkt4kQ8GkuxBJLuhm3ZHkpzVLSSR2iT Rt8H/f4keL5sjOxUdobkwtoIWRQliHWC/zRqb+3OHB2hdTaCohhOx0c4evhuxoQZ XNE3EjzpHvSvriaBAEI3535GyikBJG6nbN4Rkm/jOx4tUr7bQhylP3gQYtU2xjB6 JNmUpMuFRAnw6KZjYMZH9jJqmLK2uZiSU+foSkJwiWqfp7ksq796U3WcNiRZhlNB b06vbdpycoFjKxK+7d7gKSHVjtICrxgMVM+xsBBAQJkw/OLewYAxC5u7pnYGvlAs oy24g88cG2TxsrzUt2yQyOgWEWSLtYQfMRByamgvg4v1cur/JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHET2wdcP+qnYLO3cTk7nmY8E51dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNWZkNzQwYjAtMzZiNS0z OTI0LWFiODktYmFmNzJiZTQzNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtkdEsEJbuueDajYARkfIXm/FdrxKBfPWSUzzXr6Fb9gjkgOSYkI64r 2U4DKXW6mPXLVCpmepkQw5V05TN+dTl6d+Lk1h7jHwqXaGgD+gwGt9ttLUiu5IMk Ld93HTh7Gf4dTull733+IyZ3GXi9DPO4l7u6R6cOP5l9H0sOPnzKBZ9Oz+zv3FNm HCo8h5wQraIy8ZFwV44vNm3iRbzWmwHY/PLjD+Lb6i2TKU8f6SFyLi2XXJn9Dwzo jsRPF2OCR9Idqs2oqz3qhrrW5xkiW9NEfXApdpJbKvSVqKBg54WtK8m7MjRAYaNp Rvz9TnHJhcM5Xq9qPhvm9I3smzcutTQ= -----END CERTIFICATE-----Generated at Sat Oct 11 07:25:27 2025 by rpki-client