$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/369d19ad-05c9-32be-8d66-3d398b6a8c58.roa File: 369d19ad-05c9-32be-8d66-3d398b6a8c58.roa (raw, json) Hash identifier: Q1GA/hcEW9nhXDFKUGNz4o9XYcfpIreqZ1BzuvQIE4w= Subject key identifier: ED:1E:C8:37:15:32:D6:D2:8A:1C:9E:93:EC:25:4D:C1:AB:A6:A8:C4 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B1C36C0B2FB79C5FE706D7180 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/369d19ad-05c9-32be-8d66-3d398b6a8c58.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 63199 IP address blocks: 148.153.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c0:b2:fb:79:c5:fe:70:6d:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b756713d-2879-4ae9-856f-ec529c5c401c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:22:04:3f:b4:28:d8:02:bf:e8:9d:d9:d9: 69:f4:16:3d:88:c7:ea:87:f9:1a:a4:ee:2d:0b:ef: 8b:4e:8a:36:01:28:ee:db:f0:5a:7f:6d:c8:65:e8: 21:21:e1:35:bd:e5:c4:12:89:44:49:07:fc:af:cb: 54:af:38:a2:df:a9:ea:d0:74:6f:17:80:6e:24:c3: 29:6b:79:5b:23:12:dc:2a:75:f9:31:7f:be:cd:45: 55:11:b6:75:a1:0c:3b:67:2a:b6:ec:d6:60:1e:9c: 79:9b:ce:b7:78:c7:2d:60:a7:ee:9a:07:b3:dd:e6: e7:90:10:d8:36:43:a1:a6:43:57:4f:f7:3f:23:8b: 36:33:7a:e1:f4:d8:bd:a2:79:31:70:72:9a:83:f8: 4b:62:c4:81:e6:33:37:4f:30:c3:90:f1:eb:a3:29: c4:8d:d8:70:43:d7:02:f9:44:ed:05:34:11:c0:27: 79:24:d7:fa:f4:f3:3a:fa:01:70:84:73:38:c2:80: 7c:47:9c:a7:b7:6e:a6:2b:ee:73:9f:6a:73:3b:78: 2d:c1:6e:0c:39:46:51:e3:34:22:d3:57:ec:07:f2: 50:23:77:19:89:cb:69:f1:aa:ed:23:fe:2c:42:cb: 45:ab:dc:b2:da:37:07:05:17:5c:dc:a2:4f:47:60: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1E:C8:37:15:32:D6:D2:8A:1C:9E:93:EC:25:4D:C1:AB:A6:A8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/369d19ad-05c9-32be-8d66-3d398b6a8c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:94:3c:09:54:28:c0:3a:33:dc:ce:03:be:68:61:86:09:23: 3a:ae:ea:d0:9f:63:ff:9f:bd:c4:93:68:0b:ef:03:1a:7f:78: fc:5e:89:63:ad:c8:21:da:36:17:1f:55:2e:04:ba:c6:53:ce: c8:f8:7c:93:f7:48:ca:0a:34:59:b6:84:61:83:b5:8a:96:ff: 91:a7:6e:31:8c:4d:df:33:f9:b4:48:24:36:ee:a5:75:b4:41: d3:1a:36:3b:02:05:b3:51:82:25:52:03:34:f8:47:9d:b0:e6: 0c:89:f4:17:8e:73:c9:a1:0c:d4:48:47:c1:0d:48:e6:ec:3a: 6b:3c:1f:fa:1e:a5:eb:a5:19:cd:eb:1a:21:6a:ba:2d:33:e7: 4c:4b:85:5e:15:14:68:03:d9:08:4b:64:19:95:b5:a9:66:3d: 0a:41:ca:50:8c:17:ab:3e:1e:34:23:5d:0f:64:25:8f:83:65: cd:10:91:44:3e:19:f3:90:bc:d8:e6:4d:0b:5d:a9:ce:a1:c7: 84:5b:2a:16:02:80:64:07:14:8b:45:bf:03:5b:cd:a8:f8:53: 56:8a:b6:c7:63:d9:47:9f:f5:3d:13:75:c0:8f:24:d3:e6:b4: 8b:01:90:fc:f5:5b:67:15:74:bf:17:3e:0d:29:f8:9b:4f:a4: 8e:cb:9a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsCy+3nF/nBtcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Yjc1NjcxM2QtMjg3OS00YWU5LTg1NmYtZWM1MjljNWM0MDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvMiBD+0KNgCv+id2dlp9BY9iMfqh/kapO4t C++LToo2ASju2/Baf23IZeghIeE1veXEEolESQf8r8tUrzii36nq0HRvF4BuJMMp a3lbIxLcKnX5MX++zUVVEbZ1oQw7Zyq27NZgHpx5m863eMctYKfumgez3ebnkBDY NkOhpkNXT/c/I4s2M3rh9Ni9onkxcHKag/hLYsSB5jM3TzDDkPHroynEjdhwQ9cC +UTtBTQRwCd5JNf69PM6+gFwhHM4woB8R5ynt26mK+5zn2pzO3gtwW4MOUZR4zQi 01fsB/JQI3cZictp8artI/4sQstFq9yy2jcHBRdc3KJPR2BgLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0eyDcVMtbSihyek+wlTcGrpqjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMzY5ZDE5YWQtMDVjOS0z MmJlLThkNjYtM2QzOThiNmE4YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeUPAlUKMA6M9zOA75oYYYJIzqu6tCfY/+fvcSTaAvvAxp/ePxeiWOt yCHaNhcfVS4EusZTzsj4fJP3SMoKNFm2hGGDtYqW/5GnbjGMTd8z+bRIJDbupXW0 QdMaNjsCBbNRgiVSAzT4R52w5gyJ9BeOc8mhDNRIR8ENSObsOms8H/oepeulGc3r GiFqui0z50xLhV4VFGgD2QhLZBmVtalmPQpBylCMF6s+HjQjXQ9kJY+DZc0QkUQ+ GfOQvNjmTQtdqc6hx4RbKhYCgGQHFItFvwNbzaj4U1aKtsdj2Uef9T0TdcCPJNPm tIsBkPz1W2cVdL8XPg0p+JtPpI7Lmo8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:22 2025 by rpki-client