$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa File: 2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa (raw, json) Hash identifier: VRMsXK1dGbuSvSycX4o1eyND/F4eAJKN9ilDAqFXPIM= Subject key identifier: 3E:6C:24:EB:74:36:67:95:65:D2:1A:6B:62:E3:DC:DF:66:DB:C2:2E Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584BBFA5A12E89A8ED03F874DA80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 63199 IP address blocks: 148.153.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a1:2e:89:a8:ed:03:f8:74:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=67426584-672f-4282-aaf6-23bf88e85487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:21:da:8d:74:50:a5:22:13:62:bc:85:d4:6a: 25:ff:b8:96:70:0a:20:66:d0:13:85:f6:cf:2e:0e: 77:1b:ee:16:3e:84:00:15:2f:91:93:4f:3b:4b:42: 1f:85:87:41:57:94:f3:ae:73:43:a8:58:90:ca:22: 46:96:36:a5:0f:4b:88:03:5b:be:b7:c5:cf:a6:58: f9:ea:ea:a1:b1:14:e3:82:e1:fc:64:92:49:91:00: 60:0b:4f:6a:72:1c:ee:0a:13:1d:c4:e8:ad:29:0b: 32:3b:40:f9:21:c6:e5:25:49:ff:bd:d0:97:46:9f: f0:8f:e3:02:bb:c8:60:8d:41:46:36:dd:90:05:d1: a2:e9:28:90:dd:8e:36:46:7f:c2:f2:05:ae:41:b2: b9:3d:12:d9:f7:99:4f:4f:fc:ad:96:cd:8e:2d:29: 52:c1:11:d7:e0:ae:87:eb:4f:c4:4e:f4:2f:2f:8f: 55:d7:66:b3:d0:35:2a:33:a7:6f:09:c4:fc:84:0e: b7:75:cf:c6:02:3b:1b:86:cb:92:76:33:5a:d5:4e: c5:bf:30:7f:43:7d:aa:10:b8:db:be:b8:59:c7:02: 3b:a3:73:0e:fc:d4:1f:de:82:3d:d2:7d:77:ff:69: 17:9a:cc:d7:5c:a1:a8:77:12:91:92:ee:01:ac:a5: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6C:24:EB:74:36:67:95:65:D2:1A:6B:62:E3:DC:DF:66:DB:C2:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2f:85:84:05:5e:82:66:c0:aa:f7:37:b9:bd:e8:2b:d8:85: 07:a9:69:16:15:bd:29:8a:d6:a4:6e:52:a8:db:b4:26:14:ec: 45:58:37:96:a5:1b:c4:f1:97:b7:a5:55:1f:2d:5a:9a:16:2c: a6:4c:58:42:76:ec:89:dd:10:ff:5d:1f:79:df:58:e0:fb:bc: 36:28:55:13:f7:49:c8:3a:e3:74:93:2a:04:57:1e:5a:38:56: f7:02:e4:96:e8:f1:55:33:bf:71:3c:b0:00:af:a3:c1:ec:3e: ed:1d:85:df:fb:0f:76:c3:97:34:18:7a:c8:87:54:70:cc:7c: f9:f8:78:78:e2:9a:65:d9:92:00:7d:b3:eb:ab:30:75:30:13: a6:94:61:74:27:cd:1b:e0:69:db:b7:c9:66:90:57:2b:6b:48: 11:53:59:40:51:9d:c8:75:55:fd:ef:7c:91:b9:6e:f2:ad:36: 47:31:5a:97:83:d2:a6:25:b9:d0:dc:38:e9:44:57:86:2b:9a: ae:c6:c1:5a:92:27:93:51:b4:e3:ce:22:39:3c:65:a8:9f:80: b9:8f:f9:31:4f:88:92:13:71:29:22:d6:6d:3a:f7:46:fc:7b: 11:29:eb:69:c9:e4:b7:ab:c4:e4:c6:d2:44:b0:98:ee:a6:24: 66:6d:7f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paEuiajtA/h02oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Njc0MjY1ODQtNjcyZi00MjgyLWFhZjYtMjNiZjg4ZTg1NDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yHajXRQpSITYryF1Gol/7iWcAogZtAThfbP Lg53G+4WPoQAFS+Rk087S0IfhYdBV5TzrnNDqFiQyiJGljalD0uIA1u+t8XPplj5 6uqhsRTjguH8ZJJJkQBgC09qchzuChMdxOitKQsyO0D5IcblJUn/vdCXRp/wj+MC u8hgjUFGNt2QBdGi6SiQ3Y42Rn/C8gWuQbK5PRLZ95lPT/ytls2OLSlSwRHX4K6H 60/ETvQvL49V12az0DUqM6dvCcT8hA63dc/GAjsbhsuSdjNa1U7FvzB/Q32qELjb vrhZxwI7o3MO/NQf3oI90n13/2kXmszXXKGodxKRku4BrKV+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5sJOt0NmeVZdIaa2Lj3N9m28IuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmZkMzBiNmQtNjJhNi0z NDc2LTk4Y2MtZjE1YTUwYmQ1MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEvhYQFXoJmwKr3N7m96CvYhQepaRYVvSmK1qRuUqjbtCYU7EVYN5al G8Txl7elVR8tWpoWLKZMWEJ27IndEP9dH3nfWOD7vDYoVRP3Scg643STKgRXHlo4 VvcC5Jbo8VUzv3E8sACvo8HsPu0dhd/7D3bDlzQYesiHVHDMfPn4eHjimmXZkgB9 s+urMHUwE6aUYXQnzRvgadu3yWaQVytrSBFTWUBRnch1Vf3vfJG5bvKtNkcxWpeD 0qYludDcOOlEV4Yrmq7GwVqSJ5NRtOPOIjk8ZaifgLmP+TFPiJITcSki1m0690b8 exEp62nJ5LerxOTG0kSwmO6mJGZtf2U= -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:02 2025 by rpki-client