$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa File: da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa (raw, json) Hash identifier: EULYhMJjva/V47sYxES1d4BgJi3g5BEgw2T9vTcZ8N8= Subject key identifier: 88:C3:75:E5:06:C7:C1:F7:25:76:E4:EA:E1:78:DB:3E:CC:87:3F:19 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B72C1EB7F35E53DB861AE7D00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 63199 IP address blocks: 148.153.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:eb:7f:35:e5:3d:b8:61:ae:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=df33005a-4cc4-41f4-85a9-726d82ff9c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:0a:ee:d7:3d:5c:3e:bd:36:6b:d4:7c:a1: 11:2b:ec:f8:47:53:ef:5c:9d:e0:ee:35:5d:89:d6: 59:03:c7:3a:e9:ac:64:80:16:6f:44:75:fd:93:9a: 31:c7:dd:e0:bb:7f:19:9d:e6:0d:ed:f1:f9:51:7a: 5b:f3:2d:0d:59:84:62:a7:68:05:d3:79:50:7a:81: a1:e9:33:f0:74:65:90:d1:da:7e:0a:f0:f4:b9:75: d2:a1:bc:36:82:e1:6f:fb:b5:ac:14:3c:d7:c2:9b: 27:fe:d6:a8:af:5d:2d:8e:94:2e:be:ca:3f:3d:a1: 5c:1b:f7:65:0e:bb:ff:bf:d9:c7:bc:4a:eb:03:4c: bd:9d:a8:5c:48:a0:a7:b3:f9:2f:74:b6:77:7a:7a: e5:e0:9d:ec:0e:01:82:0d:78:49:40:d7:64:51:83: 5c:47:9e:12:d1:32:42:e3:7d:e0:81:df:9e:02:df: f4:57:79:95:a1:2e:70:1f:1e:f0:27:56:de:cc:9c: 31:f9:87:4e:af:01:ef:39:a5:40:24:1d:04:ed:7a: 27:a0:d1:34:da:48:e8:89:f4:93:2c:03:da:93:df: c5:8f:ef:d0:9a:16:98:37:df:68:d3:0f:3e:bc:e8: c2:a3:ca:3a:20:87:20:b1:38:93:60:ed:16:5f:ec: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C3:75:E5:06:C7:C1:F7:25:76:E4:EA:E1:78:DB:3E:CC:87:3F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:22:b4:69:95:c2:ff:f5:91:91:77:a0:d7:d6:7a:d3:93:b0: f9:b8:bf:02:99:da:c3:e1:ac:70:46:54:6e:8a:7a:e7:ad:36: d1:ab:f8:a4:8f:de:56:31:3d:39:7e:b0:af:9f:11:4c:a6:01: 1a:30:79:f8:9a:d0:8c:d5:6e:44:10:0b:fe:0b:52:00:33:da: 17:70:a8:2b:75:8e:1a:9b:7c:df:33:d7:2b:0b:2d:ad:36:9e: da:7c:4a:2b:ab:1b:d9:b1:fd:61:08:e8:e5:e2:2b:60:99:f6: f4:d1:8f:bf:4b:2e:83:02:85:c5:94:85:12:f0:55:4c:de:bf: 5d:db:a6:0c:5d:28:e5:08:e0:aa:e8:cd:ee:c1:36:20:e3:85: 18:60:14:23:6b:23:8f:16:c8:01:66:bd:74:11:f0:5b:b4:5d: 9b:cd:c1:07:6a:f3:91:25:2f:a0:a2:dc:86:35:1c:b4:4a:68: 2c:19:9a:db:37:4a:ce:03:bd:34:87:92:da:ed:6e:ad:23:a4: 97:0e:4c:41:10:90:1c:cd:c4:32:f3:77:5e:db:d0:f9:3d:17: 80:76:c7:b6:6f:4c:ac:70:97:7b:a5:e8:4c:f8:22:46:1c:bb: 5a:08:14:26:34:6d:b0:9f:ec:55:1f:16:73:4b:fd:02:a1:ef: 16:58:a0:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywet/NeU9uGGufQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk ZGYzMzAwNWEtNGNjNC00MWY0LTg1YTktNzI2ZDgyZmY5Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB8K7tc9XD69NmvUfKERK+z4R1PvXJ3g7jVd idZZA8c66axkgBZvRHX9k5oxx93gu38ZneYN7fH5UXpb8y0NWYRip2gF03lQeoGh 6TPwdGWQ0dp+CvD0uXXSobw2guFv+7WsFDzXwpsn/taor10tjpQuvso/PaFcG/dl Drv/v9nHvErrA0y9nahcSKCns/kvdLZ3enrl4J3sDgGCDXhJQNdkUYNcR54S0TJC 433ggd+eAt/0V3mVoS5wHx7wJ1bezJwx+YdOrwHvOaVAJB0E7XonoNE02kjoifST LAPak9/Fj+/QmhaYN99o0w8+vOjCo8o6IIcgsTiTYO0WX+xs9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjDdeUGx8H3JXbk6uF42z7Mhz8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGE2MjliZGItYzY0Yy0z Y2JlLWFlOWMtMjgyNGJhNThiYmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0itGmVwv/1kZF3oNfWetOTsPm4vwKZ2sPhrHBGVG6KeuetNtGr+KSP 3lYxPTl+sK+fEUymARowefia0IzVbkQQC/4LUgAz2hdwqCt1jhqbfN8z1ysLLa02 ntp8SiurG9mx/WEI6OXiK2CZ9vTRj79LLoMChcWUhRLwVUzev13bpgxdKOUI4Kro ze7BNiDjhRhgFCNrI48WyAFmvXQR8Fu0XZvNwQdq85ElL6Ci3IY1HLRKaCwZmts3 Ss4DvTSHktrtbq0jpJcOTEEQkBzNxDLzd17b0Pk9F4B2x7ZvTKxwl3ul6Ez4IkYc u1oIFCY0bbCf7FUfFnNL/QKh7xZYoFU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:50 2025 by rpki-client