$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6b62c7af-a31a-3f1d-9b68-5fa67545ad79.roa File: 6b62c7af-a31a-3f1d-9b68-5fa67545ad79.roa (raw, json) Hash identifier: AfpBgKxXR74bNg0nWP7ArQlX/2bLBiL0A4LJ5IVzRgE= Subject key identifier: 02:E0:79:AC:A8:91:93:CD:0C:CA:A1:C2:36:F8:F6:71:03:07:2D:F8 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584ABD4B9C335B0E34B2DC7E6D20 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6b62c7af-a31a-3f1d-9b68-5fa67545ad79.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 63199 IP address blocks: 148.153.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:9c:33:5b:0e:34:b2:dc:7e:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=2e5a933a-07ef-4199-b23b-d1df5cd4d640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:ac:98:c4:f9:d4:e0:27:91:c5:6c:81:39: 73:61:63:f2:ee:89:f3:1e:73:d5:d1:a6:04:7a:2b: c1:bf:ea:94:74:d9:bc:88:58:b4:6d:98:40:3e:d0: 0f:6d:53:ed:cc:1e:85:0d:a7:1f:a9:cc:fa:90:04: 79:45:e8:49:02:47:8f:f1:f5:53:73:a2:63:f3:5c: 15:da:40:71:d5:2b:d9:e0:9f:7c:9d:af:83:9b:da: 50:a5:49:61:b5:4b:3d:76:6f:94:34:e2:5e:dd:2f: 8e:45:7b:dd:24:4e:ac:c5:75:a2:cf:1f:1a:1b:a4: 1f:94:ad:ba:4b:fc:57:72:00:4a:0b:17:5f:e6:4c: b4:a4:43:af:a0:a9:b2:36:64:e8:b2:7b:39:9d:be: d1:31:7c:2a:85:b6:6e:ae:55:95:23:3e:53:f4:49: 54:b4:4a:04:52:97:3c:4e:41:18:7d:ec:8e:90:c6: 21:8a:15:fa:79:03:5a:a9:53:96:ac:74:04:9a:00: 44:80:06:03:fd:be:5b:bb:f9:db:bf:0c:7b:01:34: 20:99:a0:fa:41:8c:88:4b:6c:2d:db:3f:b1:f7:b8: 18:ce:a8:bb:57:3d:6b:bf:8a:b5:d7:da:a1:77:e8: bd:c8:50:c9:43:15:22:c9:e5:50:d0:29:79:e2:83: 18:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E0:79:AC:A8:91:93:CD:0C:CA:A1:C2:36:F8:F6:71:03:07:2D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6b62c7af-a31a-3f1d-9b68-5fa67545ad79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fb:32:7c:19:c5:c0:05:e0:77:13:e7:6b:9d:5d:65:76:6e: e2:fb:55:eb:a2:8f:e4:46:25:17:64:e8:7d:fd:02:71:89:87: 3f:84:62:5f:b9:4f:29:8a:10:78:70:48:f3:6c:ba:1d:98:5b: 77:65:be:a0:70:0a:43:6c:76:f7:98:73:38:e0:a7:77:de:d9: 9a:22:94:91:fc:f7:13:3c:33:4f:b9:e4:70:2d:bf:2a:af:2b: fa:ff:95:74:93:66:fb:af:54:eb:79:77:a2:df:2e:8b:a7:6a: 0d:0c:cb:43:07:1a:4c:1b:68:60:fa:e6:00:a8:78:51:ff:2d: 0f:e2:df:fa:8a:87:a1:d4:91:77:1d:94:1e:2d:14:8c:ed:d3: be:c7:fa:d3:71:c2:51:fd:fe:06:54:c9:2d:57:71:b8:6e:b2: 9c:83:0c:f7:df:34:d2:64:bf:32:04:9a:bc:18:88:66:41:07: f2:87:7e:9c:22:00:3a:1c:ad:5b:86:db:79:5a:26:e3:78:f0: d3:f4:4f:7f:c2:6c:39:ca:c5:43:31:08:85:1f:31:7a:be:d7: 9b:f5:d7:7a:8c:71:7d:c9:d0:c3:b0:6b:48:b7:e1:6c:bd:94: 63:45:0b:33:b8:38:a5:73:ac:a2:ea:70:a7:f6:37:2f:4a:5a: 7e:59:26:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5wzWw40stx+bSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk MmU1YTkzM2EtMDdlZi00MTk5LWIyM2ItZDFkZjVjZDRkNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ6smMT51OAnkcVsgTlzYWPy7onzHnPV0aYE eivBv+qUdNm8iFi0bZhAPtAPbVPtzB6FDacfqcz6kAR5RehJAkeP8fVTc6Jj81wV 2kBx1SvZ4J98na+Dm9pQpUlhtUs9dm+UNOJe3S+ORXvdJE6sxXWizx8aG6QflK26 S/xXcgBKCxdf5ky0pEOvoKmyNmTosns5nb7RMXwqhbZurlWVIz5T9ElUtEoEUpc8 TkEYfeyOkMYhihX6eQNaqVOWrHQEmgBEgAYD/b5bu/nbvwx7ATQgmaD6QYyIS2wt 2z+x97gYzqi7Vz1rv4q119qhd+i9yFDJQxUiyeVQ0Cl54oMYfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALgeayokZPNDMqhwjb49nEDBy34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNmI2MmM3YWYtYTMxYS0z ZjFkLTliNjgtNWZhNjc1NDVhZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJm4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB77MnwZxcAF4HcT52udXWV2buL7Veuij+RGJRdk6H39AnGJhz+EYl+5 TymKEHhwSPNsuh2YW3dlvqBwCkNsdveYczjgp3fe2ZoilJH89xM8M0+55HAtvyqv K/r/lXSTZvuvVOt5d6LfLounag0My0MHGkwbaGD65gCoeFH/LQ/i3/qKh6HUkXcd lB4tFIzt077H+tNxwlH9/gZUyS1XcbhuspyDDPffNNJkvzIEmrwYiGZBB/KHfpwi ADocrVuG23laJuN48NP0T3/CbDnKxUMxCIUfMXq+15v113qMcX3J0MOwa0i34Wy9 lGNFCzO4OKVzrKLqcKf2Ny9KWn5ZJrg= -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:56 2025 by rpki-client