$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f424a47a-e8ad-3721-9b85-711f6e59b979.roa File: f424a47a-e8ad-3721-9b85-711f6e59b979.roa (raw, json) Hash identifier: 9ekebYfVNxgnQl5oKRnXVJrnYcLKpoS2QZkpXo88/SA= Subject key identifier: D7:18:A1:6E:11:E9:D1:88:2A:FF:3E:6C:EB:B5:5E:6B:1D:A0:96:27 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B153C1CF1FB23E957C44CBA00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f424a47a-e8ad-3721-9b85-711f6e59b979.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 7385 IP address blocks: 152.44.148.0/24 maxlen: 24 152.44.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1c:f1:fb:23:e9:57:c4:4c:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=a315aa7f-9f2a-4be3-98c4-eb1b5ee52eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:e1:98:d3:0b:a7:54:80:bf:35:b9:a4:23: b8:82:a3:8d:13:2d:3a:7d:a5:54:6a:14:ce:42:9d: 83:f7:06:ed:af:d9:13:72:e6:96:fa:89:65:bc:bd: 53:dc:22:87:e1:39:e9:0b:07:62:83:d1:71:d9:42: 94:ba:c6:18:f1:9e:2b:b5:e1:70:94:2f:f5:e8:bf: cf:ee:e6:f6:95:30:2f:fa:81:f1:f2:fc:8a:83:66: ea:73:08:40:30:4d:fe:a9:4d:54:e7:c3:a9:16:10: d5:60:57:9d:97:6a:cd:7c:9a:47:6c:65:5f:b6:98: 60:26:c8:f3:52:60:11:e4:5d:f2:d6:d0:f6:fa:6e: 23:a3:3f:5c:86:92:80:f0:79:4c:01:44:10:39:c7: d3:bf:21:53:c8:b5:30:0f:92:58:36:27:99:dc:b6: 6b:f8:04:50:d6:ca:83:30:f0:42:70:4d:ff:a5:b6: 19:62:a9:23:ec:f4:ff:4f:5e:07:ac:19:e1:9a:de: b4:1b:88:73:b4:37:3c:62:36:23:a8:a9:66:58:d1: 81:fa:92:80:5a:39:f8:82:a8:b3:04:c8:21:4a:e4: 79:13:ec:ed:1b:42:51:85:6d:cc:04:a4:93:3a:8c: 5a:bc:61:61:68:f9:67:66:33:eb:1f:da:5a:06:ee: aa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:A1:6E:11:E9:D1:88:2A:FF:3E:6C:EB:B5:5E:6B:1D:A0:96:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f424a47a-e8ad-3721-9b85-711f6e59b979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:89:cd:13:83:15:2e:19:8a:72:bb:d8:61:4d:9e:90:0c:23: a9:f2:ef:ff:4b:78:c7:82:53:ba:4a:e6:2f:3e:cf:b4:9d:e4: c0:24:c8:df:8f:fb:e4:35:e1:dd:b7:98:4b:ef:31:43:1e:96: 2b:e2:cd:f3:d5:7b:3a:60:14:38:a9:f7:5a:27:28:f2:e4:13: ae:42:ca:28:c6:2c:cd:c3:84:1d:a8:c6:70:d9:11:10:a6:a1: 09:2b:f9:ed:0d:57:06:20:a4:d3:01:3e:eb:bd:9d:ae:cf:d1: 86:67:f9:f2:ed:d2:f4:f6:37:ae:6b:e7:d8:d7:ca:cd:68:49: 28:65:9e:a5:59:92:ff:86:e1:99:71:cd:6c:31:07:85:25:15: fc:94:cd:a7:4f:c3:80:7a:21:5e:dc:e5:e6:f4:f7:50:f0:b7: 2d:3b:1f:03:6b:a3:e1:b9:b4:bc:b0:4b:ae:63:3d:a5:e4:ad: cc:d3:9c:cc:85:a8:34:6b:98:35:03:67:4d:56:c6:e6:57:c2: 83:9a:47:14:cb:25:22:6d:dd:17:12:44:cf:39:c4:19:c5:25: 72:fe:a7:06:9d:15:83:ee:2e:e4:69:78:67:c9:c7:d3:37:0f: 79:44:7c:98:40:6b:e4:15:e0:26:ac:80:42:4b:21:8b:9d:1a: e5:0d:1d:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBzx+yPpV8RMugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk YTMxNWFhN2YtOWYyYS00YmUzLTk4YzQtZWIxYjVlZTUyZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo03hmNMLp1SAvzW5pCO4gqONEy06faVUahTO Qp2D9wbtr9kTcuaW+ollvL1T3CKH4TnpCwdig9Fx2UKUusYY8Z4rteFwlC/16L/P 7ub2lTAv+oHx8vyKg2bqcwhAME3+qU1U58OpFhDVYFedl2rNfJpHbGVftphgJsjz UmAR5F3y1tD2+m4joz9chpKA8HlMAUQQOcfTvyFTyLUwD5JYNieZ3LZr+ARQ1sqD MPBCcE3/pbYZYqkj7PT/T14HrBnhmt60G4hztDc8YjYjqKlmWNGB+pKAWjn4gqiz BMghSuR5E+ztG0JRhW3MBKSTOoxavGFhaPlnZjPrH9paBu6qBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcYoW4R6dGIKv8+bOu1XmsdoJYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjQyNGE0N2EtZThhZC0z NzIxLTliODUtNzExZjZlNTliOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmCyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+JzRODFS4ZinK72GFNnpAMI6ny7/9LeMeCU7pK5i8+z7Sd5MAkyN+P ++Q14d23mEvvMUMelivizfPVezpgFDip91onKPLkE65CyijGLM3DhB2oxnDZERCm oQkr+e0NVwYgpNMBPuu9na7P0YZn+fLt0vT2N65r59jXys1oSShlnqVZkv+G4Zlx zWwxB4UlFfyUzadPw4B6IV7c5eb091Dwty07HwNro+G5tLywS65jPaXkrczTnMyF qDRrmDUDZ01WxuZXwoOaRxTLJSJt3RcSRM85xBnFJXL+pwadFYPuLuRpeGfJx9M3 D3lEfJhAa+QV4CasgEJLIYudGuUNHW0= -----END CERTIFICATE-----Generated at Fri Oct 10 23:37:51 2025 by rpki-client