$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa File: f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa (raw, json) Hash identifier: E68UM6EzLgHdc9LQEOo/mHx/6zgFI8zBY0tUUjQ6+AQ= Subject key identifier: B0:AE:25:4F:10:11:09:E4:09:83:B9:A8:80:CF:B8:95:09:20:14:A7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B2A2C3ECD71910F2736237720 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 63199 IP address blocks: 148.153.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3e:cd:71:91:0f:27:36:23:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=4d1e05fe-9fd0-4130-99d8-5a446dd8bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:c7:3b:9f:58:7c:ad:38:df:28:22:71:22: 93:6b:05:0f:23:b9:15:ca:e0:80:01:b5:09:56:f8: db:1f:52:04:5c:06:0b:65:16:1f:c9:37:5e:96:a5: c9:cb:6d:f7:e8:75:93:2d:29:c0:fa:ce:df:0e:7d: 28:3a:f6:ad:3e:a8:71:22:77:1b:6d:10:6a:bd:52: e3:38:e0:fe:8d:06:f2:04:a3:8d:90:7d:6c:18:28: ee:a3:44:8b:57:08:b3:86:b3:10:c8:e5:93:a7:cc: 26:88:c7:ee:83:c4:2e:be:6e:02:4b:b6:2f:40:33: 83:01:f7:5c:f6:d2:b4:e4:f7:a4:15:97:dc:9c:38: 44:56:f2:0d:c1:99:fc:46:5a:f7:f9:d1:e8:c6:f0: 55:21:48:61:6e:42:cb:2c:64:94:15:2e:19:f3:6b: 45:b0:11:76:5d:5b:74:43:bc:3b:1f:3d:b5:e6:87: 24:87:15:20:bf:02:ed:bd:c3:57:f5:90:35:8c:5c: 3b:da:0f:71:55:43:ac:fc:95:9d:2a:b7:e4:dd:7f: e0:fe:b9:1c:3e:55:89:52:85:56:66:09:00:da:4e: e7:f6:6a:d6:f1:1a:5b:f8:6c:2b:af:55:2f:64:20: 7a:7b:af:d9:5b:d5:7f:10:90:50:72:f7:1b:3a:2a: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AE:25:4F:10:11:09:E4:09:83:B9:A8:80:CF:B8:95:09:20:14:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/f736df18-cb5f-32c7-8ca3-ea4622e3622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ef:f1:bd:8c:b4:d6:3e:79:23:10:73:93:51:c2:54:e4:c0: 11:3f:6a:24:89:c9:e1:4e:e1:c0:71:31:9f:09:6f:fe:9f:ec: 8d:54:7d:d8:31:e9:7c:38:bf:2e:ab:83:a0:fd:09:8f:3e:fe: 6a:76:71:a3:88:aa:d6:3d:56:ec:2c:7b:02:ef:91:0e:9d:6e: dc:0c:e8:df:c5:0d:eb:06:53:c9:2c:4c:67:f6:83:64:71:bc: d5:17:d8:00:08:a5:e1:3c:0f:ab:db:c6:7b:2d:ad:4d:fa:7d: be:d3:6e:57:26:bb:fb:93:fc:1a:93:a9:85:86:5c:ff:95:f3: a8:d4:84:f8:a3:67:e6:99:2a:e1:d3:1b:94:e4:5f:d1:9e:25: 85:65:38:e8:41:22:00:0f:45:a2:90:16:ef:51:cc:74:a7:13: 7b:39:e3:be:1a:8f:43:21:3d:5e:b7:5f:7d:a3:1a:a6:44:e1: c4:1d:e2:8e:55:bf:c4:d5:c8:5d:48:e8:b9:bb:74:5d:a7:52: 55:c0:c2:e3:ea:38:cc:44:96:ce:b2:4f:77:f4:b8:92:e1:d6: 6e:5f:1e:88:b1:ce:af:0c:92:04:ff:be:f4:2d:89:70:6a:8c: 5b:20:65:57:60:f8:99:41:0b:49:d8:c8:ad:f5:15:dc:a5:cf: f9:78:d8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLD7NcZEPJzYjdyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NGQxZTA1ZmUtOWZkMC00MTMwLTk5ZDgtNWE0NDZkZDhiYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthPHO59YfK043ygicSKTawUPI7kVyuCAAbUJ VvjbH1IEXAYLZRYfyTdelqXJy2336HWTLSnA+s7fDn0oOvatPqhxIncbbRBqvVLj OOD+jQbyBKONkH1sGCjuo0SLVwizhrMQyOWTp8wmiMfug8Quvm4CS7YvQDODAfdc 9tK05PekFZfcnDhEVvINwZn8Rlr3+dHoxvBVIUhhbkLLLGSUFS4Z82tFsBF2XVt0 Q7w7Hz215ockhxUgvwLtvcNX9ZA1jFw72g9xVUOs/JWdKrfk3X/g/rkcPlWJUoVW ZgkA2k7n9mrW8Rpb+Gwrr1UvZCB6e6/ZW9V/EJBQcvcbOiq2TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCuJU8QEQnkCYO5qIDPuJUJIBSnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZjczNmRmMTgtY2I1Zi0z MmM3LThjYTMtZWE0NjIyZTM2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/v8b2MtNY+eSMQc5NRwlTkwBE/aiSJyeFO4cBxMZ8Jb/6f7I1Ufdgx 6Xw4vy6rg6D9CY8+/mp2caOIqtY9VuwsewLvkQ6dbtwM6N/FDesGU8ksTGf2g2Rx vNUX2AAIpeE8D6vbxnstrU36fb7Tblcmu/uT/BqTqYWGXP+V86jUhPijZ+aZKuHT G5TkX9GeJYVlOOhBIgAPRaKQFu9RzHSnE3s5474aj0MhPV63X32jGqZE4cQd4o5V v8TVyF1I6Lm7dF2nUlXAwuPqOMxEls6yT3f0uJLh1m5fHoixzq8MkgT/vvQtiXBq jFsgZVdg+JlBC0nYyK31Fdylz/l42CU= -----END CERTIFICATE-----Generated at Sat Oct 11 07:36:09 2025 by rpki-client