$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa File: a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa (raw, json) Hash identifier: XFaLfaCedqyOjnJ6RHUn9fj395w9o1e3Fh+zMv78F3c= Subject key identifier: F2:C1:37:80:6A:5E:62:68:75:E6:03:4D:A1:66:87:CC:5D:46:B3:11 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B6A61EE4646E3C83F5F2678C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 63199 IP address blocks: 148.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ee:46:46:e3:c8:3f:5f:26:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=af26ff22-af8e-44e6-b574-d9c4561767dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:ab:4f:87:b1:8d:35:5d:a7:e6:2c:a8:16: e5:e4:b6:d4:9c:d2:27:07:93:ba:ed:4e:6f:23:20: 88:43:d7:ca:c2:08:e3:04:e8:8f:27:74:43:e6:6c: 3f:10:bf:ef:c3:c9:47:16:1a:7b:d3:33:bc:f1:cf: 31:4c:f3:aa:9c:b4:9b:16:26:f5:bc:49:b9:0f:b0: d7:27:4f:3c:22:dc:6b:78:e4:c2:46:9a:20:1c:3a: 3e:84:85:32:bf:eb:97:5b:07:12:f9:01:ff:2c:50: 22:68:03:56:d0:89:07:95:46:c1:ac:f2:b9:bc:fe: 9f:c1:62:70:92:6e:d1:a2:50:c9:c8:13:66:34:5f: f6:7e:32:34:f2:e8:73:77:81:4f:23:54:08:9b:ea: d0:35:b7:7b:88:15:3d:e8:b1:cd:60:79:28:5a:45: b7:28:e2:4f:2d:84:11:6b:19:3b:92:8c:20:59:02: e6:dd:28:4c:86:b5:eb:32:02:5a:ae:48:dd:b1:2d: 0d:bb:b6:c4:20:94:55:f8:42:b8:bf:78:4f:43:1f: 7b:9c:52:e8:e5:b7:f6:b9:2e:a0:49:0c:15:3b:67: 1a:60:fb:43:41:b8:fd:dc:13:16:4b:9f:de:43:08: 51:1c:b2:e2:4f:3d:eb:46:16:83:e8:a4:40:51:af: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:37:80:6A:5E:62:68:75:E6:03:4D:A1:66:87:CC:5D:46:B3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1e:74:2a:04:db:14:f8:3f:cc:d5:81:11:34:ba:ac:5b:fe: 90:90:1e:29:a0:2a:c7:55:18:79:2b:4d:b0:11:2a:50:c5:5b: 95:01:19:08:68:03:ac:9a:eb:85:fe:3d:74:ec:1a:ca:7a:7c: fd:24:4a:3f:19:7e:0f:d1:d9:a3:98:df:4e:55:c0:5c:7e:81: ab:cb:c1:4f:2a:d7:19:4b:fc:a6:1a:ff:26:fc:a6:da:3a:dd: b9:bb:4b:9b:46:6a:0b:ed:84:7d:8b:c0:d8:7d:19:fa:2d:f0: bc:8f:8a:fa:d6:f1:56:4d:22:e3:66:38:b7:f5:00:41:eb:fe: d7:99:0b:ce:f0:50:59:37:5a:2b:6a:2d:c2:e8:72:0a:1b:a1: 2e:a4:ef:ad:01:a8:f0:c8:f9:9a:8d:35:44:12:77:e7:2a:93: a5:20:53:be:48:ec:bb:9b:d6:9c:77:66:c0:ca:e5:9f:df:b1: c4:da:80:37:58:ab:0e:ac:e3:a5:6c:bf:1c:4a:84:f7:b1:77: f9:5c:30:c1:a6:6d:c5:18:0b:f9:97:3c:ed:ad:c6:8e:af:20: e2:78:c2:cc:c7:48:9f:11:24:6f:e6:5f:a0:46:a0:8b:e5:3b: 4c:39:b4:48:c8:19:f4:f7:7c:20:e3:b5:f0:24:44:e2:b1:3e: dc:d0:4f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYe5GRuPIP18meMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YWYyNmZmMjItYWY4ZS00NGU2LWI1NzQtZDljNDU2MTc2N2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDGrT4exjTVdp+YsqBbl5LbUnNInB5O67U5v IyCIQ9fKwgjjBOiPJ3RD5mw/EL/vw8lHFhp70zO88c8xTPOqnLSbFib1vEm5D7DX J088ItxreOTCRpogHDo+hIUyv+uXWwcS+QH/LFAiaANW0IkHlUbBrPK5vP6fwWJw km7RolDJyBNmNF/2fjI08uhzd4FPI1QIm+rQNbd7iBU96LHNYHkoWkW3KOJPLYQR axk7kowgWQLm3ShMhrXrMgJarkjdsS0Nu7bEIJRV+EK4v3hPQx97nFLo5bf2uS6g SQwVO2caYPtDQbj93BMWS5/eQwhRHLLiTz3rRhaD6KRAUa/1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLBN4BqXmJodeYDTaFmh8xdRrMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTdmODU2ZDItNDFkNi0z NmViLTk2MGEtY2MxNWZjZTllMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4edCoE2xT4P8zVgRE0uqxb/pCQHimgKsdVGHkrTbARKlDFW5UBGQho A6ya64X+PXTsGsp6fP0kSj8Zfg/R2aOY305VwFx+gavLwU8q1xlL/KYa/yb8pto6 3bm7S5tGagvthH2LwNh9Gfot8LyPivrW8VZNIuNmOLf1AEHr/teZC87wUFk3Witq LcLocgoboS6k760BqPDI+ZqNNUQSd+cqk6UgU75I7Lub1px3ZsDK5Z/fscTagDdY qw6s46VsvxxKhPexd/lcMMGmbcUYC/mXPO2txo6vIOJ4wszHSJ8RJG/mX6BGoIvl O0w5tEjIGfT3fCDjtfAkROKxPtzQT80= -----END CERTIFICATE-----Generated at Tue Nov 4 23:14:48 2025 by rpki-client