$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa File: 7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa (raw, json) Hash identifier: ggGx+A/GwGCAL0wcET8Hj7Ylaj/UXyqGkdVph4AYNmc= Subject key identifier: 5A:35:FE:8D:A4:BE:BA:4F:F9:76:FC:1A:76:44:83:4C:DC:BB:9C:25 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AA160E09C1EC84A0423C44F80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 63199 IP address blocks: 148.153.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:e0:9c:1e:c8:4a:04:23:c4:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=d9c22e50-416a-454f-bdb8-6454e654f1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a1:95:09:07:cc:5e:43:58:fe:8c:96:fb:53: 78:0d:a1:c3:89:66:0e:15:f3:22:e2:d6:ed:79:5d: 6c:89:eb:4c:ab:fd:a6:e3:20:94:ca:76:0f:46:fd: 52:52:94:1c:e1:0e:1d:71:b0:2a:86:3c:eb:8e:e2: fd:46:31:6f:3f:12:ac:b2:a1:7d:61:35:f0:da:b0: eb:b0:79:09:ac:8c:57:81:37:b3:db:48:58:e2:fd: 27:48:bf:a0:85:84:22:a8:24:95:f3:4b:5f:db:f0: 79:6b:c1:55:10:86:78:25:39:f4:a6:6b:be:a9:92: f6:27:99:5b:46:8e:16:df:ed:12:dc:6e:ad:59:66: 31:c1:b2:79:cc:a8:71:a6:82:67:d6:f5:69:43:a4: f6:c7:95:fa:4f:e2:cb:3d:f8:99:9a:11:93:3e:9b: 3c:86:88:9f:56:91:d7:f5:63:61:b2:7e:60:2d:69: 55:79:9c:0e:15:58:4b:3f:79:ec:25:9c:35:61:fd: 8b:8c:50:3e:eb:b2:c1:03:4f:a1:29:47:b8:67:9b: cf:97:51:b7:5b:d7:47:c6:84:72:cd:94:b0:ca:cd: dd:3e:06:fb:d8:3e:ac:5e:80:4f:fe:59:f5:d1:d7: dc:bf:77:20:8e:b8:aa:62:80:e6:96:35:ee:bc:ed: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:35:FE:8D:A4:BE:BA:4F:F9:76:FC:1A:76:44:83:4C:DC:BB:9C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:37:50:a3:49:06:ef:0c:f5:0b:ae:d2:d4:d5:a0:28:19:41: fc:8a:94:6d:2a:64:e3:8d:0e:7e:37:c0:22:bd:ff:6d:0a:cb: 75:27:67:1c:f0:d5:35:b0:03:3e:a3:68:dd:01:5f:82:6e:80: ea:cf:30:d4:d3:26:1e:c2:bb:73:86:33:6d:bc:f0:ac:b2:3a: 75:ab:bb:d2:03:16:5f:50:90:47:39:47:10:4e:b3:4e:64:17: 62:1d:b8:c8:07:57:96:40:05:5e:98:39:7b:53:43:87:e7:e0: a9:f4:8f:d1:59:8b:83:36:12:43:16:53:4d:d2:fd:90:56:95: e8:e3:f3:67:99:27:5b:9f:46:6c:9f:a0:d3:3c:54:45:91:bc: 23:da:b2:3b:3d:4c:26:15:e5:f1:5c:ea:57:a3:76:80:c4:4e: 7d:43:4d:08:0e:18:2e:fd:d9:ff:23:79:e8:5b:0f:a0:4c:57: a2:ac:e9:e3:db:b8:67:d9:ce:07:cd:be:3a:3c:e6:8c:a9:02: a8:ee:7c:8c:4e:be:23:31:cb:b0:77:c4:e7:f4:ad:2a:d0:0b: 00:88:28:9c:59:80:cc:eb:d0:5d:73:54:d6:1f:13:75:52:3c: 6f:b1:3f:ce:2b:a0:46:0d:c2:79:92:30:d1:5c:da:34:64:25: 2b:aa:01:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOCcHshKBCPET4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZDljMjJlNTAtNDE2YS00NTRmLWJkYjgtNjQ1NGU2NTRmMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6GVCQfMXkNY/oyW+1N4DaHDiWYOFfMi4tbt eV1sietMq/2m4yCUynYPRv1SUpQc4Q4dcbAqhjzrjuL9RjFvPxKssqF9YTXw2rDr sHkJrIxXgTez20hY4v0nSL+ghYQiqCSV80tf2/B5a8FVEIZ4JTn0pmu+qZL2J5lb Ro4W3+0S3G6tWWYxwbJ5zKhxpoJn1vVpQ6T2x5X6T+LLPfiZmhGTPps8hoifVpHX 9WNhsn5gLWlVeZwOFVhLP3nsJZw1Yf2LjFA+67LBA0+hKUe4Z5vPl1G3W9dHxoRy zZSwys3dPgb72D6sXoBP/ln10dfcv3cgjriqYoDmljXuvO3KgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo1/o2kvrpP+Xb8GnZEg0zcu5wlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzE1M2EyYjYtM2ZiOS0z ZDA3LWE4NzItZDljZTM5MmZhNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM3UKNJBu8M9Quu0tTVoCgZQfyKlG0qZOONDn43wCK9/20Ky3UnZxzw 1TWwAz6jaN0BX4JugOrPMNTTJh7Cu3OGM2288KyyOnWru9IDFl9QkEc5RxBOs05k F2IduMgHV5ZABV6YOXtTQ4fn4Kn0j9FZi4M2EkMWU03S/ZBWlejj82eZJ1ufRmyf oNM8VEWRvCPasjs9TCYV5fFc6lejdoDETn1DTQgOGC792f8jeehbD6BMV6Ks6ePb uGfZzgfNvjo85oypAqjufIxOviMxy7B3xOf0rSrQCwCIKJxZgMzr0F1zVNYfE3VS PG+xP84roEYNwnmSMNFc2jRkJSuqAS4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:43 2025 by rpki-client