$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa File: badd067d-d8c6-3638-b8fc-51032051faf9.roa (raw, json) Hash identifier: heedLxEvG6W06BJkH359gjB//X0rzRuvnv9FCE1N5UM= Subject key identifier: 46:60:8F:22:CB:A5:4F:D4:0F:4A:74:11:FD:6C:79:C2:59:23:34:7F Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AE461218175ACF1B3A35DD200 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 63199 IP address blocks: 148.153.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:21:81:75:ac:f1:b3:a3:5d:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=a13a508b-61a0-4d2b-9d00-16c3edb36025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:ad:ec:88:24:53:4b:93:31:a7:fa:fc:8b: 13:cb:9c:60:6b:bd:77:90:3e:53:7a:01:8f:f4:c6: c3:ab:11:79:87:05:c3:47:95:98:d1:48:b3:81:38: 4a:a1:b5:c0:4f:f5:7d:1f:b5:5d:00:08:58:46:2a: 84:b4:ee:fb:25:2e:27:e6:65:86:0b:a9:52:82:35: ac:fa:cc:da:a0:f2:68:e1:9c:8f:12:c9:b5:d9:ef: 47:48:8b:fe:ab:ca:71:88:22:9f:5c:ed:a2:da:77: f0:b6:e4:81:02:f7:bb:e7:36:97:81:a7:2c:35:5c: ae:a2:cd:9c:ff:a8:2d:d3:fe:8f:99:39:52:f8:55: 26:94:7e:c8:c0:00:d3:10:ff:0f:c2:38:12:d3:a2: c8:2d:5d:19:8f:11:bb:8a:79:12:3f:57:3c:70:04: 93:de:a0:1c:71:a9:12:51:5f:cb:0c:80:3f:a9:0a: b1:47:6a:98:d0:94:7d:50:cc:c6:68:ff:c3:d2:1a: c9:80:27:2a:cb:32:2a:70:c5:62:17:35:5c:95:8d: 79:ff:80:3b:fd:7a:fd:04:94:cb:a2:d5:59:00:01: a2:fd:54:21:fe:34:b4:5c:08:99:1f:72:3e:d4:40: 65:16:1c:65:7f:3e:a8:d0:ef:28:7c:51:28:33:37: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:60:8F:22:CB:A5:4F:D4:0F:4A:74:11:FD:6C:79:C2:59:23:34:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:66:a6:6e:21:aa:ac:dd:88:bb:54:75:9d:99:56:fe:c5:e2: 19:a2:e5:aa:03:38:75:50:72:fa:b0:6b:fb:7d:de:14:86:3f: 2a:74:17:ce:e3:7d:22:14:67:1c:b5:4e:a7:a6:4e:9e:e6:51: a4:5d:aa:45:f7:f2:9d:8e:11:54:bf:bd:67:cd:95:0a:13:ab: 5b:3c:dd:41:f6:29:7f:c0:9a:c8:9b:14:78:14:dd:2e:a6:5a: af:db:6a:ca:95:82:48:3d:ec:78:db:93:a7:5a:99:76:b6:64: 9b:ab:cd:c8:1e:06:6f:f2:7f:47:41:6b:e7:de:79:b0:57:b0: e0:ce:aa:42:da:bc:f0:82:6e:ad:bb:2b:15:45:d8:d5:50:84: 34:7f:b5:38:4a:b3:cb:be:7c:5e:f4:d0:c6:b2:7f:22:11:fa: 4f:1e:08:ee:76:aa:1f:a4:57:da:f8:8f:a6:1c:fb:b8:f5:2b: b4:f1:7f:8d:95:fc:8f:57:1b:c3:de:a1:57:b0:fc:8e:13:2f: 07:f2:56:50:55:9a:e1:e4:39:06:17:09:ac:fd:58:60:64:21: 72:23:71:fe:60:59:63:de:b0:c8:e1:2c:47:2c:e9:68:35:83: eb:70:3c:7e:b9:19:bf:40:08:eb:a1:96:39:29:66:f7:6f:82: fc:d3:f4:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSGBdazxs6Nd0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YTEzYTUwOGItNjFhMC00ZDJiLTlkMDAtMTZjM2VkYjM2MDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dSt7IgkU0uTMaf6/IsTy5xga713kD5TegGP 9MbDqxF5hwXDR5WY0UizgThKobXAT/V9H7VdAAhYRiqEtO77JS4n5mWGC6lSgjWs +szaoPJo4ZyPEsm12e9HSIv+q8pxiCKfXO2i2nfwtuSBAve75zaXgacsNVyuos2c /6gt0/6PmTlS+FUmlH7IwADTEP8PwjgS06LILV0ZjxG7inkSP1c8cAST3qAccakS UV/LDIA/qQqxR2qY0JR9UMzGaP/D0hrJgCcqyzIqcMViFzVclY15/4A7/Xr9BJTL otVZAAGi/VQh/jS0XAiZH3I+1EBlFhxlfz6o0O8ofFEoMzcZswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZgjyLLpU/UD0p0Ef1secJZIzR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYmFkZDA2N2QtZDhjNi0z NjM4LWI4ZmMtNTEwMzIwNTFmYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBmpm4hqqzdiLtUdZ2ZVv7F4hmi5aoDOHVQcvqwa/t93hSGPyp0F87j fSIUZxy1TqemTp7mUaRdqkX38p2OEVS/vWfNlQoTq1s83UH2KX/AmsibFHgU3S6m Wq/basqVgkg97Hjbk6damXa2ZJurzcgeBm/yf0dBa+feebBXsODOqkLavPCCbq27 KxVF2NVQhDR/tThKs8u+fF700MayfyIR+k8eCO52qh+kV9r4j6Yc+7j1K7Txf42V /I9XG8PeoVew/I4TLwfyVlBVmuHkOQYXCaz9WGBkIXIjcf5gWWPesMjhLEcs6Wg1 g+twPH65Gb9ACOuhljkpZvdvgvzT9PI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:05 2025 by rpki-client