$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa File: 7714cc44-3890-3c14-9f5c-e99518c1af61.roa (raw, json) Hash identifier: tCkuQX+hK5QhkUUC5r+vyfEGQ9jtFwYyhjIAAW9BnxI= Subject key identifier: 12:DB:1C:DF:DA:83:85:22:20:71:F8:B7:56:FC:CA:C6:AC:03:8E:71 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B3556F14C1FB5FCEAA5A7D500 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 63199 IP address blocks: 148.153.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f1:4c:1f:b5:fc:ea:a5:a7:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=f44d2bbc-e6f8-43f4-abc5-d25096b23d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:3d:c3:30:65:07:73:2d:2d:59:07:a1:46: b6:e3:f1:94:e0:e2:aa:6a:55:30:d0:8b:cd:4d:b8: 75:59:f7:66:de:9f:eb:b4:21:86:55:e9:ac:fc:e8: aa:a0:b2:21:e9:76:8d:16:1f:57:ee:1f:d1:2f:16: d3:55:21:2a:31:4f:8a:06:bb:f6:bb:a9:59:e5:ba: be:10:45:dd:9e:b0:c1:ec:c4:00:30:62:ab:1f:d4: d9:e8:4c:2f:61:5d:5e:7b:68:e2:bc:fc:94:aa:07: f3:58:ef:59:17:fc:e8:98:17:fe:ba:23:7f:e2:72: bd:89:95:f4:af:96:21:23:ab:ac:96:df:f2:d9:f3: 8f:4e:a2:30:36:12:d8:10:02:25:29:7e:61:b4:31: b1:16:48:b5:4b:bc:dc:54:c5:2e:86:46:96:f6:6a: 32:8d:9e:e8:bf:c1:a6:b9:88:88:59:90:eb:3d:ea: b5:a8:74:b9:a1:c1:a1:5f:4f:61:7e:ef:cf:b2:bf: 6d:21:1a:c5:ea:ed:ed:49:f3:2c:78:04:5c:5c:53: 38:b8:ee:78:cc:d3:d4:72:c4:ba:bb:2f:66:18:ba: b6:f7:ee:6d:56:6c:fe:c2:68:e0:1a:52:13:f8:db: bd:88:08:f9:2b:e5:29:94:bc:6d:e2:8d:1d:cc:ae: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DB:1C:DF:DA:83:85:22:20:71:F8:B7:56:FC:CA:C6:AC:03:8E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ee:5d:c3:f4:ea:c4:a9:b4:d1:b5:44:cc:ff:2f:91:43:bb: 49:4a:7d:61:b6:07:c1:6a:f3:0c:92:82:e8:cf:cf:c9:96:c7: 9f:08:da:f0:ac:ca:a4:08:13:e8:6f:22:4a:af:d0:2c:21:50: cd:28:35:e1:da:4c:65:25:ee:33:3e:e0:38:c2:7f:d6:46:4a: e0:e9:b1:3c:a7:91:a0:97:37:0c:c4:5f:70:bc:91:f5:3a:35: ed:c3:7b:89:2c:56:be:2a:4f:22:c8:92:40:07:fd:e2:11:7c: c2:71:38:82:90:44:00:60:63:e0:c1:9d:13:a8:75:6a:e7:90: 26:95:31:a2:e0:0b:c6:ca:57:29:af:d5:92:2d:99:f0:a6:93: c2:3e:ac:e4:0a:95:69:59:d5:56:76:83:ad:d9:44:99:f5:bc: 15:da:65:b1:0d:c4:3d:c7:b1:88:ca:0f:47:1d:12:06:c8:27: 54:6e:1f:08:1c:90:6a:03:19:51:9f:1c:de:f5:6e:57:b0:a4: 89:75:26:e9:bc:ee:72:89:fe:9f:e1:02:8f:cc:f5:24:0b:6d: 6d:00:a3:de:df:e7:91:32:46:77:2b:a3:13:de:7b:be:ae:4a: 14:bf:2b:87:0d:a7:f2:03:39:e2:b3:78:47:03:dc:53:48:55: d6:a5:76:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvFMH7X86qWn1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZjQ0ZDJiYmMtZTZmOC00M2Y0LWFiYzUtZDI1MDk2YjIzZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3o9wzBlB3MtLVkHoUa24/GU4OKqalUw0IvN Tbh1Wfdm3p/rtCGGVems/OiqoLIh6XaNFh9X7h/RLxbTVSEqMU+KBrv2u6lZ5bq+ EEXdnrDB7MQAMGKrH9TZ6EwvYV1ee2jivPyUqgfzWO9ZF/zomBf+uiN/4nK9iZX0 r5YhI6uslt/y2fOPTqIwNhLYEAIlKX5htDGxFki1S7zcVMUuhkaW9moyjZ7ov8Gm uYiIWZDrPeq1qHS5ocGhX09hfu/Psr9tIRrF6u3tSfMseARcXFM4uO54zNPUcsS6 uy9mGLq29+5tVmz+wmjgGlIT+Nu9iAj5K+UplLxt4o0dzK7RdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLbHN/ag4UiIHH4t1b8ysasA45xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzcxNGNjNDQtMzg5MC0z YzE0LTlmNWMtZTk5NTE4YzFhZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHuXcP06sSptNG1RMz/L5FDu0lKfWG2B8Fq8wySgujPz8mWx58I2vCs yqQIE+hvIkqv0CwhUM0oNeHaTGUl7jM+4DjCf9ZGSuDpsTynkaCXNwzEX3C8kfU6 Ne3De4ksVr4qTyLIkkAH/eIRfMJxOIKQRABgY+DBnROodWrnkCaVMaLgC8bKVymv 1ZItmfCmk8I+rOQKlWlZ1VZ2g63ZRJn1vBXaZbENxD3HsYjKD0cdEgbIJ1RuHwgc kGoDGVGfHN71blewpIl1Jum87nKJ/p/hAo/M9SQLbW0Ao97f55EyRncroxPee76u ShS/K4cNp/IDOeKzeEcD3FNIVdaldv8= -----END CERTIFICATE-----Generated at Sat Oct 11 07:27:53 2025 by rpki-client