$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa File: 6bc53289-b90e-34be-bcd9-c39465f48c2f.roa (raw, json) Hash identifier: op2E64ExWekz8u/6a1BS2a5157Ru/P/YEcfy0XtioDs= Subject key identifier: 7E:41:95:AD:DB:12:A9:FC:3F:1C:0A:E7:3E:66:5A:37:8D:F6:BB:54 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A8575F625F780FA8DCA97EC00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 63199 IP address blocks: 148.153.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f6:25:f7:80:fa:8d:ca:97:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=1888a5f9-3dcc-480a-a712-10bd1438df63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:3f:68:13:c8:5f:15:91:0c:77:11:80:e2: 14:7e:77:70:e7:40:40:92:03:96:c7:bb:fa:db:09: 97:42:5a:f4:3e:90:a0:27:27:a8:78:37:af:f6:6e: 4c:b1:70:1c:a2:32:75:af:b9:f3:5a:d7:6a:c8:57: 24:59:67:48:f5:3b:0c:dc:37:0b:80:5f:50:aa:67: 30:85:1e:e2:8d:8d:4e:9f:9c:3a:94:aa:63:9d:ca: 4e:29:92:8a:be:d6:65:a5:fd:c6:15:ee:9c:cf:8e: 2f:90:48:4b:82:e6:a1:48:2b:ea:f5:d0:70:82:0e: 3e:64:6b:44:6c:93:f1:9b:a0:db:f5:05:92:21:09: 22:73:93:4b:7d:17:9d:b4:65:17:bd:18:27:6e:79: 42:fd:a4:67:4c:32:68:99:d2:5e:f1:e5:fc:04:7f: 68:d8:91:5f:83:17:ef:3e:12:da:40:5b:b7:9a:56: d9:32:a6:30:4c:f8:b5:01:a8:1e:ee:71:67:52:ff: 11:eb:ac:c4:c6:1a:f8:32:60:96:7c:ef:41:d7:f6: a8:64:82:e0:e6:a6:8b:59:b1:75:bc:63:71:5e:5b: 25:e4:b1:54:f9:75:9c:4b:63:2c:c1:bf:77:0c:30: 5d:5a:0d:1d:f8:b3:ca:f4:13:25:b7:6c:7d:8c:db: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:41:95:AD:DB:12:A9:FC:3F:1C:0A:E7:3E:66:5A:37:8D:F6:BB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6bc53289-b90e-34be-bcd9-c39465f48c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:89:d6:1b:88:94:db:ee:37:de:bd:1d:12:c8:d1:e2:c8:a9: 35:d0:40:d3:ac:1c:d4:1a:25:b5:19:3d:24:c5:af:17:6c:c9: e7:0b:40:e9:43:6c:43:1c:e1:d5:52:5c:94:02:b9:2d:65:8d: 56:4e:d8:22:cf:70:2e:55:8e:5e:59:be:ad:2f:a6:b7:62:ca: 78:1b:5c:a3:1c:d7:08:84:ad:47:f9:0a:62:2b:e8:29:c9:df: 15:d2:c7:af:94:53:f5:9e:54:43:eb:3a:a6:62:35:0e:d5:ac: e6:c8:51:20:66:18:8a:26:09:a8:70:0f:4f:7c:85:3f:d3:e3: e8:4a:91:0e:8f:9d:84:b8:4f:42:39:f7:e0:02:46:91:b2:c1: da:74:53:88:0b:0b:18:93:b3:0c:dc:44:bf:03:b0:db:12:ef: 70:3c:77:1e:73:15:df:45:8b:01:28:08:a2:6a:8f:99:5f:eb: 22:b3:68:44:c9:0c:e9:61:b8:c4:cb:62:19:9d:6b:b1:f5:4c: 58:27:d1:90:dd:55:d2:8b:6f:ae:cf:3e:b8:31:5d:d4:cf:49: 9a:8f:f5:39:82:ff:62:2d:79:9e:9d:8b:ce:e5:bd:73:9c:6a: 68:e6:03:93:e1:5c:4b:f6:2c:2b:a5:cb:53:f0:6e:98:46:45: 38:e6:07:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfYl94D6jcqX7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MTg4OGE1ZjktM2RjYy00ODBhLWE3MTItMTBiZDE0MzhkZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe4/aBPIXxWRDHcRgOIUfndw50BAkgOWx7v6 2wmXQlr0PpCgJyeoeDev9m5MsXAcojJ1r7nzWtdqyFckWWdI9TsM3DcLgF9Qqmcw hR7ijY1On5w6lKpjncpOKZKKvtZlpf3GFe6cz44vkEhLguahSCvq9dBwgg4+ZGtE bJPxm6Db9QWSIQkic5NLfRedtGUXvRgnbnlC/aRnTDJomdJe8eX8BH9o2JFfgxfv PhLaQFu3mlbZMqYwTPi1Aage7nFnUv8R66zExhr4MmCWfO9B1/aoZILg5qaLWbF1 vGNxXlsl5LFU+XWcS2Mswb93DDBdWg0d+LPK9BMlt2x9jNsSUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5Bla3bEqn8PxwK5z5mWjeN9rtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNmJjNTMyODktYjkwZS0z NGJlLWJjZDktYzM5NDY1ZjQ4YzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqJ1huIlNvuN969HRLI0eLIqTXQQNOsHNQaJbUZPSTFrxdsyecLQOlD bEMc4dVSXJQCuS1ljVZO2CLPcC5Vjl5Zvq0vprdiyngbXKMc1wiErUf5CmIr6CnJ 3xXSx6+UU/WeVEPrOqZiNQ7VrObIUSBmGIomCahwD098hT/T4+hKkQ6PnYS4T0I5 9+ACRpGywdp0U4gLCxiTswzcRL8DsNsS73A8dx5zFd9FiwEoCKJqj5lf6yKzaETJ DOlhuMTLYhmda7H1TFgn0ZDdVdKLb67PPrgxXdTPSZqP9TmC/2IteZ6di87lvXOc amjmA5PhXEv2LCuly1PwbphGRTjmB8Q= -----END CERTIFICATE-----Generated at Mon Aug 4 19:08:04 2025 by rpki-client