$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa File: 0399118c-609b-3b8a-8490-f03a3e398256.roa (raw, json) Hash identifier: GHrd4Y0SwOw5k+qGJ2Pd9v1TicPB8otquSZ7yNFr15g= Subject key identifier: A5:49:04:AA:AC:BA:84:B2:6E:F9:1C:11:16:7E:AA:18:14:E8:FF:A2 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584BB2F7CECB664B810D30596240 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 63199 IP address blocks: 148.153.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ce:cb:66:4b:81:0d:30:59:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=6ff501ed-b05d-44c9-8a53-063d8845a84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:f9:2a:69:ff:fc:50:68:e0:57:45:a1:a9: 6d:ae:7f:2f:cb:5a:f9:aa:87:6e:4f:4d:f1:94:59: 1a:e2:1e:34:f6:04:dc:70:b7:25:a2:29:ea:e9:67: 96:f7:ec:6b:3e:c2:a1:cf:bc:36:9b:22:4b:36:2e: 4a:c3:b9:ff:fa:57:ff:7d:62:c0:a7:5b:9a:3a:0d: be:aa:09:2c:13:a5:a1:21:96:51:eb:66:c1:13:72: 5c:9a:59:8b:f9:6d:70:7d:4d:de:69:f9:28:d8:c2: 61:59:11:4e:1d:51:2d:ba:93:ce:31:fe:76:41:88: 3a:1b:b4:53:39:01:07:c3:5d:22:2f:4f:11:e4:99: fb:e4:65:a0:fc:dd:5e:9f:8e:8e:ae:44:a8:fc:9c: aa:2c:1e:99:f3:99:96:fe:3f:d7:f5:97:57:50:12: 69:c1:d5:52:8c:da:6b:31:8c:89:1c:4d:6c:14:eb: 78:62:3b:96:ad:99:f2:e0:65:e8:fc:33:6c:4b:f2: 58:e8:a2:e7:1d:2d:5b:ad:f8:39:e2:a5:57:4b:7f: e1:1d:5f:99:dc:29:43:3c:b7:a5:8d:0b:05:dd:61: f4:bb:bf:23:22:29:e8:1d:f7:97:10:0a:cd:9e:82: 3b:0d:b4:d5:9f:84:11:96:89:3d:11:29:3f:c4:76: e4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:49:04:AA:AC:BA:84:B2:6E:F9:1C:11:16:7E:AA:18:14:E8:FF:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cc:60:75:c1:af:51:28:88:9a:0b:dc:89:b6:42:1f:14:b1: 63:2b:83:b1:a0:e3:a4:97:f8:88:4e:da:e1:5b:3a:b9:1f:29: e7:7b:ab:c2:9c:40:84:21:b6:25:fa:81:44:b9:f6:0d:45:5a: 0d:0a:da:7c:0e:38:42:be:15:8d:1d:8d:db:49:cb:17:af:62: fe:2c:0e:a0:a2:7f:85:7c:c9:40:20:4b:fc:46:09:38:d5:45: e7:0a:07:22:c4:65:da:77:f4:a3:89:b9:75:87:d4:10:c0:f2: 60:d7:c6:7f:ef:ae:12:65:6d:59:09:5b:56:d6:e7:1e:25:19: 35:d2:24:f3:a6:49:46:60:d7:2f:2c:56:a3:7d:bb:7e:ca:49: af:f5:8f:4c:1e:6a:1c:57:ae:9e:a6:fb:7d:af:06:03:b7:eb: 2f:63:d4:40:f9:ca:48:af:b6:33:7a:10:fe:ee:bb:c8:4b:d9: b4:33:1d:f5:ab:21:93:e4:66:73:d8:06:77:04:d5:44:3c:2a: 3a:6d:52:f3:6b:e0:e6:7b:74:65:f0:bc:b0:17:fd:ad:e8:c3: 99:0c:c4:87:3d:e6:f3:44:38:b9:e6:c4:1a:58:5c:43:63:ed: e5:cd:c9:75:61:98:88:26:72:41:36:44:71:6c:56:8a:65:d0: f8:ae:9f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy987LZkuBDTBZYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NmZmNTAxZWQtYjA1ZC00NGM5LThhNTMtMDYzZDg4NDVhODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4z5Kmn//FBo4FdFoaltrn8vy1r5qoduT03x lFka4h409gTccLcloinq6WeW9+xrPsKhz7w2myJLNi5Kw7n/+lf/fWLAp1uaOg2+ qgksE6WhIZZR62bBE3JcmlmL+W1wfU3eafko2MJhWRFOHVEtupPOMf52QYg6G7RT OQEHw10iL08R5Jn75GWg/N1en46OrkSo/JyqLB6Z85mW/j/X9ZdXUBJpwdVSjNpr MYyJHE1sFOt4YjuWrZny4GXo/DNsS/JY6KLnHS1brfg54qVXS3/hHV+Z3ClDPLel jQsF3WH0u78jIinoHfeXEArNnoI7DbTVn4QRlok9ESk/xHbkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVJBKqsuoSybvkcERZ+qhgU6P+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDM5OTExOGMtNjA5Yi0z YjhhLTg0OTAtZjAzYTNlMzk4MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPMYHXBr1EoiJoL3Im2Qh8UsWMrg7Gg46SX+IhO2uFbOrkfKed7q8Kc QIQhtiX6gUS59g1FWg0K2nwOOEK+FY0djdtJyxevYv4sDqCif4V8yUAgS/xGCTjV RecKByLEZdp39KOJuXWH1BDA8mDXxn/vrhJlbVkJW1bW5x4lGTXSJPOmSUZg1y8s VqN9u37KSa/1j0weahxXrp6m+32vBgO36y9j1ED5ykivtjN6EP7uu8hL2bQzHfWr IZPkZnPYBncE1UQ8KjptUvNr4OZ7dGXwvLAX/a3ow5kMxIc95vNEOLnmxBpYXENj 7eXNyXVhmIgmckE2RHFsVopl0Piun90= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:14 2025 by rpki-client