$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa File: 22f2a491-5aba-30ba-8bc5-08890e1745f9.roa (raw, json) Hash identifier: Pviqek0TiBmbd3OCOcYFVy6+yZ+rEUWp6SMPet7ZPFY= Subject key identifier: 2A:48:27:E9:4B:72:97:89:70:B0:90:30:21:B4:A6:2A:6A:58:4A:56 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AB91BA61E820BEFA221E91900 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 63199 IP address blocks: 148.153.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:a6:1e:82:0b:ef:a2:21:e9:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=1a391a1c-46b5-47c2-83a4-8c2b8548c357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:46:9c:ce:81:ae:67:6f:38:cd:74:c1:07: f9:52:4b:0e:8f:b2:8d:bb:55:e2:b7:87:a6:6e:3c: 9e:59:64:09:91:0d:e7:63:2b:77:2c:4d:52:69:d7: 84:00:81:8d:7c:bb:8f:c4:4a:55:46:1a:83:75:34: 01:15:e0:a7:4f:ed:49:44:b2:da:67:6e:c7:e3:92: 5b:5d:1f:35:0b:ff:86:f4:5a:a1:ef:d5:19:85:e8: fa:a8:54:65:93:ba:78:4f:21:a3:47:17:ef:32:83: 6d:5f:e2:8b:55:5f:51:de:02:cb:dc:a1:fa:7d:1e: 0a:66:e6:a5:9e:46:21:93:3a:d0:ac:6f:fa:8c:0e: 90:c8:7c:5c:36:83:bc:c5:21:9d:33:44:f4:8f:35: 5c:34:c3:41:e7:b7:90:f3:62:6c:b9:c7:2f:40:36: a8:87:ef:4b:12:63:16:90:c1:78:68:08:4e:3f:6d: 4e:7b:f1:51:35:43:1a:5b:d5:a3:5a:42:e7:6f:8f: 13:3f:73:9f:a6:42:97:2b:72:35:4f:26:d0:8d:99: 3b:48:24:e1:5f:8c:7b:74:7c:85:7c:f2:e3:28:62: bc:ee:b6:98:f1:05:8e:a4:7d:af:9a:11:ad:d1:eb: d3:98:10:30:81:e5:19:f4:23:bb:b9:e0:35:7d:1c: ad:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:48:27:E9:4B:72:97:89:70:B0:90:30:21:B4:A6:2A:6A:58:4A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/22f2a491-5aba-30ba-8bc5-08890e1745f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1d:98:b3:ea:8e:01:88:44:4d:c0:ea:f7:4c:1e:32:cb:d2: f6:cc:42:c0:53:99:d0:cd:76:68:c0:f4:64:83:c2:7b:46:bc: 0a:93:f5:c2:d2:a1:66:d0:92:63:48:9e:fc:82:6d:9b:e7:55: 94:c1:72:14:ec:1e:ad:79:d5:88:34:9f:08:ce:12:eb:56:b4: 5f:81:9b:2f:f5:50:8e:4c:59:5f:fa:b7:c3:66:f9:48:d6:66: 12:5e:8e:07:a5:2f:15:3a:02:b5:e2:d5:df:dc:b0:80:e7:5b: f5:a9:ba:c1:a1:98:6c:29:b8:7e:54:1a:a2:cc:6d:7c:57:e0: 69:dc:c3:9a:c6:9c:d2:d1:74:b2:e1:5b:35:8b:ba:05:48:bf: cf:c4:be:53:ba:0c:6e:eb:a6:24:9f:d0:89:f2:56:1b:f7:79: c6:0f:a6:cb:a8:da:fb:1d:89:46:f3:fe:1c:87:13:ba:01:07: 37:ed:2d:4a:93:06:f2:0f:62:cf:b7:00:31:74:23:fc:dc:4f: 4b:f6:8a:b8:52:bb:90:9d:4e:7e:d6:70:cf:38:2f:b7:ec:e0: 19:6c:28:55:e1:0d:6d:47:a7:ab:1b:43:23:fc:c3:4b:bd:c5: 09:0e:47:60:65:ca:9b:23:3c:02:3c:b5:0e:56:07:11:37:4f: 49:c6:1e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6YeggvvoiHpGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MWEzOTFhMWMtNDZiNS00N2MyLTgzYTQtOGMyYjg1NDhjMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswRGnM6BrmdvOM10wQf5UksOj7KNu1Xit4em bjyeWWQJkQ3nYyt3LE1SadeEAIGNfLuPxEpVRhqDdTQBFeCnT+1JRLLaZ27H45Jb XR81C/+G9Fqh79UZhej6qFRlk7p4TyGjRxfvMoNtX+KLVV9R3gLL3KH6fR4KZual nkYhkzrQrG/6jA6QyHxcNoO8xSGdM0T0jzVcNMNB57eQ82JsuccvQDaoh+9LEmMW kMF4aAhOP21Oe/FRNUMaW9WjWkLnb48TP3OfpkKXK3I1TybQjZk7SCThX4x7dHyF fPLjKGK87raY8QWOpH2vmhGt0evTmBAwgeUZ9CO7ueA1fRytxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpIJ+lLcpeJcLCQMCG0pipqWEpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjJmMmE0OTEtNWFiYS0z MGJhLThiYzUtMDg4OTBlMTc0NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0dmLPqjgGIRE3A6vdMHjLL0vbMQsBTmdDNdmjA9GSDwntGvAqT9cLS oWbQkmNInvyCbZvnVZTBchTsHq151Yg0nwjOEutWtF+Bmy/1UI5MWV/6t8Nm+UjW ZhJejgelLxU6ArXi1d/csIDnW/WpusGhmGwpuH5UGqLMbXxX4Gncw5rGnNLRdLLh WzWLugVIv8/EvlO6DG7rpiSf0InyVhv3ecYPpsuo2vsdiUbz/hyHE7oBBzftLUqT BvIPYs+3ADF0I/zcT0v2irhSu5CdTn7WcM84L7fs4BlsKFXhDW1Hp6sbQyP8w0u9 xQkOR2BlypsjPAI8tQ5WBxE3T0nGHg0= -----END CERTIFICATE-----Generated at Wed Aug 6 09:43:53 2025 by rpki-client