$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa File: 04adc8be-6949-381f-85ec-0ef42f2d5286.roa (raw, json) Hash identifier: SSz8n5/OD0m2/cWP1lgH9JwF0q3y3y7bnrKLrXLxhfI= Subject key identifier: F0:E4:61:0E:97:84:B9:C8:AA:BF:B6:D9:D0:CA:F4:0B:0F:CF:29:3D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AA160E08F12EDC30450DE4580 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 63199 IP address blocks: 148.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e0:8f:12:ed:c3:04:50:de:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=9ce8f273-c4b4-4143-ba59-d56ccd907bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:0c:74:db:e5:e3:7e:3d:e0:42:77:88:3c: fb:a2:b1:60:2e:82:38:ad:5b:9a:1f:9f:86:e0:92: 3f:a7:8c:84:4c:79:62:34:9d:0c:1d:1c:d4:3e:e4: 94:de:67:54:5c:39:5b:be:a4:57:04:05:b6:bd:8f: 87:47:12:d7:61:d3:8b:e9:9b:32:f1:56:c4:dc:d1: 05:2e:42:3f:fb:4c:d3:e7:ec:66:74:39:e9:c5:89: 80:ac:da:75:68:77:17:6a:72:b5:a7:0a:5a:bb:88: 11:78:59:bb:1a:b8:8e:b8:88:db:3f:1a:e9:ca:c5: e8:a3:c2:57:5e:e2:35:4c:4b:9e:0c:3a:b2:2c:c6: 5e:5e:41:11:28:3b:96:a0:9f:2c:3d:58:77:28:32: 75:a4:c6:42:48:d8:80:6f:7c:d9:23:3f:d4:0c:3c: 2c:2b:a9:82:f7:47:8c:9f:f4:26:8a:42:4c:3f:58: 99:42:e3:ab:98:90:05:fe:52:ae:44:0b:5f:bd:8d: 39:a3:a6:e4:68:ad:09:eb:e8:c3:e1:b4:d4:d7:38: f0:4a:2a:a8:d9:1c:75:bb:87:90:e0:1c:17:c5:84: 38:52:43:8b:b2:75:7f:09:7a:e4:2f:87:97:f0:5f: ec:09:83:8d:c6:f9:3d:7c:3f:3f:61:ff:dd:c6:69: 63:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E4:61:0E:97:84:B9:C8:AA:BF:B6:D9:D0:CA:F4:0B:0F:CF:29:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:57:2e:79:d7:50:e4:b0:77:1d:7b:27:d0:be:b3:ca:c1:11: b1:fd:b5:dc:e9:db:af:9e:88:30:6d:f0:b3:f4:60:d9:32:73: 39:28:65:80:a0:68:ae:6e:6c:35:05:53:c3:b1:b5:f0:76:08: c4:b5:f1:24:42:d6:44:77:0e:99:08:c9:ea:22:36:1d:22:7b: ae:2d:c1:44:ca:10:5a:55:b4:1d:8a:66:5a:f0:42:e7:6f:03: a8:bf:52:60:ce:33:a5:5a:08:3b:ac:35:11:d6:f8:21:e5:d7: e6:e8:b5:85:02:a8:c8:68:41:42:c4:ce:75:26:fd:ae:0a:42: fc:de:2b:56:5b:a2:ec:40:3f:03:c9:ff:9c:68:52:24:de:d1: b6:de:b4:32:80:3c:95:d0:6d:9b:cb:4b:94:81:7e:38:2c:99: b5:a5:5e:69:ca:21:bb:75:8d:be:bd:f8:2f:af:11:88:e6:b8: 45:61:36:4c:8d:dc:46:69:fa:52:33:c2:9b:4e:58:e7:b3:98: ec:f1:f7:5f:6f:7f:b1:41:1a:90:21:3d:53:49:94:41:4d:e0: ef:0f:ee:be:ed:52:4d:1e:a8:c5:5f:66:99:9d:92:92:c5:37: 72:43:ae:a6:e4:5b:e9:a5:d3:52:e0:a7:db:3a:a9:35:1e:16: d9:92:a3:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOCPEu3DBFDeRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OWNlOGYyNzMtYzRiNC00MTQzLWJhNTktZDU2Y2NkOTA3YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAissMdNvl43494EJ3iDz7orFgLoI4rVuaH5+G 4JI/p4yETHliNJ0MHRzUPuSU3mdUXDlbvqRXBAW2vY+HRxLXYdOL6Zsy8VbE3NEF LkI/+0zT5+xmdDnpxYmArNp1aHcXanK1pwpau4gReFm7GriOuIjbPxrpysXoo8JX XuI1TEueDDqyLMZeXkERKDuWoJ8sPVh3KDJ1pMZCSNiAb3zZIz/UDDwsK6mC90eM n/QmikJMP1iZQuOrmJAF/lKuRAtfvY05o6bkaK0J6+jD4bTU1zjwSiqo2Rx1u4eQ 4BwXxYQ4UkOLsnV/CXrkL4eX8F/sCYONxvk9fD8/Yf/dxmljNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDkYQ6XhLnIqr+22dDK9AsPzyk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDRhZGM4YmUtNjk0OS0z ODFmLTg1ZWMtMGVmNDJmMmQ1Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJXLnnXUOSwdx17J9C+s8rBEbH9tdzp26+eiDBt8LP0YNkyczkoZYCg aK5ubDUFU8OxtfB2CMS18SRC1kR3DpkIyeoiNh0ie64twUTKEFpVtB2KZlrwQudv A6i/UmDOM6VaCDusNRHW+CHl1+botYUCqMhoQULEznUm/a4KQvzeK1ZbouxAPwPJ /5xoUiTe0bbetDKAPJXQbZvLS5SBfjgsmbWlXmnKIbt1jb69+C+vEYjmuEVhNkyN 3EZp+lIzwptOWOezmOzx919vf7FBGpAhPVNJlEFN4O8P7r7tUk0eqMVfZpmdkpLF N3JDrqbkW+ml01Lgp9s6qTUeFtmSoyY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:37 2025 by rpki-client