$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa File: 6367678a-e23c-33d0-8e43-2013d216b88a.roa (raw, json) Hash identifier: 9BewwpP4xyGGxXYjxYh94ut0FplmBru0sysVolWMWhk= Subject key identifier: 6D:4F:08:A2:9C:46:20:DF:68:80:5E:61:36:F8:31:D7:8E:64:8F:E7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AB220D5E3C093696FBEF15F80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 63199 IP address blocks: 148.153.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:d5:e3:c0:93:69:6f:be:f1:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=04ec4724-4508-4c66-8747-bc5d01377bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2d:b2:4f:fd:be:34:dd:4d:91:dd:fe:9d:c6: 5e:4e:a3:a6:53:50:5b:4e:f0:51:e3:97:91:34:4c: 4e:8c:1b:54:4e:00:24:49:9a:3a:04:b7:b2:be:eb: 3a:94:f1:59:10:99:e5:ef:93:7d:26:f4:2d:8a:02: 89:f0:bc:1b:57:e6:83:93:9d:41:70:ee:fe:1d:a9: 94:cb:72:da:71:3e:69:62:b4:a3:45:85:39:2e:bd: b9:03:03:3e:4f:92:7e:e5:9e:c0:b9:1f:fa:a7:e1: 07:f9:5f:4d:9f:98:8c:df:65:a4:61:df:48:ce:34: 22:1a:ef:00:65:f6:f1:d2:31:08:96:2b:79:de:f9: 5e:9c:ab:0c:96:10:a5:3b:f0:ae:e4:0e:32:72:6f: 9d:95:62:32:56:01:15:3e:08:bf:ed:15:3a:99:c8: fa:32:80:62:ee:1b:4f:36:05:92:d3:e5:9e:18:ae: 3e:da:c3:6e:96:12:c9:a9:53:ba:f1:7a:79:31:cc: b9:06:68:75:57:2b:7f:9a:6c:79:a1:c3:59:f6:99: 22:c3:f4:28:b1:e9:02:6f:76:07:4b:59:a8:be:fa: d0:2c:09:a1:1f:21:87:6e:06:3d:b7:d7:76:72:7e: 1e:5f:63:e4:e6:b5:c8:68:07:54:ad:a2:47:36:4e: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4F:08:A2:9C:46:20:DF:68:80:5E:61:36:F8:31:D7:8E:64:8F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:28:da:cc:ff:f4:cc:6c:ef:f2:f3:bf:2e:f3:b2:35:5f:6d: 32:b7:84:de:a2:17:3e:74:b8:be:2b:32:e9:9c:f7:44:02:80: 5b:86:a3:ef:ce:dd:6b:f2:e0:cf:8f:72:ad:c5:d1:64:03:33: 62:eb:1e:57:f8:9b:13:d5:08:c0:c5:b6:d2:e3:bf:14:d0:99: 07:01:2a:e9:96:8c:20:fd:6b:c2:a8:0f:e6:a9:5a:df:22:2f: 6d:07:bc:37:06:15:93:33:2e:48:9d:1d:49:1e:bb:24:ca:17: 27:5e:7e:94:5d:0e:8f:3a:2d:11:2b:73:4a:40:f1:b5:f1:59: 63:01:49:52:13:cb:e0:9f:d9:c7:b3:c2:76:c9:f5:b8:d1:af: dd:d9:f4:d6:df:24:6b:a1:ea:18:8c:67:12:f3:4c:86:f3:f1: e1:c3:5d:c4:cd:dd:38:70:f1:be:8e:24:e3:be:c0:53:42:53: f7:46:c7:84:a1:6d:79:9a:1d:ba:a2:ef:57:66:42:86:fb:c4: ee:79:46:69:01:89:e1:bd:0b:63:87:5a:32:02:1b:4c:00:7d: cf:43:08:89:77:e5:18:b0:d5:d8:c7:60:e3:43:8f:5a:50:8b: a7:e2:14:d8:46:a4:fa:43:84:a4:d6:26:fe:84:25:dd:f5:2b: 3b:32:d9:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINXjwJNpb77xX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDRlYzQ3MjQtNDUwOC00YzY2LTg3NDctYmM1ZDAxMzc3YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi2yT/2+NN1Nkd3+ncZeTqOmU1BbTvBR45eR NExOjBtUTgAkSZo6BLeyvus6lPFZEJnl75N9JvQtigKJ8LwbV+aDk51BcO7+HamU y3LacT5pYrSjRYU5Lr25AwM+T5J+5Z7AuR/6p+EH+V9Nn5iM32WkYd9IzjQiGu8A Zfbx0jEIlit53vlenKsMlhClO/Cu5A4ycm+dlWIyVgEVPgi/7RU6mcj6MoBi7htP NgWS0+WeGK4+2sNulhLJqVO68Xp5Mcy5Bmh1Vyt/mmx5ocNZ9pkiw/QosekCb3YH S1movvrQLAmhHyGHbgY9t9d2cn4eX2Pk5rXIaAdUraJHNk7hTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1PCKKcRiDfaIBeYTb4MdeOZI/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNjM2NzY3OGEtZTIzYy0z M2QwLThlNDMtMjAxM2QyMTZiODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAo2sz/9Mxs7/Lzvy7zsjVfbTK3hN6iFz50uL4rMumc90QCgFuGo+/O 3Wvy4M+Pcq3F0WQDM2LrHlf4mxPVCMDFttLjvxTQmQcBKumWjCD9a8KoD+apWt8i L20HvDcGFZMzLkidHUkeuyTKFydefpRdDo86LRErc0pA8bXxWWMBSVITy+Cf2cez wnbJ9bjRr93Z9NbfJGuh6hiMZxLzTIbz8eHDXcTN3Thw8b6OJOO+wFNCU/dGx4Sh bXmaHbqi71dmQob7xO55RmkBieG9C2OHWjICG0wAfc9DCIl35Riw1djHYONDj1pQ i6fiFNhGpPpDhKTWJv6EJd31Kzsy2S8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:26 2025 by rpki-client