$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa File: aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa (raw, json) Hash identifier: jIH5OVf2MmCD6X0iICiKDYAj9JhtuioDKIGkhLI+fPg= Subject key identifier: D6:33:8A:43:A6:80:FA:F5:54:6E:79:FD:2B:FF:86:C2:9F:DF:A1:56 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B1C36C1BB85F7A9CE12F798C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 63199 IP address blocks: 148.153.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c1:bb:85:f7:a9:ce:12:f7:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=994e90d0-ca35-43c0-92cb-a231f9d341fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:36:03:87:91:68:c5:a8:09:8c:05:bc:92: d5:70:bf:8b:9e:b1:58:af:07:3d:82:5f:22:74:fd: 99:a4:95:6e:9a:74:f4:8c:92:13:ee:fd:9b:34:b7: a7:62:b0:9e:dd:bd:3a:ad:be:ee:1d:6f:0a:e2:7b: 31:e0:ee:f5:d2:c9:9b:4a:59:68:2d:5a:0d:4f:f4: b5:9a:92:3a:8b:75:8b:47:d3:e8:1b:6e:ec:bb:3c: 4d:47:50:02:51:fc:65:e7:dc:75:5a:69:42:ec:9f: 9b:6c:62:cf:c5:3c:25:75:28:d0:7a:34:68:4d:cb: cf:cc:76:ca:cc:0a:e4:79:ba:14:e0:a1:4a:dc:39: 57:3c:64:11:e8:52:a3:d0:c0:0a:7a:1f:7e:b9:b7: fe:e5:d9:94:2d:80:4a:ef:68:2f:e4:42:13:4e:da: 58:1c:6f:02:8e:c5:0a:0d:cb:bc:fa:49:bd:04:62: a8:2f:03:26:3f:a3:bd:b1:69:13:75:3d:e9:d8:dd: 55:88:c7:74:48:f7:1b:4a:9f:c4:24:8f:21:ff:37: fb:c5:83:72:e3:c3:5e:30:fa:eb:c9:f4:38:6d:27: 4c:29:f6:7f:8a:83:30:44:20:53:41:33:4d:50:cf: d9:5f:9f:be:88:9e:73:72:2b:ef:55:74:1a:84:a7: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:33:8A:43:A6:80:FA:F5:54:6E:79:FD:2B:FF:86:C2:9F:DF:A1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d2:2c:d3:be:e3:a3:34:6b:bf:42:8b:5a:df:86:b7:f6:bb: c3:1d:76:58:fe:a4:ec:8c:5b:29:58:02:52:83:75:0c:79:5e: f0:03:8a:49:2a:89:fd:4e:a5:61:78:33:a7:0d:73:2e:c9:e3: 1d:4b:49:fc:b3:f1:43:40:22:8e:ad:0a:87:53:25:cf:b9:df: 83:29:ce:20:24:56:bb:a5:ac:70:36:c9:ea:d0:61:bd:42:89: 1a:58:df:45:99:11:e6:67:88:c2:c2:68:17:ae:b2:68:03:9c: b4:29:cb:09:5f:2e:73:a2:61:77:27:43:e6:02:cf:15:97:bc: 0e:e0:cd:7b:e9:c5:fc:29:9f:50:97:2e:49:bd:61:de:34:f7: cd:75:38:df:28:85:7d:b5:04:63:32:ab:61:12:18:89:d9:f0: ad:c9:dc:87:ff:d9:0d:7c:75:30:b4:c4:4c:d6:29:4e:5f:89: 3a:9c:4e:b5:7f:fa:3d:b9:8b:b0:ed:e0:71:c3:ce:61:d1:d1: 91:51:52:c5:76:86:d5:fe:92:62:e5:53:48:2b:d2:19:7a:ea: be:91:09:dd:6d:ad:6b:40:3a:0c:13:98:18:a9:1a:24:ea:59: 52:81:0c:75:73:db:2b:8e:71:41:6d:61:df:d8:3f:5d:52:92: ad:9b:d4:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsG7hfepzhL3mMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk OTk0ZTkwZDAtY2EzNS00M2MwLTkyY2ItYTIzMWY5ZDM0MWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF02A4eRaMWoCYwFvJLVcL+LnrFYrwc9gl8i dP2ZpJVumnT0jJIT7v2bNLenYrCe3b06rb7uHW8K4nsx4O710smbSlloLVoNT/S1 mpI6i3WLR9PoG27suzxNR1ACUfxl59x1WmlC7J+bbGLPxTwldSjQejRoTcvPzHbK zArkeboU4KFK3DlXPGQR6FKj0MAKeh9+ubf+5dmULYBK72gv5EITTtpYHG8CjsUK Dcu8+km9BGKoLwMmP6O9sWkTdT3p2N1ViMd0SPcbSp/EJI8h/zf7xYNy48NeMPrr yfQ4bSdMKfZ/ioMwRCBTQTNNUM/ZX5++iJ5zcivvVXQahKcx3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYzikOmgPr1VG55/Sv/hsKf36FWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWFmNDk3NWQtN2RkMC0z NTVhLThkYmYtY2IwZTM0NmU2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHSLNO+46M0a79Ci1rfhrf2u8Mddlj+pOyMWylYAlKDdQx5XvADikkq if1OpWF4M6cNcy7J4x1LSfyz8UNAIo6tCodTJc+534MpziAkVrulrHA2yerQYb1C iRpY30WZEeZniMLCaBeusmgDnLQpywlfLnOiYXcnQ+YCzxWXvA7gzXvpxfwpn1CX Lkm9Yd409811ON8ohX21BGMyq2ESGInZ8K3J3If/2Q18dTC0xEzWKU5fiTqcTrV/ +j25i7Dt4HHDzmHR0ZFRUsV2htX+kmLlU0gr0hl66r6RCd1trWtAOgwTmBipGiTq WVKBDHVz2yuOcUFtYd/YP11Skq2b1Bw= -----END CERTIFICATE-----Generated at Sat Oct 11 07:25:31 2025 by rpki-client