$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa File: 020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa (raw, json) Hash identifier: Pzqtc3yzzmymQko/MPprWl8EebxRG4UTr/S2JHJ2jD8= Subject key identifier: E0:18:69:22:C0:7D:FF:2B:FB:08:7D:89:52:49:C1:7E:70:16:FD:C0 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B62020E9EB3A492AC818FBC62 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 63199 IP address blocks: 148.153.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0e:9e:b3:a4:92:ac:81:8f:bc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=db55a222-6f4e-4f81-81dc-c0d11efd1a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:80:d5:36:aa:03:ad:b7:0a:81:cd:f1:ae:17: 7c:f0:e5:63:8e:72:6d:04:5d:b9:6e:f7:f3:b1:50: 1c:6c:df:44:f7:60:2c:47:75:1a:61:d3:54:83:bd: 7c:b0:46:56:89:9b:71:a6:59:cf:a5:c7:33:28:b9: 5e:fa:a8:75:f8:71:a6:43:2e:29:72:8c:df:4f:ad: 33:f8:15:fc:90:b9:e8:00:05:40:92:f2:cf:6e:a2: 4e:ab:75:ca:8d:43:53:3e:ec:8f:57:61:e5:e5:e1: b6:a9:96:ad:8d:89:72:7d:07:19:31:f8:eb:ae:00: be:c5:f3:fd:60:25:3e:9b:fe:5e:5f:6d:4d:50:bb: ed:83:b0:f2:e5:23:c1:7e:91:4a:e1:df:1a:c8:8f: b7:cd:ec:10:2e:86:2c:ac:0f:4d:88:80:c3:42:95: 41:a9:cc:0a:64:83:a2:92:cb:5f:fa:4e:dc:5d:8c: b2:9c:40:03:b1:de:5d:1f:a3:9e:03:cc:dc:e7:a5: 0c:10:6d:45:2d:85:46:42:72:7e:91:67:1e:a8:98: 81:c5:02:de:cb:94:9b:16:22:69:67:dd:79:46:c8: b3:db:48:d4:b1:a6:4a:dc:da:60:ec:8a:34:52:44: ac:e0:1e:cd:3f:64:61:f2:ff:de:5d:89:bd:45:cf: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:18:69:22:C0:7D:FF:2B:FB:08:7D:89:52:49:C1:7E:70:16:FD:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3e:c6:57:40:57:ed:b4:7b:e5:3f:cf:a6:6e:ca:90:f2:01: 3c:1b:52:97:11:be:61:3e:97:84:64:e1:a8:22:81:3b:1f:95: e2:4d:2d:a8:62:c3:ae:75:84:23:1b:86:0d:1b:ca:1d:3a:69: 20:0c:ed:74:58:ff:a7:3e:10:a2:4f:81:b6:23:1e:93:60:98: 68:84:32:2b:f1:cb:53:54:a9:e6:4d:1b:e6:a8:3f:c6:22:c0: 22:0a:d7:bf:80:88:d5:ba:01:3b:cc:f3:35:d0:c1:cc:5a:58: 88:9f:51:c5:92:92:39:93:90:9a:e5:10:cc:09:9a:00:64:67: 31:ef:94:ca:0f:b9:61:b8:f4:25:18:74:d7:07:d7:45:3e:8a: a6:ae:66:aa:85:0f:9b:9e:c2:1a:e7:e9:0e:8b:7f:5b:1c:7f: cd:2b:00:5d:7a:71:d8:57:f3:5e:76:52:26:a1:e5:c6:3c:b5: 79:6d:ef:a0:01:46:06:88:cc:b2:a3:de:53:ed:03:42:12:bd: 50:58:82:46:2c:2b:fa:5f:01:f6:de:81:3a:85:d7:73:a3:c8: 51:91:0a:c3:97:ac:d8:c5:41:25:fe:82:42:b4:a8:f8:61:9c: e3:71:25:a7:78:32:c0:31:f2:09:4e:ff:5d:49:38:ae:d9:bd: 6c:e4:de:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAg6es6SSrIGPvGIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZGI1NWEyMjItNmY0ZS00ZjgxLTgxZGMtYzBkMTFlZmQxYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoDVNqoDrbcKgc3xrhd88OVjjnJtBF25bvfz sVAcbN9E92AsR3UaYdNUg718sEZWiZtxplnPpcczKLle+qh1+HGmQy4pcozfT60z +BX8kLnoAAVAkvLPbqJOq3XKjUNTPuyPV2Hl5eG2qZatjYlyfQcZMfjrrgC+xfP9 YCU+m/5eX21NULvtg7Dy5SPBfpFK4d8ayI+3zewQLoYsrA9NiIDDQpVBqcwKZIOi kstf+k7cXYyynEADsd5dH6OeA8zc56UMEG1FLYVGQnJ+kWceqJiBxQLey5SbFiJp Z915Rsiz20jUsaZK3Npg7Io0UkSs4B7NP2Rh8v/eXYm9Rc842wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAYaSLAff8r+wh9iVJJwX5wFv3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDIwYjU5YTItYTlhYS0z OGNiLWJjMmItZDM3YzUyN2I0MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0+xldAV+20e+U/z6ZuypDyATwbUpcRvmE+l4Rk4agigTsfleJNLahi w651hCMbhg0byh06aSAM7XRY/6c+EKJPgbYjHpNgmGiEMivxy1NUqeZNG+aoP8Yi wCIK17+AiNW6ATvM8zXQwcxaWIifUcWSkjmTkJrlEMwJmgBkZzHvlMoPuWG49CUY dNcH10U+iqauZqqFD5uewhrn6Q6Lf1scf80rAF16cdhX8152Uiah5cY8tXlt76AB RgaIzLKj3lPtA0ISvVBYgkYsK/pfAfbegTqF13OjyFGRCsOXrNjFQSX+gkK0qPhh nONxJad4MsAx8glO/11JOK7ZvWzk3t8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:16 2025 by rpki-client