$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa File: c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa (raw, json) Hash identifier: r4a7Jk/3VgSbGov3oJblh8nKMt/TlDi1IzREP1dqqmg= Subject key identifier: B9:62:6A:0D:C0:AC:4F:95:FE:DD:15:5C:44:46:E1:91:D5:F2:86:6D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B4FDC7465172B0B8B1435C380 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 63199 IP address blocks: 148.153.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:74:65:17:2b:0b:8b:14:35:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=cbef8e6d-81f1-446b-9c07-e100e578cbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:2f:48:70:35:14:d6:b8:66:80:f1:96:55: 0a:fd:8f:e6:26:26:b2:62:dd:1d:d3:3d:7e:b0:7f: d7:f4:73:fc:58:a0:7b:cd:e4:55:6c:44:2b:a7:a5: 0f:dc:56:8c:ba:0b:8b:a2:03:84:2f:28:13:83:44: f3:2d:15:a4:7a:4b:8a:46:9c:7f:b2:b6:98:52:d8: 2e:01:94:e4:72:5b:74:8f:87:bb:83:cf:a9:e4:9f: 8e:5e:44:42:f6:1b:c8:d2:20:7f:82:d2:5a:e9:8d: 3d:6d:d7:59:c6:a5:3d:2b:9c:4e:30:73:69:a8:bc: fe:9e:42:81:5c:b1:19:6a:25:4a:ee:e2:ee:ca:af: ad:33:58:94:36:41:7f:ee:ed:53:99:53:b4:41:e9: aa:2a:75:ca:bd:f3:e2:79:72:ce:11:e7:30:5d:6a: fc:7d:7d:92:17:64:47:90:0d:0b:f0:2e:f0:ca:ed: 9a:3f:58:82:b1:97:91:d1:29:80:f6:c6:ff:ee:93: dc:1c:51:db:ff:21:a0:e7:98:76:6d:51:d4:46:94: 66:f0:0e:d0:c9:29:e9:e0:70:9c:90:4f:d4:fe:54: a3:31:7f:49:19:f6:36:d6:53:7a:c3:93:ff:a8:98: ec:eb:05:35:57:0f:93:dd:80:e6:3e:87:c1:9c:9d: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:6A:0D:C0:AC:4F:95:FE:DD:15:5C:44:46:E1:91:D5:F2:86:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f9:1f:11:48:c5:11:a8:87:5a:b9:66:95:4c:7f:e3:9b:73: 99:52:63:d0:73:b9:8c:b9:db:b4:6e:93:78:43:27:6e:d5:5f: 3c:8e:67:9f:6e:b8:38:0d:ff:57:9f:5e:16:d6:76:3e:d3:e8: 75:b7:9e:cb:34:b2:1d:40:f9:49:da:98:cf:50:3e:35:ad:1c: 17:80:b0:b6:7a:d0:31:df:92:a4:f3:f1:fb:68:a5:49:94:7e: 15:2a:ab:65:9e:86:bc:1d:59:81:56:53:79:91:b5:26:8d:22: fb:7e:2d:6b:68:23:11:75:57:f3:6c:43:6d:24:56:df:98:b6: 5f:75:ad:2e:8f:2a:65:d5:57:d7:f4:25:3b:74:13:fb:d7:33: 8a:fd:05:33:32:3d:8e:e7:77:9d:d7:fa:ea:15:77:51:66:b9: 04:51:22:8d:95:46:03:ea:2d:08:e6:f9:98:c2:b6:bd:27:30: 80:1b:a8:61:e7:4d:df:61:43:ad:98:16:9c:ba:0e:c1:3b:3a: 51:dd:af:b1:8a:0a:40:e2:3a:45:f1:e3:db:72:4f:61:2d:08: 36:3c:86:f5:0a:7a:d8:dd:21:79:48:2b:af:45:12:7b:19:00: e7:9c:f2:b0:e8:0d:b3:ef:96:10:21:76:fd:16:75:ec:be:45: 90:9f:1e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HRlFysLixQ1w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk Y2JlZjhlNmQtODFmMS00NDZiLTljMDctZTEwMGU1NzhjYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3gvSHA1FNa4ZoDxllUK/Y/mJiayYt0d0z1+ sH/X9HP8WKB7zeRVbEQrp6UP3FaMuguLogOELygTg0TzLRWkekuKRpx/sraYUtgu AZTkclt0j4e7g8+p5J+OXkRC9hvI0iB/gtJa6Y09bddZxqU9K5xOMHNpqLz+nkKB XLEZaiVK7uLuyq+tM1iUNkF/7u1TmVO0QemqKnXKvfPieXLOEecwXWr8fX2SF2RH kA0L8C7wyu2aP1iCsZeR0SmA9sb/7pPcHFHb/yGg55h2bVHURpRm8A7QySnp4HCc kE/U/lSjMX9JGfY21lN6w5P/qJjs6wU1Vw+T3YDmPofBnJ2bpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLliag3ArE+V/t0VXERG4ZHV8oZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzJhMmQzZmUtNWRlZC0z ZGRiLWE3NDktOGMwMjFlMzY4OTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJllMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP5HxFIxRGoh1q5ZpVMf+Obc5lSY9BzuYy527Ruk3hDJ27VXzyOZ59u uDgN/1efXhbWdj7T6HW3nss0sh1A+UnamM9QPjWtHBeAsLZ60DHfkqTz8ftopUmU fhUqq2WehrwdWYFWU3mRtSaNIvt+LWtoIxF1V/NsQ20kVt+Ytl91rS6PKmXVV9f0 JTt0E/vXM4r9BTMyPY7nd53X+uoVd1FmuQRRIo2VRgPqLQjm+ZjCtr0nMIAbqGHn Td9hQ62YFpy6DsE7OlHdr7GKCkDiOkXx49tyT2EtCDY8hvUKetjdIXlIK69FEnsZ AOec8rDoDbPvlhAhdv0Wdey+RZCfHgE= -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:11 2025 by rpki-client