$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa File: 48dc100e-8d7e-3d30-90c2-6334f2764387.roa (raw, json) Hash identifier: pHv4U6CzPIU3GOcKEse8l1vbfcIUc0rjoMyJEmD1VB8= Subject key identifier: 40:EC:A3:AD:27:6B:8F:50:B1:74:6D:04:FF:A0:C8:DE:06:DF:84:53 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AA160E0AAB9D699977C2D4D00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 63199 IP address blocks: 148.153.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e0:aa:b9:d6:99:97:7c:2d:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=62623381-bef7-4557-b58e-71ec723a9fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:95:a5:e4:00:bf:68:c9:30:56:47:37:cb:47: 81:0c:a1:ff:64:ef:ec:99:f9:50:f6:79:91:1a:74: 89:27:78:30:1c:22:ef:dc:23:2f:c0:bb:32:08:17: 49:64:dd:c1:72:d3:dc:58:fe:9d:d7:00:e2:1a:26: 44:a1:53:86:c6:38:5f:1c:52:84:bd:2f:ae:9e:a9: 4a:47:23:ee:82:73:5f:2f:b4:93:b8:18:36:7b:56: 22:69:34:0c:27:f1:05:60:04:9a:2c:ba:b5:52:b5: ce:c1:d8:77:bb:c5:1a:07:21:f9:d4:80:18:f9:89: ba:f0:6f:cd:cb:8f:88:7e:e5:1e:54:32:38:6e:d6: 89:76:d3:25:23:e4:35:1b:11:32:c1:f7:24:f1:8b: c4:1e:bc:ad:13:70:89:17:50:7c:90:93:ed:d8:94: 58:5c:82:d5:a8:bc:db:4b:26:ec:83:7a:f8:15:0c: b0:b5:a4:64:fc:58:45:0f:43:e0:f5:c3:58:ce:56: f2:43:07:20:3a:22:1d:11:0a:df:69:fc:75:09:6b: 24:5c:6a:29:74:2f:84:44:0f:a3:9d:34:3a:1d:de: 2a:ec:be:94:4f:18:2d:8e:a5:be:f3:68:3f:6a:8c: 37:f8:b2:53:3a:8b:20:16:f5:fe:ae:8b:c4:8b:45: c0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EC:A3:AD:27:6B:8F:50:B1:74:6D:04:FF:A0:C8:DE:06:DF:84:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:71:e7:aa:f9:70:26:31:1d:9c:2c:45:9a:8e:24:f8:ec:c4: bb:48:aa:7c:d9:b0:1e:95:e6:47:da:d7:16:30:1e:69:9e:8d: 8e:0e:b4:e8:59:4a:81:7d:c7:3c:db:1b:b0:6d:7f:e6:3f:6e: 1a:b3:38:62:34:5f:46:67:83:da:77:0c:b1:ce:b1:61:bb:cc: f8:90:c9:11:58:ba:c2:09:91:ea:a4:17:34:95:ce:af:b7:fb: 2d:8a:d7:8a:cd:7c:da:eb:b3:9f:7b:59:42:e0:78:c8:31:f0: 0b:e5:32:6c:54:20:31:55:ca:be:44:bb:bc:e8:d9:4d:4a:a9: be:bd:45:7b:5e:d5:da:28:d4:c5:c5:da:00:48:b9:39:26:a6: 2c:c7:26:d8:ed:8f:2f:10:a6:ef:5e:33:b2:37:db:b6:5f:a7: 1c:78:68:9d:e5:71:32:6f:af:c3:c5:14:89:6c:64:d2:2b:da: 66:d5:5f:fe:72:09:f2:61:e8:56:22:94:42:01:0f:39:f8:e9: f1:55:8f:3e:06:a8:75:58:85:7f:ff:f5:d9:1c:74:c6:25:d0: 03:79:40:86:e3:ee:2f:ec:0d:55:3e:69:f2:d1:8b:47:4e:9b: 81:af:f9:d9:e2:fe:8d:d7:56:e1:91:2f:a4:70:17:09:f8:a1: a8:75:4e:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOCqudaZl3wtTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk NjI2MjMzODEtYmVmNy00NTU3LWI1OGUtNzFlYzcyM2E5ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpWl5AC/aMkwVkc3y0eBDKH/ZO/smflQ9nmR GnSJJ3gwHCLv3CMvwLsyCBdJZN3BctPcWP6d1wDiGiZEoVOGxjhfHFKEvS+unqlK RyPugnNfL7STuBg2e1YiaTQMJ/EFYASaLLq1UrXOwdh3u8UaByH51IAY+Ym68G/N y4+IfuUeVDI4btaJdtMlI+Q1GxEywfck8YvEHrytE3CJF1B8kJPt2JRYXILVqLzb Sybsg3r4FQywtaRk/FhFD0Pg9cNYzlbyQwcgOiIdEQrfafx1CWskXGopdC+ERA+j nTQ6Hd4q7L6UTxgtjqW+82g/aow3+LJTOosgFvX+rovEi0XAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDso60na49QsXRtBP+gyN4G34RTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDhkYzEwMGUtOGQ3ZS0z ZDMwLTkwYzItNjMzNGYyNzY0Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRx56r5cCYxHZwsRZqOJPjsxLtIqnzZsB6V5kfa1xYwHmmejY4OtOhZ SoF9xzzbG7Btf+Y/bhqzOGI0X0Zng9p3DLHOsWG7zPiQyRFYusIJkeqkFzSVzq+3 +y2K14rNfNrrs597WULgeMgx8AvlMmxUIDFVyr5Eu7zo2U1Kqb69RXte1doo1MXF 2gBIuTkmpizHJtjtjy8Qpu9eM7I327Zfpxx4aJ3lcTJvr8PFFIlsZNIr2mbVX/5y CfJh6FYilEIBDzn46fFVjz4GqHVYhX//9dkcdMYl0AN5QIbj7i/sDVU+afLRi0dO m4Gv+dni/o3XVuGRL6RwFwn4oah1TrU= -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:03 2025 by rpki-client