$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa File: 2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa (raw, json) Hash identifier: JYvOphyyjngHD6kxrNC8Mub2P1cSJ4Qy1SkgiVeYoOg= Subject key identifier: 28:75:19:54:EE:99:11:53:83:C0:39:A1:6B:FF:37:26:A3:8F:CD:56 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584ABD4B9C0DFE1D20A3903D4A80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 63199 IP address blocks: 148.153.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:9c:0d:fe:1d:20:a3:90:3d:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=30092cc1-f4b5-485e-84b6-4f63433797e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dc:1b:d6:4d:d4:5c:12:c7:2a:85:6a:06:65: c0:54:8f:d7:11:9e:3a:ed:1d:5b:6d:c8:0f:6f:74: 8c:0e:b1:9d:e5:50:00:10:35:a9:01:86:28:cc:2c: 8e:82:4c:2e:a0:02:b4:fe:82:d8:54:76:a2:9a:10: cf:71:06:76:11:5a:6e:25:b3:10:bb:65:7d:4a:20: 20:0e:bd:6b:36:18:1e:cc:f7:6f:0c:2e:72:49:5f: 91:ee:2f:a3:7d:ba:f7:ac:2e:61:75:cf:36:24:60: 18:a3:f5:d1:d8:d1:b8:2d:45:2c:03:9d:03:2f:d8: 8e:7c:41:b0:af:ff:ca:f9:60:be:b7:09:de:ae:eb: 91:57:a2:b1:7b:09:b2:d6:1e:d8:72:66:fc:87:9c: 14:da:d1:00:58:0c:c3:9e:72:27:00:42:47:3e:5b: c5:41:24:2f:01:20:87:7d:1d:f5:ae:65:a1:09:10: c3:86:84:52:a6:80:03:b4:32:fb:0c:40:92:38:0b: 38:ce:2a:5e:84:4e:2a:5b:8b:11:71:ac:7b:b9:00: c4:f0:53:cc:15:21:6a:24:63:63:a7:35:02:e6:c5: 57:02:d7:fa:36:7d:bc:ae:53:ca:cd:80:89:18:12: 0c:8b:64:9e:d8:12:b1:66:b9:de:10:d5:1a:6e:10: 47:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:19:54:EE:99:11:53:83:C0:39:A1:6B:FF:37:26:A3:8F:CD:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a9:7c:92:37:85:6b:ab:46:2c:91:01:9d:9d:0f:a3:5f:70: 3a:3f:82:2a:57:41:10:4f:f3:b7:6a:46:89:cf:be:76:2a:d9: 1f:9a:93:99:fc:60:a2:6c:50:3a:4c:52:1f:b3:0e:43:6b:57: 3c:03:e0:34:ff:16:75:55:e6:bb:be:22:de:a4:57:ff:b1:1c: 94:ee:a9:34:67:0d:5a:34:57:cf:94:9d:a2:b2:90:d9:46:06: b8:09:84:16:30:4b:b1:6f:78:d3:64:a2:d7:4e:a0:0b:9f:08: 49:74:2b:c4:bd:50:dd:15:34:e8:59:ed:0f:2a:78:a9:65:46: 59:cc:8c:13:0a:50:a1:f6:d1:6d:f5:d4:b1:cf:e8:61:64:f8: 23:19:f3:4c:ee:4d:e3:25:f7:bf:0e:8b:64:b0:27:5b:3b:7f: ae:c6:04:9c:7e:46:8c:f5:54:d2:82:c1:2d:b8:26:b4:4a:ca: 88:0d:c3:8a:a2:c8:f3:07:14:41:58:fe:b5:7c:3b:9b:36:50: 44:e9:4a:5f:91:1e:58:12:6f:4d:5f:7b:ef:ab:38:3b:56:7e: ec:b6:fa:b6:42:d8:04:c2:f7:ab:3d:90:bb:33:42:6c:8f:a8: 99:55:38:f7:33:19:53:81:44:f9:1f:2f:59:a7:66:9f:7a:dd: 3f:69:4e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5wN/h0go5A9SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MzAwOTJjYzEtZjRiNS00ODVlLTg0YjYtNGY2MzQzMzc5N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltwb1k3UXBLHKoVqBmXAVI/XEZ467R1bbcgP b3SMDrGd5VAAEDWpAYYozCyOgkwuoAK0/oLYVHaimhDPcQZ2EVpuJbMQu2V9SiAg Dr1rNhgezPdvDC5ySV+R7i+jfbr3rC5hdc82JGAYo/XR2NG4LUUsA50DL9iOfEGw r//K+WC+twneruuRV6Kxewmy1h7Ycmb8h5wU2tEAWAzDnnInAEJHPlvFQSQvASCH fR31rmWhCRDDhoRSpoADtDL7DECSOAs4zipehE4qW4sRcax7uQDE8FPMFSFqJGNj pzUC5sVXAtf6Nn28rlPKzYCJGBIMi2Se2BKxZrneENUabhBHIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCh1GVTumRFTg8A5oWv/Nyajj81WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmMyMGQyMWItOGEwZS0z ZGY0LTkxMTMtYzg2NmY1Yjk4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJm5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2pfJI3hWurRiyRAZ2dD6NfcDo/gipXQRBP87dqRonPvnYq2R+ak5n8 YKJsUDpMUh+zDkNrVzwD4DT/FnVV5ru+It6kV/+xHJTuqTRnDVo0V8+UnaKykNlG BrgJhBYwS7FveNNkotdOoAufCEl0K8S9UN0VNOhZ7Q8qeKllRlnMjBMKUKH20W31 1LHP6GFk+CMZ80zuTeMl978Oi2SwJ1s7f67GBJx+Roz1VNKCwS24JrRKyogNw4qi yPMHFEFY/rV8O5s2UETpSl+RHlgSb01fe++rODtWfuy2+rZC2ATC96s9kLszQmyP qJlVOPczGVOBRPkfL1mnZp963T9pTsA= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:01 2025 by rpki-client