$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa File: 0399118c-609b-3b8a-8490-f03a3e398256.roa (raw, json) Hash identifier: jQbK+4sx8HarF6VbWuhdnO3POsrKG0hZWGqO7vnFt6M= Subject key identifier: 68:CC:1C:6A:28:F8:1C:CE:00:1A:82:59:2F:D2:1A:9A:C7:88:43:D5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AD23BD157C0C1322971EE1C80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 63199 IP address blocks: 148.153.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d1:57:c0:c1:32:29:71:ee:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b38f75e5-7a4e-4f0d-8351-3c664bbe86fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:fb:f5:2a:a6:d8:f8:ee:2c:2f:c1:b0:61: 8c:f5:ec:fd:01:23:70:d2:55:4e:9e:7e:97:76:50: e1:de:d2:b1:0d:53:73:08:1e:10:09:83:ef:7f:25: eb:4a:ed:45:1a:51:41:48:dc:ca:91:9b:a5:47:c3: 8e:c3:41:5f:e2:f7:b6:1e:f5:23:6c:c0:ca:18:4f: 3b:f3:89:cc:bf:58:63:65:ff:02:5d:8d:ed:4b:dc: b9:77:c4:fe:d7:f5:e1:c6:6c:02:80:73:64:c3:b3: cc:61:7b:64:9b:31:20:cd:14:f7:a2:63:42:3c:d8: 07:1e:7a:cd:a1:93:98:86:8d:3b:21:e2:bf:4b:70: 3f:59:72:0e:85:af:7a:ac:41:47:54:df:43:d2:f2: 22:7b:2a:07:41:60:66:22:3f:ed:3f:26:cf:ea:3f: 55:2a:f1:ca:bf:a4:27:de:57:94:99:d2:7b:6f:51: da:88:90:2b:b2:1d:0e:47:f3:16:5f:e0:ed:fa:e3: e0:d8:1e:46:4b:3f:37:98:d9:b5:81:c0:bb:47:80: 9d:b7:33:47:c5:08:da:89:25:24:24:85:a8:8d:94: b4:80:7f:ce:59:0c:cb:4c:65:d9:f6:ae:1d:0c:7f: 1a:f3:1e:78:18:0b:3e:c9:18:f2:b5:a9:fa:fa:9d: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CC:1C:6A:28:F8:1C:CE:00:1A:82:59:2F:D2:1A:9A:C7:88:43:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:62:58:aa:94:a3:65:4b:5a:c6:7c:06:81:ab:34:b6:78:35: d7:ff:ea:28:4c:cf:c9:bf:0c:36:92:57:ab:7e:5f:c7:1b:79: 9e:d3:20:a2:de:ed:c9:ae:13:66:42:46:4f:ef:57:97:04:c4: 73:bb:82:4a:2a:45:d1:62:de:6b:e3:02:c4:5b:14:e9:b1:54: f0:d0:b7:08:ef:a0:a2:9e:fd:a7:67:1b:f0:96:61:e7:e3:07: 02:42:d3:04:bb:a8:1b:4f:69:97:49:58:e2:87:87:03:e0:b2: f1:9b:3e:63:be:f8:df:50:9e:fd:62:45:d8:8a:d5:27:72:bd: 04:ac:c9:87:50:d6:22:01:c0:61:a1:2e:a0:40:58:6e:21:ce: 8d:78:12:ad:6c:8c:d8:22:bf:a0:eb:18:d7:9f:a1:bf:52:3c: d1:3a:14:7d:fc:5d:2a:d9:49:cc:ec:35:d1:f8:53:0e:7b:24: 34:02:38:b9:13:7b:d8:b3:2d:ad:94:3a:03:d3:6c:ae:a4:99: c0:d9:99:d0:ac:14:17:3a:0c:c9:ab:f8:e6:3a:bc:e1:46:0e: 4f:e1:d8:8e:0e:fc:1a:ea:ed:83:a2:1d:fa:32:22:87:a0:fa: 97:09:82:d4:63:56:7e:22:68:54:dc:a0:36:60:7e:82:8d:c5: 2e:78:cf:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9FXwMEyKXHuHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjM4Zjc1ZTUtN2E0ZS00ZjBkLTgzNTEtM2M2NjRiYmU4NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN779Sqm2PjuLC/BsGGM9ez9ASNw0lVOnn6X dlDh3tKxDVNzCB4QCYPvfyXrSu1FGlFBSNzKkZulR8OOw0Ff4ve2HvUjbMDKGE87 84nMv1hjZf8CXY3tS9y5d8T+1/XhxmwCgHNkw7PMYXtkmzEgzRT3omNCPNgHHnrN oZOYho07IeK/S3A/WXIOha96rEFHVN9D0vIieyoHQWBmIj/tPybP6j9VKvHKv6Qn 3leUmdJ7b1HaiJArsh0OR/MWX+Dt+uPg2B5GSz83mNm1gcC7R4CdtzNHxQjaiSUk JIWojZS0gH/OWQzLTGXZ9q4dDH8a8x54GAs+yRjytan6+p3saQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjMHGoo+BzOABqCWS/SGprHiEPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDM5OTExOGMtNjA5Yi0z YjhhLTg0OTAtZjAzYTNlMzk4MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhiWKqUo2VLWsZ8BoGrNLZ4Ndf/6ihMz8m/DDaSV6t+X8cbeZ7TIKLe 7cmuE2ZCRk/vV5cExHO7gkoqRdFi3mvjAsRbFOmxVPDQtwjvoKKe/adnG/CWYefj BwJC0wS7qBtPaZdJWOKHhwPgsvGbPmO++N9Qnv1iRdiK1SdyvQSsyYdQ1iIBwGGh LqBAWG4hzo14Eq1sjNgiv6DrGNefob9SPNE6FH38XSrZSczsNdH4Uw57JDQCOLkT e9izLa2UOgPTbK6kmcDZmdCsFBc6DMmr+OY6vOFGDk/h2I4O/Brq7YOiHfoyIoeg +pcJgtRjVn4iaFTcoDZgfoKNxS54zxI= -----END CERTIFICATE-----Generated at Sat Aug 23 06:58:16 2025 by rpki-client