$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa File: a5fade6e-275c-3ed2-a0be-b21ddef61294.roa (raw, json) Hash identifier: mFMpHGVjfLeJl+jyuwtw6+CuVhw/axZSJvOvl9StFSQ= Subject key identifier: 72:96:2C:94:FD:9F:A5:97:77:6F:CA:AB:66:93:FA:5A:F3:72:D2:DD Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B62020EE6CF6D10774931C340 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 63199 IP address blocks: 148.153.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:0e:e6:cf:6d:10:77:49:31:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=5ba6ec31-dd38-4c31-83bc-e6c8a683581c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:89:d5:8d:77:60:bb:67:ca:3d:6e:5a:3b: dc:85:00:f0:aa:0a:16:04:f4:bc:f8:b3:d1:f2:57: 49:03:cb:b3:80:3c:f8:3d:9f:0f:c3:c2:11:f7:05: ca:ec:45:8a:10:8d:f5:ed:75:d6:9c:a4:20:98:64: b9:33:bb:63:ef:2b:61:2b:c9:39:33:07:5f:8f:bf: 07:c6:8c:83:9c:02:6b:5f:08:a4:7c:75:05:3c:23: 65:71:03:7c:b7:88:72:41:f2:7c:2d:4a:5b:dd:14: 17:7b:62:68:6d:41:cb:c9:de:b7:bd:68:99:c6:ad: 10:d1:5a:d0:79:26:fb:f3:df:e0:6b:56:58:5d:e5: 01:fe:94:54:f2:df:6b:cb:f1:5b:05:2f:ee:1e:87: 5d:dd:d6:96:33:f0:ae:c3:a9:e5:09:01:50:9c:c1: 89:29:35:29:65:b6:b3:dc:28:3d:c6:fc:36:e3:f0: fc:5e:ab:48:9c:9b:d3:fe:8d:f4:a6:a9:18:ea:f0: 43:03:ed:3b:97:af:cd:e4:6f:79:f2:00:b3:c4:82: 6f:88:a1:9b:09:da:f1:0f:4d:d4:8a:29:5d:6e:4a: 13:43:e8:98:00:2c:f2:77:1c:f2:a8:c9:4d:1a:66: 38:cc:9d:22:bb:99:c4:46:74:c8:16:f8:2a:cc:5d: 6e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:2C:94:FD:9F:A5:97:77:6F:CA:AB:66:93:FA:5A:F3:72:D2:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:03:53:34:28:64:3e:04:54:83:bb:c1:6d:ab:ba:fc:ba:98: 83:dd:a3:06:45:d7:8f:d1:6c:ac:36:12:db:45:dc:62:82:e9: d7:7e:fb:f2:12:27:28:ee:9b:1a:64:2f:fa:db:e0:f5:bf:d8: 0b:d4:92:65:ee:f7:ab:fd:bf:4e:ac:c6:9f:2b:0e:96:35:6c: 07:67:34:68:85:93:2b:38:62:13:e6:1b:37:96:ef:3e:5a:70: 73:69:ed:20:f7:b1:9d:60:e9:39:36:0d:be:7f:b4:96:c8:21: 67:ad:20:a0:44:03:9b:33:dc:01:21:b1:81:68:53:a5:3a:b6: 0f:3a:80:dd:e0:7b:b5:09:20:c7:62:69:cc:61:a3:1b:0d:88: 01:b9:70:5a:8b:e0:72:aa:87:63:e7:5c:aa:a7:29:56:61:84: c2:d1:bc:5e:d2:9a:c9:0b:df:61:a3:82:4a:4e:79:a0:50:ef: de:7a:6d:04:82:73:a1:d6:93:e7:8d:0d:fc:f6:d6:c1:6e:64: ec:06:ed:88:23:7c:82:1a:db:b3:cb:40:dd:cd:1e:8a:a6:2d: 6a:df:67:cb:6e:11:6b:20:22:11:c8:40:ce:88:70:fb:25:df: 8c:bd:b3:3c:ba:27:0d:6a:5c:1f:0e:b7:d7:c7:ed:0c:6b:7e: 38:32:ac:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAg7mz20Qd0kxw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NWJhNmVjMzEtZGQzOC00YzMxLTgzYmMtZTZjOGE2ODM1ODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaeJ1Y13YLtnyj1uWjvchQDwqgoWBPS8+LPR 8ldJA8uzgDz4PZ8Pw8IR9wXK7EWKEI317XXWnKQgmGS5M7tj7ythK8k5Mwdfj78H xoyDnAJrXwikfHUFPCNlcQN8t4hyQfJ8LUpb3RQXe2JobUHLyd63vWiZxq0Q0VrQ eSb789/ga1ZYXeUB/pRU8t9ry/FbBS/uHodd3daWM/Cuw6nlCQFQnMGJKTUpZbaz 3Cg9xvw24/D8XqtInJvT/o30pqkY6vBDA+07l6/N5G958gCzxIJviKGbCdrxD03U iildbkoTQ+iYACzydxzyqMlNGmY4zJ0iu5nERnTIFvgqzF1uhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKWLJT9n6WXd2/Kq2aT+lrzctLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTVmYWRlNmUtMjc1Yy0z ZWQyLWEwYmUtYjIxZGRlZjYxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsDUzQoZD4EVIO7wW2ruvy6mIPdowZF14/RbKw2EttF3GKC6dd++/IS JyjumxpkL/rb4PW/2AvUkmXu96v9v06sxp8rDpY1bAdnNGiFkys4YhPmGzeW7z5a cHNp7SD3sZ1g6Tk2Db5/tJbIIWetIKBEA5sz3AEhsYFoU6U6tg86gN3ge7UJIMdi acxhoxsNiAG5cFqL4HKqh2PnXKqnKVZhhMLRvF7SmskL32GjgkpOeaBQ7956bQSC c6HWk+eNDfz21sFuZOwG7YgjfIIa27PLQN3NHoqmLWrfZ8tuEWsgIhHIQM6IcPsl 34y9szy6Jw1qXB8Ot9fH7QxrfjgyrM4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:15:14 2025 by rpki-client