$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa File: 2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa (raw, json) Hash identifier: uRxwnJylMlKpdSVmlT6TaAAtnHHIDkJkk5ztuQ960HU= Subject key identifier: 17:51:65:B1:78:2B:FB:7E:B5:12:6C:35:51:90:0E:23:44:67:E5:44 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B9E07BAB8FE4B629AF3900EC0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 63199 IP address blocks: 148.153.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ba:b8:fe:4b:62:9a:f3:90:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=70b7a349-cff9-4416-a35b-af9f82cbbfaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:fc:b8:b4:de:d5:9d:58:76:3a:a2:95:e8: fe:b6:c5:4a:40:40:c2:b2:9c:5f:e4:33:24:15:30: 23:68:b2:65:9e:6d:c5:45:72:b8:14:16:5a:95:fc: 5c:c9:3f:bc:9d:8e:84:1f:f2:0c:2b:f8:49:58:00: fb:fb:16:fd:a6:cf:de:bc:6d:f9:88:df:bd:e0:15: 8d:99:3d:25:6b:cd:fe:45:ca:73:8a:52:87:10:4c: 68:cd:b6:03:b3:98:05:c1:bc:35:b2:6e:00:73:c1: 53:4d:24:db:18:b7:9a:bb:47:22:c4:3a:7c:8b:46: eb:27:85:6d:9d:fc:ad:e5:fd:4b:b1:62:9a:a0:85: 99:11:f4:dd:c6:e3:48:d2:a1:33:e6:ac:c4:aa:c5: e7:2f:fa:29:10:c0:4d:90:49:aa:51:ef:9e:d5:70: c8:5f:c1:ae:ae:e4:43:eb:bb:32:84:f8:fe:a0:b8: 74:43:ae:54:c2:f1:00:e9:ec:cc:a2:ff:2c:3f:ee: e2:08:24:b5:03:50:32:50:a6:ba:e0:b5:84:05:1a: fa:7d:4c:f9:e7:e8:f6:5b:6f:41:ab:ef:c9:14:eb: d5:02:54:1e:15:4f:e5:28:ad:ef:45:95:b9:4f:f0: d6:1a:2c:6c:d1:19:04:c3:7e:e1:f0:43:57:a7:55: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:51:65:B1:78:2B:FB:7E:B5:12:6C:35:51:90:0E:23:44:67:E5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c7:13:8c:10:cd:31:a7:8d:5f:c1:81:e2:14:d4:2a:08:29: 98:5d:17:26:57:29:d0:90:b8:f4:dd:0b:c0:d9:d8:e0:0f:b9: 1a:4e:6b:78:eb:05:08:2e:6b:ad:c1:26:d7:f9:90:63:71:10: ee:bf:7c:23:82:a2:a8:ad:d9:2e:3c:74:53:57:3f:dd:81:4f: d3:64:fa:c2:8a:12:2b:fe:69:0e:c2:5a:ba:ae:e9:d2:b3:62: c5:cf:cb:bb:fb:e6:76:f7:ec:32:b8:74:b7:71:74:de:eb:8c: fe:10:0a:89:2f:2b:fa:cf:f4:2c:09:e9:86:7e:e4:f1:b8:cf: d3:42:e0:23:e4:e4:15:5f:a6:d7:04:12:18:e6:6d:93:df:d7: 81:72:84:c1:ca:43:b1:ec:1b:bd:01:1e:3f:dd:f4:48:2a:d7: 4d:ce:54:1c:bd:ca:ac:30:42:2a:d3:59:90:24:3f:31:51:01: 9a:ed:65:b0:9d:b9:33:ff:3e:96:e8:86:91:66:aa:fc:86:81: 1f:c2:fa:00:cf:fc:d3:56:ee:14:8e:ed:06:d0:f5:9a:a7:be: ae:77:85:49:94:85:ed:24:75:dc:c9:a4:0e:93:c3:5b:98:ef: be:ba:24:47:41:4e:0d:e9:c6:fe:39:58:fe:ed:61:dc:67:d8: 8f:36:aa:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7q4/ktimvOQDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NzBiN2EzNDktY2ZmOS00NDE2LWEzNWItYWY5ZjgyY2JiZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscX8uLTe1Z1Ydjqilej+tsVKQEDCspxf5DMk FTAjaLJlnm3FRXK4FBZalfxcyT+8nY6EH/IMK/hJWAD7+xb9ps/evG35iN+94BWN mT0la83+RcpzilKHEExozbYDs5gFwbw1sm4Ac8FTTSTbGLeau0cixDp8i0brJ4Vt nfyt5f1LsWKaoIWZEfTdxuNI0qEz5qzEqsXnL/opEMBNkEmqUe+e1XDIX8GuruRD 67syhPj+oLh0Q65UwvEA6ezMov8sP+7iCCS1A1AyUKa64LWEBRr6fUz55+j2W29B q+/JFOvVAlQeFU/lKK3vRZW5T/DWGixs0RkEw37h8ENXp1V8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdRZbF4K/t+tRJsNVGQDiNEZ+VEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmMyMGQyMWItOGEwZS0z ZGY0LTkxMTMtYzg2NmY1Yjk4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJm5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7HE4wQzTGnjV/BgeIU1CoIKZhdFyZXKdCQuPTdC8DZ2OAPuRpOa3jr BQgua63BJtf5kGNxEO6/fCOCoqit2S48dFNXP92BT9Nk+sKKEiv+aQ7CWrqu6dKz YsXPy7v75nb37DK4dLdxdN7rjP4QCokvK/rP9CwJ6YZ+5PG4z9NC4CPk5BVfptcE EhjmbZPf14FyhMHKQ7HsG70BHj/d9Egq103OVBy9yqwwQirTWZAkPzFRAZrtZbCd uTP/PpbohpFmqvyGgR/C+gDP/NNW7hSO7QbQ9Zqnvq53hUmUhe0kddzJpA6Tw1uY 7766JEdBTg3pxv45WP7tYdxn2I82qtc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:36 2025 by rpki-client