$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa File: ca4000da-8aab-337b-9ec7-04cc1a336133.roa (raw, json) Hash identifier: TYGSa5yJiwhVfqudQtBYKILnnqwMFst4j44Ex84/yKg= Subject key identifier: 3D:34:C6:22:A7:21:FB:73:56:C6:C3:10:4F:61:C0:CB:7F:88:62:FC Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B9E07BAA7A639881D05835340 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 63199 IP address blocks: 148.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:ba:a7:a6:39:88:1d:05:83:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=87f9747e-e3e0-4f9c-901e-3d1ebd181e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:e3:13:53:9c:83:ac:3d:5b:65:4f:75:cf: 69:fb:a3:db:2b:ef:8b:86:29:e3:d1:b4:d3:83:b4: 9d:49:e6:24:52:21:ed:ef:23:7b:76:fe:a0:f2:20: ce:4d:42:b0:c2:d8:ab:36:a7:cf:72:6f:fe:75:42: dc:65:96:73:1b:3e:d3:c4:68:5a:03:1a:5e:66:30: b7:1d:21:7c:ba:62:bd:08:10:7f:dc:e8:23:e1:6a: 14:2d:f9:f2:fb:fa:4f:73:16:42:bd:d0:41:8c:eb: 6d:1d:64:68:b0:90:5a:8a:ba:07:9f:81:dc:62:ad: 14:e9:ff:fc:1c:f1:34:57:11:28:d9:d2:62:68:30: 29:d6:98:b8:e3:de:99:07:7e:5d:7b:a2:3b:68:0e: 2d:cf:a5:20:d1:14:71:e2:d8:2b:1e:c5:5e:fa:0d: 15:bf:06:47:77:ce:18:a1:2b:d2:16:2d:39:03:c5: b9:5a:99:55:ff:6c:3e:b1:d1:fa:28:06:f9:7d:32: a1:6b:d7:2f:a5:f6:3c:ab:86:0b:65:e3:3a:31:38: 73:94:cf:2f:cb:1f:dd:71:26:8c:98:21:bc:b3:ce: 4b:36:22:7f:7c:9a:d4:4d:48:cf:51:2b:dc:d2:43: 42:4d:ad:68:40:90:75:31:9a:c5:99:13:6f:97:6e: 77:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:34:C6:22:A7:21:FB:73:56:C6:C3:10:4F:61:C0:CB:7F:88:62:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5c:6e:e9:dd:52:de:d3:5d:5f:89:62:79:5f:55:d2:53:b9: 98:8d:8b:1a:26:50:5d:10:4c:42:3c:60:18:8e:7a:6e:be:e1: ca:1e:02:ce:30:a0:d0:66:be:54:5d:63:d9:9a:1b:24:ad:4d: 68:7c:41:4a:42:8c:e7:8c:a7:c5:0a:e3:58:e8:c1:ff:ef:b3: 43:e5:16:15:11:71:30:8a:eb:7c:22:5e:f9:84:29:05:a0:6a: cf:03:15:bf:ad:d3:1c:0a:b1:88:22:c9:93:44:fb:6f:d8:ae: 3e:2d:f8:e1:df:89:a5:01:84:b1:c6:cb:f5:c5:bc:82:a9:0c: b0:63:fb:70:f2:da:77:b3:48:d0:88:4b:5f:73:dc:fd:f5:b5: 7f:32:29:5e:9e:27:68:71:0c:3d:50:52:7c:4c:c8:bf:92:f6: 44:68:14:ba:13:b9:60:18:f8:d3:1b:20:c9:27:ee:82:17:08: 10:c7:07:f7:aa:99:6b:9e:3c:c1:e8:04:31:90:a1:eb:ff:11: 85:01:a4:4f:c8:9c:e4:1b:a0:a0:96:54:32:1d:6a:80:71:b3: 80:49:99:79:e3:5a:bf:0d:2b:fb:31:9a:05:19:50:30:89:dc: 03:31:da:cb:88:37:2b:47:1d:e7:a3:b5:19:c3:03:9b:8a:c6: 15:d9:78:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7qnpjmIHQWDU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ODdmOTc0N2UtZTNlMC00ZjljLTkwMWUtM2QxZWJkMTgxZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtprjE1Ocg6w9W2VPdc9p+6PbK++Lhinj0bTT g7SdSeYkUiHt7yN7dv6g8iDOTUKwwtirNqfPcm/+dULcZZZzGz7TxGhaAxpeZjC3 HSF8umK9CBB/3Ogj4WoULfny+/pPcxZCvdBBjOttHWRosJBairoHn4HcYq0U6f/8 HPE0VxEo2dJiaDAp1pi4496ZB35de6I7aA4tz6Ug0RRx4tgrHsVe+g0VvwZHd84Y oSvSFi05A8W5WplV/2w+sdH6KAb5fTKha9cvpfY8q4YLZeM6MThzlM8vyx/dcSaM mCG8s85LNiJ/fJrUTUjPUSvc0kNCTa1oQJB1MZrFmRNvl253LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD00xiKnIftzVsbDEE9hwMt/iGL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2E0MDAwZGEtOGFhYi0z MzdiLTllYzctMDRjYzFhMzM2MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJcbundUt7TXV+JYnlfVdJTuZiNixomUF0QTEI8YBiOem6+4coeAs4w oNBmvlRdY9maGyStTWh8QUpCjOeMp8UK41jowf/vs0PlFhURcTCK63wiXvmEKQWg as8DFb+t0xwKsYgiyZNE+2/Yrj4t+OHfiaUBhLHGy/XFvIKpDLBj+3Dy2nezSNCI S19z3P31tX8yKV6eJ2hxDD1QUnxMyL+S9kRoFLoTuWAY+NMbIMkn7oIXCBDHB/eq mWuePMHoBDGQoev/EYUBpE/InOQboKCWVDIdaoBxs4BJmXnjWr8NK/sxmgUZUDCJ 3AMx2suINytHHeejtRnDA5uKxhXZeKE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:46 2025 by rpki-client