$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa File: 88f21b14-08fd-3634-835b-99b37c6e1f52.roa (raw, json) Hash identifier: 8PaSwbFwJLbdObb5Og8feZGs/w07k+uhgzPcwNucoFc= Subject key identifier: D3:D0:3A:07:9D:23:4F:6E:E4:28:8B:EA:30:06:3E:9F:FE:1D:36:00 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B76F22B615CA7826188703060 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 63199 IP address blocks: 148.153.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2b:61:5c:a7:82:61:88:70:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=2ad70e8e-1fbb-4faa-8d75-0ee0ee491f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:0e:8f:72:39:00:81:46:b3:68:cf:a4:77: 20:2f:70:92:ed:56:b1:e1:f5:be:52:78:e7:00:98: 15:7d:45:4a:1c:d0:79:e3:19:cd:5a:06:2e:9a:28: 6e:b9:27:5d:dc:3a:02:97:46:8b:2b:2d:2c:35:dc: ab:38:86:d2:9c:a3:d4:1c:d5:ba:c0:db:74:6d:54: 5c:c5:99:1f:d9:8d:83:b5:18:10:8e:2a:55:af:24: 7c:8a:31:af:55:4f:67:96:3f:b2:af:35:c5:49:8f: 14:f7:cd:51:53:9e:6c:6f:d3:aa:2c:93:54:c3:c4: cc:d1:03:2f:1c:48:ba:1f:fa:e8:b6:66:04:5a:5d: 5d:2e:57:d4:94:0e:92:35:40:eb:65:e1:b0:6c:f1: dd:12:4a:ae:bb:af:cd:9a:f3:9b:21:4c:2b:9f:27: ce:13:99:14:42:21:99:30:bb:51:da:cf:9f:79:20: c3:45:f6:6a:c9:02:73:13:7f:ef:3d:19:0d:9f:54: b7:6c:5c:9d:77:df:53:97:ca:6f:af:84:09:2f:26: d5:0f:0c:03:54:a6:d7:44:fd:55:42:81:89:09:0a: 48:a4:5b:76:c3:95:a6:6b:cc:4b:2f:ca:0a:a5:0e: ec:1f:7a:67:85:3f:c2:0c:4e:7b:ce:8c:80:70:c8: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D0:3A:07:9D:23:4F:6E:E4:28:8B:EA:30:06:3E:9F:FE:1D:36:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:55:36:dd:68:c9:43:c2:82:cf:b9:81:fc:76:fc:a8:c9:7f: 51:8e:64:6d:e3:e5:df:d3:2d:d9:c0:56:23:04:9d:f5:f1:85: 81:eb:b9:fb:b1:1c:4a:84:5e:c5:21:72:8e:e4:a8:2b:0a:83: c7:8c:8a:45:f5:74:fc:c8:ee:17:2d:04:4b:a0:a6:c3:f5:2e: 2e:2a:a5:2e:08:57:1c:73:11:b9:8f:09:90:51:1e:15:ad:21: 8a:8c:a7:d3:47:fe:f6:a2:66:2e:38:a6:b0:5f:13:01:38:d8: 7d:ff:a5:d2:1d:6f:67:32:ba:1e:84:33:e6:f8:c2:1c:3f:92: d0:06:06:f0:b1:f8:76:fa:3b:49:fd:a9:ef:09:7c:e6:bd:0e: 39:d2:ce:4d:8d:1d:79:db:80:4d:f1:b6:f0:72:0d:ea:62:21: d8:d0:cc:a9:16:92:6f:58:cf:e1:6c:b6:ce:f8:cf:bc:9c:2d: cc:cb:ac:83:3a:9d:a2:5f:9e:fa:1b:f0:a6:91:88:77:d3:5b: 85:9a:82:a7:4b:b0:fb:00:0c:d5:14:0c:5c:ae:6e:91:64:25: e2:e8:0c:ff:72:0c:53:00:5c:86:00:5d:f6:f6:63:df:12:7a: 88:50:c4:35:07:ff:6a:e3:30:9f:f4:56:eb:0d:b1:e9:9c:97: 86:7b:14:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ithXKeCYYhwMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MmFkNzBlOGUtMWZiYi00ZmFhLThkNzUtMGVlMGVlNDkxZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJcOj3I5AIFGs2jPpHcgL3CS7Vax4fW+Unjn AJgVfUVKHNB54xnNWgYumihuuSdd3DoCl0aLKy0sNdyrOIbSnKPUHNW6wNt0bVRc xZkf2Y2DtRgQjipVryR8ijGvVU9nlj+yrzXFSY8U981RU55sb9OqLJNUw8TM0QMv HEi6H/rotmYEWl1dLlfUlA6SNUDrZeGwbPHdEkquu6/NmvObIUwrnyfOE5kUQiGZ MLtR2s+feSDDRfZqyQJzE3/vPRkNn1S3bFydd99Tl8pvr4QJLybVDwwDVKbXRP1V QoGJCQpIpFt2w5Wma8xLL8oKpQ7sH3pnhT/CDE57zoyAcMgk+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPQOgedI09u5CiL6jAGPp/+HTYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvODhmMjFiMTQtMDhmZC0z NjM0LTgzNWItOTliMzdjNmUxZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJVNt1oyUPCgs+5gfx2/KjJf1GOZG3j5d/TLdnAViMEnfXxhYHrufux HEqEXsUhco7kqCsKg8eMikX1dPzI7hctBEugpsP1Li4qpS4IVxxzEbmPCZBRHhWt IYqMp9NH/vaiZi44prBfEwE42H3/pdIdb2cyuh6EM+b4whw/ktAGBvCx+Hb6O0n9 qe8JfOa9DjnSzk2NHXnbgE3xtvByDepiIdjQzKkWkm9Yz+Fsts74z7ycLczLrIM6 naJfnvob8KaRiHfTW4WagqdLsPsADNUUDFyubpFkJeLoDP9yDFMAXIYAXfb2Y98S eohQxDUH/2rjMJ/0VusNsemcl4Z7FMQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:02:11 2025 by rpki-client