$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa File: 1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa (raw, json) Hash identifier: rv0Vwofs7nBWFKfNNnptKpFkRHG+68bOD6YkX5JYK9M= Subject key identifier: 22:1A:32:50:CF:F1:98:08:64:AC:29:BA:08:A0:26:9F:94:5B:F2:DF Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A5FC5DE307FB1F4E591B1D000 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 63199 IP address blocks: 148.153.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:de:30:7f:b1:f4:e5:91:b1:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=ff2fafa5-eb20-4e6d-ba61-cccc6e5c5a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:59:1e:a4:99:37:10:1f:06:37:30:34:1f: 2d:44:47:ce:36:f9:cb:37:b4:32:6e:1a:32:25:7a: d3:1a:53:28:ba:17:3f:18:b6:3f:61:22:e5:f2:27: 83:a9:0b:c0:2b:c0:29:87:ef:31:c4:72:cb:1a:8c: 03:2a:06:00:e0:7f:10:4b:76:57:2c:9c:84:39:d1: fb:c0:08:4b:b8:2a:08:1f:73:02:1b:05:af:d5:56: d0:2a:61:e3:af:3e:2d:ca:fc:2e:3f:e5:ee:21:68: b9:05:6b:6c:51:5b:3f:74:1c:75:e5:d1:6b:c6:96: 02:d6:ba:35:1d:c3:44:00:56:d9:dc:b6:3e:91:2c: 77:c3:3d:9f:e5:5a:04:78:a6:83:dd:5d:dd:45:8c: 7e:d7:10:e0:5f:85:e7:6b:6e:61:79:c6:71:53:8e: a4:47:90:43:1e:da:55:cb:68:cf:98:e3:ad:b5:a8: 44:1d:e5:36:3c:b5:09:f4:f7:c7:e5:ca:46:68:ac: 0f:78:1e:56:23:3f:ce:d5:b0:23:c2:d6:5b:e8:89: fb:02:11:4c:4b:e5:3b:19:0f:a8:14:38:46:5c:8e: 64:43:c2:6a:9c:48:c2:b9:b7:b8:5b:3a:95:c6:7c: ef:02:2d:d2:63:33:5b:b3:d5:d4:dc:71:f3:b8:62: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1A:32:50:CF:F1:98:08:64:AC:29:BA:08:A0:26:9F:94:5B:F2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8b:ca:b6:10:12:eb:cd:4c:83:8a:72:65:c8:58:cb:e7:c1: c3:c2:9f:63:26:62:12:8c:78:7c:8a:4f:9c:a7:39:da:f1:f7: 42:ef:8e:cf:22:04:84:98:d7:9f:62:35:e7:53:30:a0:2e:29: 3d:fa:3a:39:d6:a2:48:b2:6b:e0:07:ac:42:bf:c2:86:91:04: 3f:1c:d4:67:1e:2e:fd:ca:31:f4:f2:a8:f4:5c:a1:ad:2d:b2: a0:26:1f:ad:6b:e0:f6:e1:d9:8d:92:fd:33:47:b3:a9:52:05: 82:7c:ba:e9:88:a8:5d:c6:a6:06:79:00:16:72:9a:3d:f5:7e: 26:fc:07:df:9e:a4:cf:e8:5f:35:9d:37:e8:92:a9:6b:b1:86: 5f:7b:a5:dc:4b:de:8c:e0:16:a3:fc:70:75:20:8e:b8:cc:e4: 1c:e9:3e:c8:53:7b:c2:68:c4:58:61:ad:b0:99:0c:02:65:4c: c0:9c:87:e0:63:5f:43:5e:ce:1b:15:8b:79:f2:35:1e:13:a5: e1:18:1f:b5:07:fe:86:cc:07:ac:9f:9f:19:9f:37:8c:7e:7d: 6f:da:22:ff:ba:ce:bd:36:d4:83:20:6d:c5:64:4d:be:cc:2b: 08:e3:0e:c2:d7:c0:18:bf:9d:36:ee:23:05:71:ab:4d:31:eb: fe:41:93:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxd4wf7H05ZGx0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZmYyZmFmYTUtZWIyMC00ZTZkLWJhNjEtY2NjYzZlNWM1YTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6RZHqSZNxAfBjcwNB8tREfONvnLN7Qybhoy JXrTGlMouhc/GLY/YSLl8ieDqQvAK8Aph+8xxHLLGowDKgYA4H8QS3ZXLJyEOdH7 wAhLuCoIH3MCGwWv1VbQKmHjrz4tyvwuP+XuIWi5BWtsUVs/dBx15dFrxpYC1ro1 HcNEAFbZ3LY+kSx3wz2f5VoEeKaD3V3dRYx+1xDgX4Xna25hecZxU46kR5BDHtpV y2jPmOOttahEHeU2PLUJ9PfH5cpGaKwPeB5WIz/O1bAjwtZb6In7AhFMS+U7GQ+o FDhGXI5kQ8JqnEjCube4WzqVxnzvAi3SYzNbs9XU3HHzuGKEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIaMlDP8ZgIZKwpugigJp+UW/LfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMWViNmFjMjYtZGU4YS0z NTU4LTkzOWYtYTdkY2FjNWNiOGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCLyrYQEuvNTIOKcmXIWMvnwcPCn2MmYhKMeHyKT5ynOdrx90Lvjs8i BISY159iNedTMKAuKT36OjnWokiya+AHrEK/woaRBD8c1GceLv3KMfTyqPRcoa0t sqAmH61r4Pbh2Y2S/TNHs6lSBYJ8uumIqF3GpgZ5ABZymj31fib8B9+epM/oXzWd N+iSqWuxhl97pdxL3ozgFqP8cHUgjrjM5BzpPshTe8JoxFhhrbCZDAJlTMCch+Bj X0NezhsVi3nyNR4TpeEYH7UH/obMB6yfnxmfN4x+fW/aIv+6zr021IMgbcVkTb7M KwjjDsLXwBi/nTbuIwVxq00x6/5Bkzo= -----END CERTIFICATE-----Generated at Thu Jul 10 02:04:10 2025 by rpki-client