$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa File: cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa (raw, json) Hash identifier: 4PJsQ5c44BTy+w1DMB0uBTM136hv4R1inkCAhQ8tX+U= Subject key identifier: EC:B3:49:9A:C7:FD:88:0D:60:45:B5:4B:4D:AE:25:85:9C:60:CC:74 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B4616FE92D8A2A916FE4A7580 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 63199 IP address blocks: 148.153.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:16:fe:92:d8:a2:a9:16:fe:4a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=1022efd9-5035-4007-a519-c6cfb4871ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:93:b7:70:1f:20:ce:4a:78:b8:63:5b:cb:68: 61:f2:59:00:06:7a:23:3d:a7:85:09:aa:22:a5:c9: b0:6d:2a:2c:c9:d6:e0:06:1e:86:27:17:cf:e3:82: e0:f6:08:58:e3:21:0a:cb:34:8a:4d:b4:16:26:65: 40:be:d3:0e:b0:60:b5:a9:52:4c:75:dd:21:76:87: a3:fc:ce:9d:7b:ae:b1:be:83:0a:98:fc:b1:cd:e8: 16:7c:61:91:be:3c:ca:15:d8:be:b6:16:26:3c:80: 92:b4:fd:51:f7:ce:5b:28:87:cf:26:1d:24:24:dc: 1f:f7:4b:4b:cf:57:a8:45:19:4f:cf:77:8b:7c:46: 71:16:9c:b5:32:06:3d:a9:ee:1e:28:da:36:1a:1b: 94:92:fa:86:04:62:30:fd:d0:30:6c:1b:11:7e:3a: 32:d2:34:a9:79:62:e8:e8:aa:ff:dd:60:2e:6c:3f: a5:f6:19:de:2e:9d:6e:95:23:65:13:b0:ee:25:d8: d8:fe:d3:c8:1f:30:4a:2d:4d:17:29:20:8b:32:2b: cf:82:a3:c1:a1:18:3f:2b:1f:ae:e1:ad:be:fa:99: 71:a5:61:e3:e1:61:6c:56:a5:76:32:5a:4f:06:4e: 66:3d:e2:95:5b:db:f9:a2:8a:a6:60:93:89:4d:03: a4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B3:49:9A:C7:FD:88:0D:60:45:B5:4B:4D:AE:25:85:9C:60:CC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c9:80:7e:bc:e4:14:fe:93:97:bd:ce:e5:04:0f:a4:7f:7e: 0b:a6:54:73:99:15:6b:98:84:49:0b:ae:df:62:e4:e4:a3:d3: 96:15:92:24:40:91:e8:bc:e3:23:ef:2a:cb:98:88:c6:fc:a7: f8:21:08:21:10:2e:e7:d5:03:f5:9b:b3:65:1d:54:c1:95:f6: d8:05:ea:11:1f:c8:fc:5f:99:76:a7:61:f8:49:78:45:b2:af: f2:fd:13:fe:1e:bd:de:10:f2:c5:a3:8a:01:e1:9e:36:75:4f: 5f:52:9d:6d:52:d7:e0:8f:39:7c:61:40:d2:5c:9d:c3:5c:f6: 4f:06:d4:cb:1e:3f:4a:a4:c6:f8:69:a2:9e:64:5e:e7:c0:47: b3:26:1c:7e:26:1c:7f:67:1d:78:62:6c:13:79:bf:d2:2a:10: 1d:c5:66:4e:c7:ab:6a:c1:24:28:50:f0:e0:99:a1:4f:8e:0e: 62:e2:cc:ae:ef:11:d2:07:5f:0c:96:ef:a6:5a:20:0f:53:27: 1e:74:37:c6:d8:e8:13:45:b4:a3:1d:41:7a:68:09:7e:f5:db: 39:d9:64:32:13:f6:03:5f:0d:60:59:03:fb:11:29:3d:2d:cd: 53:c7:eb:bc:5a:1e:38:d8:c5:b2:db:cc:09:56:7b:a8:66:4e: 5a:72:d5:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFv6S2KKpFv5KdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MTAyMmVmZDktNTAzNS00MDA3LWE1MTktYzZjZmI0ODcxY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJO3cB8gzkp4uGNby2hh8lkABnojPaeFCaoi pcmwbSosydbgBh6GJxfP44Lg9ghY4yEKyzSKTbQWJmVAvtMOsGC1qVJMdd0hdoej /M6de66xvoMKmPyxzegWfGGRvjzKFdi+thYmPICStP1R985bKIfPJh0kJNwf90tL z1eoRRlPz3eLfEZxFpy1MgY9qe4eKNo2GhuUkvqGBGIw/dAwbBsRfjoy0jSpeWLo 6Kr/3WAubD+l9hneLp1ulSNlE7DuJdjY/tPIHzBKLU0XKSCLMivPgqPBoRg/Kx+u 4a2++plxpWHj4WFsVqV2MlpPBk5mPeKVW9v5ooqmYJOJTQOk6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyzSZrH/YgNYEW1S02uJYWcYMx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2RmMGRiZTMtYjRkYi0z OTliLWI2ZDItMmEyMjk4OThmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDJgH685BT+k5e9zuUED6R/fgumVHOZFWuYhEkLrt9i5OSj05YVkiRA kei84yPvKsuYiMb8p/ghCCEQLufVA/Wbs2UdVMGV9tgF6hEfyPxfmXanYfhJeEWy r/L9E/4evd4Q8sWjigHhnjZ1T19SnW1S1+CPOXxhQNJcncNc9k8G1MseP0qkxvhp op5kXufAR7MmHH4mHH9nHXhibBN5v9IqEB3FZk7Hq2rBJChQ8OCZoU+ODmLizK7v EdIHXwyW76ZaIA9TJx50N8bY6BNFtKMdQXpoCX712znZZDIT9gNfDWBZA/sRKT0t zVPH67xaHjjYxbLbzAlWe6hmTlpy1XY= -----END CERTIFICATE-----Generated at Sat Oct 11 07:24:26 2025 by rpki-client