$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa File: 2abfa112-93c3-3da0-856a-28fad7798068.roa (raw, json) Hash identifier: anQ3Q7hHYaNEDpCgqox1PO/75PLat46wz68oi/xY7R0= Subject key identifier: 42:BD:20:B2:8D:39:F5:3F:2F:AB:EB:AF:AB:26:CF:A4:6C:AF:58:F3 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A8575F49674C973D88BD39780 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 63199 IP address blocks: 148.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f4:96:74:c9:73:d8:8b:d3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=f8265605-5098-47be-acf7-3608ed41e85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3a:ae:e3:1c:79:51:5b:53:05:8f:5d:e5:1f: f7:97:6b:a3:9f:e4:ca:63:e6:c3:47:0a:75:84:f0: 8a:8b:71:70:29:da:12:24:32:18:a1:fa:f2:cc:ce: 5e:a7:d8:67:47:9c:e8:f0:4c:28:05:bb:84:f0:a8: 2d:27:3e:18:6f:be:75:52:ef:70:0b:36:8b:82:51: 6f:11:3e:c1:91:ba:c2:8c:86:b0:94:17:50:07:d5: 1e:00:f7:fb:fd:67:18:52:89:19:85:89:ac:c4:21: 25:be:70:85:be:c9:b6:9e:c1:69:51:e4:24:a8:2c: 48:13:0d:24:0a:d2:a0:03:ee:d9:3f:a6:8f:3f:db: 23:7a:53:2b:a3:0c:76:02:88:9e:af:24:1f:71:7c: 3e:3d:35:ff:60:af:6c:11:5d:25:bd:95:b3:22:ce: ee:c6:69:4d:84:51:8d:22:62:cb:e7:9f:8f:9f:40: 53:84:00:ce:0d:b7:ea:62:17:0d:68:fa:44:16:3b: 4d:8e:20:06:b0:50:65:2f:9f:89:5c:3a:dd:a8:17: 5a:1f:5b:ce:0e:61:75:28:9c:e5:b3:7e:82:a4:ff: aa:85:27:09:66:3c:3d:48:dc:25:c4:5f:b7:f3:46: 48:cb:c3:5a:c2:c7:1c:4f:95:e6:bd:f1:fb:5f:0d: 28:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BD:20:B2:8D:39:F5:3F:2F:AB:EB:AF:AB:26:CF:A4:6C:AF:58:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a1:08:99:6f:d6:43:5f:28:06:cf:c7:b0:33:1b:4a:95:73: b4:d3:a5:1c:29:fe:e0:80:ac:d3:91:c9:df:e9:08:8f:76:f0: 53:ee:04:c7:81:f3:61:f4:c8:78:66:a9:36:4f:04:31:46:a5: 01:f5:f0:ef:d7:d1:bf:d1:4a:6a:90:28:98:17:23:62:2e:7c: 4b:68:f9:e1:8d:53:cf:09:ac:47:ba:1b:3a:30:7b:ad:f4:98: 8a:f2:d6:85:68:4e:8b:f4:b5:cb:6f:97:29:d4:7c:ed:22:18: 66:dd:ce:0f:a4:a8:50:14:6d:70:fc:52:cf:1b:c5:24:1d:93: 55:04:b8:84:64:ae:93:fc:cd:25:09:42:95:5b:11:f1:18:23: da:e4:c0:d1:67:f9:19:3d:e3:5e:ad:2e:fd:36:06:4e:06:a7: b8:df:06:72:d3:92:60:f9:83:eb:5e:0f:a0:40:3d:7d:e9:b2: 6f:1f:6d:54:81:66:df:e9:32:d1:e5:39:46:75:da:22:98:8b: fe:4e:66:8d:17:10:1c:9c:d4:1f:fe:23:da:f7:1f:6d:48:1a: e1:aa:87:61:ba:f5:35:ef:d5:f1:82:97:b4:a3:4f:89:e9:10: 49:2a:0f:04:5d:e3:97:51:67:96:cf:98:aa:ad:0a:57:a0:a0: 15:73:8f:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfSWdMlz2IvTl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjgyNjU2MDUtNTA5OC00N2JlLWFjZjctMzYwOGVkNDFlODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzqu4xx5UVtTBY9d5R/3l2ujn+TKY+bDRwp1 hPCKi3FwKdoSJDIYofryzM5ep9hnR5zo8EwoBbuE8KgtJz4Yb751Uu9wCzaLglFv ET7BkbrCjIawlBdQB9UeAPf7/WcYUokZhYmsxCElvnCFvsm2nsFpUeQkqCxIEw0k CtKgA+7ZP6aPP9sjelMrowx2AoieryQfcXw+PTX/YK9sEV0lvZWzIs7uxmlNhFGN ImLL55+Pn0BThADODbfqYhcNaPpEFjtNjiAGsFBlL5+JXDrdqBdaH1vODmF1KJzl s36CpP+qhScJZjw9SNwlxF+380ZIy8NawsccT5XmvfH7Xw0oHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK9ILKNOfU/L6vrr6smz6Rsr1jzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmFiZmExMTItOTNjMy0z ZGEwLTg1NmEtMjhmYWQ3Nzk4MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOhCJlv1kNfKAbPx7AzG0qVc7TTpRwp/uCArNORyd/pCI928FPuBMeB 82H0yHhmqTZPBDFGpQH18O/X0b/RSmqQKJgXI2IufEto+eGNU88JrEe6Gzowe630 mIry1oVoTov0tctvlynUfO0iGGbdzg+kqFAUbXD8Us8bxSQdk1UEuIRkrpP8zSUJ QpVbEfEYI9rkwNFn+Rk9416tLv02Bk4Gp7jfBnLTkmD5g+teD6BAPX3psm8fbVSB Zt/pMtHlOUZ12iKYi/5OZo0XEByc1B/+I9r3H21IGuGqh2G69TXv1fGCl7SjT4np EEkqDwRd45dRZ5bPmKqtClegoBVzjyw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:17:52 2025 by rpki-client