$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa File: 020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa (raw, json) Hash identifier: rnOd+hWaF/DIO9V+HAA/cJs+pPdR02YFQxUdgZrF6YM= Subject key identifier: EE:7E:E4:A5:61:6F:85:C0:D3:61:2D:B7:B5:C3:DC:8C:42:A0:57:1C Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A814655F6E5D8DB5722DB2100 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 63199 IP address blocks: 148.153.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:55:f6:e5:d8:db:57:22:db:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=cf84bbcf-da35-4654-baca-020f5a9f5448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:ee:c4:a5:34:4c:56:eb:f2:97:bc:bf:bf: a0:e7:d3:97:c8:8f:f9:25:ab:30:9a:66:d7:5c:94: d8:b4:db:fc:48:9c:53:53:04:74:3c:84:9e:a4:a8: b9:95:52:2c:e3:cc:4d:70:a3:5f:89:11:49:31:37: 07:b9:e4:0b:45:17:23:95:48:79:44:84:25:78:94: 7f:a1:dc:ee:1f:03:92:8f:56:f4:69:8a:bb:41:e8: f9:f8:02:aa:6c:88:4b:86:41:61:f5:26:60:64:e7: 89:b8:2d:d1:f1:62:57:7e:38:b2:2f:8a:b9:4d:48: a4:35:f0:1a:47:c2:0a:03:80:bd:4a:14:d9:3e:e6: 1f:dc:7f:41:51:03:69:f6:7e:7f:63:23:d0:99:5b: 32:85:b1:21:3f:07:bd:e7:03:37:90:04:c7:39:62: f0:77:8e:ba:9a:e4:45:8e:c2:24:45:ff:5f:3f:bf: c4:d4:9b:4f:47:7f:78:da:55:0e:10:9d:67:89:00: ff:bb:ec:01:d6:84:bd:53:bf:c0:4d:20:20:a0:21: 44:ea:d2:a2:88:77:a5:5b:e1:4e:85:6e:42:fa:5a: 01:db:85:44:65:35:ab:3e:f7:a2:71:ed:bc:61:1e: c0:bd:cc:a5:03:e3:3e:c4:91:7a:b9:86:7a:03:3d: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7E:E4:A5:61:6F:85:C0:D3:61:2D:B7:B5:C3:DC:8C:42:A0:57:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3f:e4:13:61:b5:d9:81:ef:c1:5b:8b:92:a8:5b:0f:14:22: a7:4a:98:66:48:b2:d9:a9:ed:26:15:53:b6:97:0c:78:31:16: e0:bc:df:02:14:16:0a:9c:df:47:f7:b9:6b:c9:72:5f:8d:55: 7b:de:e4:63:79:2c:03:72:6e:29:d3:30:9a:ca:64:65:6c:d1: c6:43:81:2f:70:f9:5e:4b:c5:34:fe:b2:bf:0d:15:54:db:58: 23:90:d1:5c:1e:ea:54:2e:fa:59:3c:24:15:c9:83:ec:73:e6: 3d:1e:e5:a4:00:05:ad:32:92:35:fc:09:b5:a2:f7:51:78:f8: b0:c0:d8:e7:66:8e:e2:0e:cd:7e:7a:63:69:c3:84:3f:fe:e6: 79:d4:80:4c:ba:5d:dd:39:22:14:aa:9c:71:55:41:f0:36:9b: 4a:06:2f:85:d5:6d:28:30:1b:65:94:47:27:f0:eb:cf:02:43: c8:d2:d8:1d:62:df:d5:72:8c:9d:1f:16:a8:d2:39:38:51:da: a9:8c:0e:05:cd:1c:b9:d1:98:71:5f:06:f3:0d:38:79:7e:6f: e4:90:6a:15:c1:65:fa:e0:26:1f:03:e6:cd:df:88:ba:db:86: c3:89:08:ff:2e:6c:c3:56:5b:f3:9e:5b:13:ee:e7:04:0d:d6: a2:13:04:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRlX25djbVyLbIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2Y4NGJiY2YtZGEzNS00NjU0LWJhY2EtMDIwZjVhOWY1NDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwjuxKU0TFbr8pe8v7+g59OXyI/5JaswmmbX XJTYtNv8SJxTUwR0PISepKi5lVIs48xNcKNfiRFJMTcHueQLRRcjlUh5RIQleJR/ odzuHwOSj1b0aYq7Qej5+AKqbIhLhkFh9SZgZOeJuC3R8WJXfjiyL4q5TUikNfAa R8IKA4C9ShTZPuYf3H9BUQNp9n5/YyPQmVsyhbEhPwe95wM3kATHOWLwd466muRF jsIkRf9fP7/E1JtPR3942lUOEJ1niQD/u+wB1oS9U7/ATSAgoCFE6tKiiHelW+FO hW5C+loB24VEZTWrPveice28YR7AvcylA+M+xJF6uYZ6Az3ZvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5+5KVhb4XA02Ett7XD3IxCoFccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDIwYjU5YTItYTlhYS0z OGNiLWJjMmItZDM3YzUyN2I0MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc/5BNhtdmB78Fbi5KoWw8UIqdKmGZIstmp7SYVU7aXDHgxFuC83wIU Fgqc30f3uWvJcl+NVXve5GN5LANybinTMJrKZGVs0cZDgS9w+V5LxTT+sr8NFVTb WCOQ0Vwe6lQu+lk8JBXJg+xz5j0e5aQABa0ykjX8CbWi91F4+LDA2OdmjuIOzX56 Y2nDhD/+5nnUgEy6Xd05IhSqnHFVQfA2m0oGL4XVbSgwG2WURyfw688CQ8jS2B1i 39VyjJ0fFqjSOThR2qmMDgXNHLnRmHFfBvMNOHl+b+SQahXBZfrgJh8D5s3fiLrb hsOJCP8ubMNWW/OeWxPu5wQN1qITBF8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:34:55 2025 by rpki-client