$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa File: 9d198439-f575-301d-9005-1871e3887572.roa (raw, json) Hash identifier: xHFA/RanNmyhhgcv6ItUV/6AQxoGzLxgrAgQPYHcEYI= Subject key identifier: 3C:CE:24:33:68:0F:13:A1:25:39:7F:27:3C:D8:3D:51:37:29:A0:3C Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584BB192620B21CEBE2A452F00C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 63199 IP address blocks: 148.153.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:62:0b:21:ce:be:2a:45:2f:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=8c5b834c-5786-4d5f-9ae0-6ee3ff1b6cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:be:09:a2:73:0e:10:d9:69:f0:d8:ec:1c: 5d:f1:89:fe:51:63:1f:bd:2b:4f:d2:b2:a6:9e:89: 49:c6:5d:f2:11:d7:78:ac:9a:06:93:51:51:94:c1: 38:70:2f:33:4b:b4:57:51:78:12:d4:04:73:8c:05: e1:26:bf:1c:94:ab:a7:0d:65:c5:2e:4a:25:aa:1c: 42:3a:d6:02:0a:3d:68:6f:46:6c:c8:0b:4a:e8:97: 28:d7:c2:e0:2e:60:5f:76:20:88:a8:ac:78:b9:e1: 65:70:bd:27:c5:26:be:4f:29:70:21:9d:2c:4c:d3: 67:91:b9:bf:cb:ac:1b:e7:3b:4a:d2:60:80:84:27: c9:3b:5a:e9:bd:72:51:61:e6:3f:24:45:1a:54:92: 0e:3a:08:80:cd:e2:89:ac:36:10:2f:e4:96:f7:5a: 46:41:9b:a2:f6:b0:4f:e3:b0:a3:a9:15:a8:7c:42: e1:e0:06:84:67:ab:8b:0d:ba:84:81:5e:f1:fe:7b: 48:17:67:8a:38:92:d5:1f:dd:b5:3e:31:77:a5:90: 48:ff:7d:61:1c:99:27:4c:5d:ef:10:c3:b3:6f:22: a5:27:28:b9:9b:1e:44:1c:40:d5:8f:70:ee:7c:a2: e8:ec:8c:e9:f2:12:92:55:ec:94:2e:e8:54:85:1b: e1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CE:24:33:68:0F:13:A1:25:39:7F:27:3C:D8:3D:51:37:29:A0:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/9d198439-f575-301d-9005-1871e3887572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4f:1b:69:6f:0e:e9:3a:4a:8b:f5:4b:ed:1e:03:01:38:be: f8:dd:a8:31:7b:86:e2:09:0e:b7:90:b8:0c:f0:74:9e:bf:7b: 81:d8:71:14:3b:c1:7a:31:48:45:af:44:b9:b6:9c:29:80:7d: 84:d8:ca:15:5e:aa:23:a0:a8:9e:fe:f1:9c:06:ce:f2:57:67: 71:8d:19:74:42:05:f8:aa:1b:95:b4:f7:49:00:14:17:d4:d9: bc:54:26:d9:2d:38:62:e3:0e:94:2e:06:cb:9b:6f:b4:48:4b: 4d:1a:48:ca:af:33:c3:fe:a3:4a:3f:71:cb:0f:78:d9:5d:e9: 32:5c:e8:39:e3:4e:a1:0f:15:b1:9e:a4:be:0e:c0:f9:34:c1: 4b:b1:d8:ea:8b:3c:a8:9e:1c:3f:94:87:92:b4:ab:e7:c8:4b: 13:64:97:ea:6a:bf:ac:79:20:a7:66:12:4f:66:3a:16:ee:69: 17:7c:7c:54:e1:23:95:3a:36:1b:ff:64:6b:bc:1e:16:1c:d5: 87:36:34:b6:3c:e2:82:ab:e3:9b:e2:5f:f7:76:8a:80:03:9d: 71:b7:6e:54:aa:3f:80:59:3c:6c:ec:3c:a2:92:ff:97:41:0e: 06:9a:e3:85:bc:8e:e9:1f:1d:dd:1f:03:57:16:8c:45:b2:5b: 77:4c:b9:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmILIc6+KkUvAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OGM1YjgzNGMtNTc4Ni00ZDVmLTlhZTAtNmVlM2ZmMWI2Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyy+CaJzDhDZafDY7Bxd8Yn+UWMfvStP0rKm nolJxl3yEdd4rJoGk1FRlME4cC8zS7RXUXgS1ARzjAXhJr8clKunDWXFLkolqhxC OtYCCj1ob0ZsyAtK6Jco18LgLmBfdiCIqKx4ueFlcL0nxSa+TylwIZ0sTNNnkbm/ y6wb5ztK0mCAhCfJO1rpvXJRYeY/JEUaVJIOOgiAzeKJrDYQL+SW91pGQZui9rBP 47CjqRWofELh4AaEZ6uLDbqEgV7x/ntIF2eKOJLVH921PjF3pZBI/31hHJknTF3v EMOzbyKlJyi5mx5EHEDVj3DufKLo7Izp8hKSVeyULuhUhRvhHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzOJDNoDxOhJTl/JzzYPVE3KaA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvOWQxOTg0MzktZjU3NS0z MDFkLTkwMDUtMTg3MWUzODg3NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtPG2lvDuk6Sov1S+0eAwE4vvjdqDF7huIJDreQuAzwdJ6/e4HYcRQ7 wXoxSEWvRLm2nCmAfYTYyhVeqiOgqJ7+8ZwGzvJXZ3GNGXRCBfiqG5W090kAFBfU 2bxUJtktOGLjDpQuBsubb7RIS00aSMqvM8P+o0o/ccsPeNld6TJc6DnjTqEPFbGe pL4OwPk0wUux2OqLPKieHD+Uh5K0q+fISxNkl+pqv6x5IKdmEk9mOhbuaRd8fFTh I5U6Nhv/ZGu8HhYc1Yc2NLY84oKr45viX/d2ioADnXG3blSqP4BZPGzsPKKS/5dB Dgaa44W8jukfHd0fA1cWjEWyW3dMuck= -----END CERTIFICATE-----Generated at Wed Nov 5 05:09:47 2025 by rpki-client