$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa File: 02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa (raw, json) Hash identifier: Js4tlQHZGxnerrRG+1bQAFGauArwv6ep5YCCHgQ3qJY= Subject key identifier: F1:D6:75:50:6B:25:84:5E:1B:5D:FE:D4:93:85:5B:28:9E:ED:39:AB Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A6F20787ED011A1A55AB59A80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa Signing time: Mon 07 Jul 2025 01:00:50 +0000 ROA not before: Mon 07 Jul 2025 01:00:50 +0000 ROA not after: Sun 05 Oct 2025 01:00:50 +0000 asID: 63199 IP address blocks: 148.153.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6f:20:78:7e:d0:11:a1:a5:5a:b5:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 7 01:00:50 2025 GMT Not After : Oct 5 01:00:50 2025 GMT Subject: CN=c105e14d-62e6-4911-b39a-b080997b7dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3a:fa:c9:aa:c0:93:08:de:14:09:8f:2a:36: 61:76:da:7a:d6:77:44:56:95:be:39:9c:21:8c:d7: 5f:31:be:e7:5c:6c:53:63:3d:6e:85:12:19:23:66: bf:a4:95:48:a0:e5:d1:1c:89:bb:96:7d:f3:96:32: ed:9f:64:7b:c4:ef:e5:86:82:d6:75:57:a4:b2:ae: 17:5a:cc:96:74:4a:e3:29:2f:5e:e7:e3:b9:75:7e: 07:ef:59:11:ae:d5:4a:ab:19:e7:fe:34:10:84:60: 7f:2b:d7:38:e2:b5:8f:0b:6c:45:93:47:9d:c6:ce: 84:b8:e7:1d:73:80:13:fb:6b:1a:1f:be:6e:c5:b4: 21:b4:a8:67:a5:04:b9:0b:68:9d:19:6c:3d:7d:a7: f8:9e:bc:1a:41:cd:96:db:cd:7d:ae:60:06:54:54: 58:e7:b6:7d:a1:a3:d3:00:31:a7:1b:e6:0f:d4:7d: b0:0e:0d:0d:97:c5:24:dd:cd:f7:c4:2b:79:b6:39: 92:66:48:b0:43:5e:09:10:f3:69:0a:3e:26:2e:b6: cf:91:49:dc:4d:cb:5b:92:39:94:bf:f0:8e:68:13: 51:85:6b:63:3f:79:27:3e:72:59:45:39:9b:83:b9: 38:9c:73:66:88:2a:6d:24:0b:15:6f:c3:18:16:63: cc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D6:75:50:6B:25:84:5E:1B:5D:FE:D4:93:85:5B:28:9E:ED:39:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:94:3f:fe:dd:12:50:1e:a5:ed:9a:e1:b2:64:4e:eb:c8:af: 95:98:90:7e:d4:e4:0c:2f:33:01:7f:9a:80:78:07:3b:38:7e: 7a:02:f8:ad:87:26:e8:e7:8d:4e:0d:31:eb:47:0b:86:70:b4: a6:a7:72:b9:ac:b6:f7:93:ec:be:f3:fc:96:a5:f8:c2:89:cb: cb:3f:48:ac:01:40:00:8f:e9:9d:8c:54:c6:41:0e:31:1b:9b: b7:92:d1:21:d4:b2:c1:9e:cd:9c:ef:ea:26:6b:51:ff:5f:88: f4:55:ee:03:b0:23:af:b1:e7:60:2c:c0:b7:31:0a:1a:12:39: 74:ff:6e:77:64:6b:f3:eb:9b:96:9a:fb:c5:d4:e3:5b:b1:73: 77:e7:e5:b8:f4:c9:d9:66:29:61:81:e6:dc:f5:04:08:0e:65: 42:1d:d2:e7:3c:53:52:8e:57:fe:9c:da:11:49:60:1c:4c:53: eb:67:e3:62:8b:3c:50:e1:d4:d4:c0:5b:22:8f:2f:90:35:ec: e1:03:bb:ce:5c:a9:51:1a:ee:3e:7a:c9:cd:ee:35:7a:87:ae: f4:9f:f6:c3:23:c3:be:60:87:96:2e:c9:10:ed:0b:c8:d8:28: 1d:95:1e:e3:c0:32:31:a7:f5:dc:cd:17:21:0a:f9:12:12:bd: 33:73:bc:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpvIHh+0BGhpVq1moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDcwNzAxMDA1MFoXDTI1MTAwNTAxMDA1MFowLzEtMCsGA1UEAxMk YzEwNWUxNGQtNjJlNi00OTExLWIzOWEtYjA4MDk5N2I3ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijr6yarAkwjeFAmPKjZhdtp61ndEVpW+OZwh jNdfMb7nXGxTYz1uhRIZI2a/pJVIoOXRHIm7ln3zljLtn2R7xO/lhoLWdVeksq4X WsyWdErjKS9e5+O5dX4H71kRrtVKqxnn/jQQhGB/K9c44rWPC2xFk0edxs6EuOcd c4AT+2saH75uxbQhtKhnpQS5C2idGWw9faf4nrwaQc2W2819rmAGVFRY57Z9oaPT ADGnG+YP1H2wDg0Nl8Uk3c33xCt5tjmSZkiwQ14JEPNpCj4mLrbPkUncTctbkjmU v/COaBNRhWtjP3knPnJZRTmbg7k4nHNmiCptJAsVb8MYFmPMNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHWdVBrJYReG13+1JOFWyie7TmrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDJjZTIzZGQtMmJjMS0z YTAxLWFiOTItYmI4MjllMGQ1ZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeUP/7dElAepe2a4bJkTuvIr5WYkH7U5AwvMwF/moB4Bzs4fnoC+K2H JujnjU4NMetHC4ZwtKancrmstveT7L7z/Jal+MKJy8s/SKwBQACP6Z2MVMZBDjEb m7eS0SHUssGezZzv6iZrUf9fiPRV7gOwI6+x52AswLcxChoSOXT/bndka/Prm5aa +8XU41uxc3fn5bj0ydlmKWGB5tz1BAgOZUId0uc8U1KOV/6c2hFJYBxMU+tn42KL PFDh1NTAWyKPL5A17OEDu85cqVEa7j56yc3uNXqHrvSf9sMjw75gh5YuyRDtC8jY KB2VHuPAMjGn9dzNFyEK+RISvTNzvH0= -----END CERTIFICATE-----Generated at Thu Jul 10 13:54:08 2025 by rpki-client