$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa File: 993582d7-04a2-3e94-9de9-9c420f0e0614.roa (raw, json) Hash identifier: nt1p4BrA3iZiSXW9u9CfA5lFCTFBZBcYsOp8zDWmBXw= Subject key identifier: 3C:CF:05:A1:31:EC:EA:AD:2E:98:83:43:2E:4C:EC:02:2C:54:05:16 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B9E07BACB70B220E0CD804C00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 63199 IP address blocks: 148.153.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ba:cb:70:b2:20:e0:cd:80:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=4ea2dd06-a9f1-4e8c-8c50-0d9d19e22ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:b7:d8:c0:c6:e0:58:04:8f:70:2d:d6:61: 40:ab:45:f4:b0:39:f1:b8:a1:d4:21:60:f0:a5:07: a3:cf:f6:d3:bd:cf:f9:34:c5:77:7b:cd:3a:da:e4: b6:19:f4:7c:24:95:71:59:03:e7:0d:3a:78:e5:13: 8a:24:06:bf:13:67:9b:04:7e:1a:f4:71:69:ed:74: 18:42:52:20:d6:4b:d1:6b:62:f8:8d:1a:b4:19:62: ab:bb:2f:d1:56:fe:be:b5:3a:81:d9:be:c8:e8:b5: 68:b2:f7:99:35:19:19:c4:10:93:2a:2e:76:01:cc: c3:f5:b6:e3:4e:68:6f:8b:14:ce:97:22:06:87:0e: 33:9f:93:48:e7:b8:75:c1:77:eb:26:e6:c9:34:90: c7:ac:c9:7f:41:0a:38:50:56:39:c9:96:3d:1b:45: a2:76:75:56:da:ba:c0:ee:6d:0d:bc:c7:6b:6b:4c: e2:38:4d:bb:7d:96:92:a7:3b:7b:61:b1:80:c6:fb: e4:fa:94:a3:a7:ce:26:52:de:c3:f8:36:c3:ba:a0: 33:ed:1a:98:3e:4b:cf:94:bd:86:6f:27:25:c7:84: 9c:6d:75:18:a6:15:ab:74:c3:1a:8c:14:ad:f7:c6: 02:d8:19:af:30:a5:7c:7d:8f:1c:2f:75:b2:39:94: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:05:A1:31:EC:EA:AD:2E:98:83:43:2E:4C:EC:02:2C:54:05:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/993582d7-04a2-3e94-9de9-9c420f0e0614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6c:25:f4:1f:82:9f:1b:75:5e:67:53:18:51:fc:3f:b9:15: 9d:a0:de:a2:cf:5c:23:4c:e8:0a:50:7f:84:0c:19:44:aa:79: bf:9c:a3:3d:82:89:eb:01:b6:97:30:f0:77:9c:0e:e0:44:77: 6c:63:27:19:fb:91:44:a6:32:24:e6:05:ff:dc:ba:f7:ad:f3: 36:80:67:67:3a:2e:3a:37:a0:09:49:63:a1:96:ce:3c:bd:6a: 2a:c5:d9:ba:96:e0:f3:f0:1a:6f:71:03:bc:2f:5a:09:b1:3c: 0f:8d:d0:12:c2:0f:a3:ac:73:26:a8:01:04:f8:d0:38:07:da: 12:73:a9:95:a4:e1:af:62:5a:3d:15:1e:f4:62:16:88:64:91: 8b:bf:0b:05:6a:8d:90:f5:ce:f1:88:73:65:7f:1c:6b:53:7a: 3b:62:4e:6d:d8:0f:45:ee:a6:b9:25:fb:0f:d3:6e:5e:3c:9b: 90:d5:69:57:84:2f:39:0d:26:9d:29:44:c5:ad:4a:c0:65:2d: ae:5c:ff:54:1d:0d:72:c4:ee:72:53:c0:02:18:8b:e0:f6:bf: 9e:6c:8d:fe:ba:04:79:4c:e7:3b:32:dc:d1:0d:aa:23:9b:eb: ee:7b:18:2b:37:69:b4:01:b7:c1:40:cb:f2:46:ba:3d:a2:88: 2a:9c:1e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7rLcLIg4M2ATAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NGVhMmRkMDYtYTlmMS00ZThjLThjNTAtMGQ5ZDE5ZTIyZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphu32MDG4FgEj3At1mFAq0X0sDnxuKHUIWDw pQejz/bTvc/5NMV3e8062uS2GfR8JJVxWQPnDTp45ROKJAa/E2ebBH4a9HFp7XQY QlIg1kvRa2L4jRq0GWKruy/RVv6+tTqB2b7I6LVosveZNRkZxBCTKi52AczD9bbj TmhvixTOlyIGhw4zn5NI57h1wXfrJubJNJDHrMl/QQo4UFY5yZY9G0WidnVW2rrA 7m0NvMdra0ziOE27fZaSpzt7YbGAxvvk+pSjp84mUt7D+DbDuqAz7RqYPkvPlL2G byclx4ScbXUYphWrdMMajBSt98YC2BmvMKV8fY8cL3WyOZSLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzPBaEx7OqtLpiDQy5M7AIsVAUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvOTkzNTgyZDctMDRhMi0z ZTk0LTlkZTktOWM0MjBmMGUwNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExsJfQfgp8bdV5nUxhR/D+5FZ2g3qLPXCNM6ApQf4QMGUSqeb+coz2C iesBtpcw8HecDuBEd2xjJxn7kUSmMiTmBf/cuvet8zaAZ2c6Ljo3oAlJY6GWzjy9 airF2bqW4PPwGm9xA7wvWgmxPA+N0BLCD6OscyaoAQT40DgH2hJzqZWk4a9iWj0V HvRiFohkkYu/CwVqjZD1zvGIc2V/HGtTejtiTm3YD0Xuprkl+w/Tbl48m5DVaVeE LzkNJp0pRMWtSsBlLa5c/1QdDXLE7nJTwAIYi+D2v55sjf66BHlM5zsy3NENqiOb 6+57GCs3abQBt8FAy/JGuj2iiCqcHk0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:13 2025 by rpki-client