$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa File: 243aaf43-c9df-3a08-b963-f0e358be1f43.roa (raw, json) Hash identifier: 7pouvTFLXAoN4W/KLwkoDJrfRksLdiDSZzfFTvgWlgQ= Subject key identifier: 57:4E:46:E7:70:41:89:04:30:16:1D:33:48:FF:74:17:E5:9F:67:D6 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AF0F144FA6419D71EBC673080 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 63199 IP address blocks: 148.153.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:44:fa:64:19:d7:1e:bc:67:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=c1ad5cf9-78ef-4058-957e-4bb26672ac9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:40:d2:45:cb:fe:d5:7f:f4:c6:1b:c5:07: 67:d5:6e:58:da:28:c9:cf:45:fc:bf:98:d6:ad:16: 90:c2:46:7b:06:52:82:2a:ae:08:da:00:87:ba:b7: 54:50:89:78:76:c3:4a:16:3d:9a:52:68:23:b7:88: 82:9e:ea:1f:e4:a3:c3:33:36:88:dc:b5:00:b2:d9: 5d:ce:0a:68:ef:8f:69:85:56:33:29:9f:be:e5:c6: e0:cc:b5:a4:6b:74:94:b0:fe:0c:13:16:2a:d3:bf: e7:0d:d8:47:cc:97:64:3d:13:ac:8c:1e:b6:61:d6: d7:9e:de:30:b4:bd:ee:70:02:e4:28:ba:dd:63:90: be:e1:9d:2d:49:e1:1c:7f:1e:46:d0:8c:8f:20:62: 33:bb:62:ce:00:07:31:33:3e:99:b6:cb:20:31:d9: 18:c0:17:a1:fb:f4:05:c8:54:7d:7e:dd:a0:03:a0: 9d:63:24:8a:f2:d4:09:06:4c:e2:1e:46:d6:df:79: 67:f9:21:15:d3:71:7d:00:db:bd:6d:f1:5c:fe:a2: 24:82:1d:15:77:17:32:89:2e:3a:21:00:9e:24:0d: 74:4d:d6:bf:bb:d2:f4:8a:5a:ba:86:09:98:33:91: 15:8d:30:7a:cd:15:9b:c5:b6:c1:b1:9a:5c:4b:b3: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4E:46:E7:70:41:89:04:30:16:1D:33:48:FF:74:17:E5:9F:67:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:70:18:0e:2b:62:4e:ed:32:3d:2b:82:cf:18:3d:b1:9f:8e: dd:7a:67:cd:76:c0:33:26:43:f4:d3:2c:5b:4d:b8:0a:90:50: 5d:fb:c4:ad:56:dd:ab:cb:6d:7e:96:a3:92:7a:10:3c:c0:c5: 2a:af:a0:33:ad:b6:3c:13:e9:bd:38:76:dd:7e:69:f3:9d:6e: 20:4f:d2:0e:cb:81:9b:4c:d7:61:39:41:8d:a0:cf:d1:cc:91: 33:cd:3d:c0:37:0d:c8:d6:28:75:8a:c7:a3:ac:60:35:d5:0a: cd:9c:c1:cb:47:c0:6e:8a:66:1b:3a:5e:d5:f0:d7:89:cb:3c: 00:48:7c:02:49:90:69:51:ac:dd:43:b5:7b:5d:0b:57:f4:47: cb:5a:7f:36:1a:8c:e6:69:7d:98:da:c9:cd:64:c3:c2:2e:29: 1f:ff:b8:ee:fe:92:b5:bb:f0:82:f4:2a:2b:ab:7c:17:6e:5b: 30:c4:09:bc:c4:63:aa:94:b7:e3:6e:07:26:eb:ab:1d:99:a3: d0:53:59:27:80:17:59:98:78:00:f0:a5:86:f9:58:ee:6b:45: 0e:79:08:62:27:b2:f9:bb:1c:75:c5:3d:6e:31:08:11:fd:b7: 59:d7:ce:b0:c9:34:04:be:84:40:d7:01:3d:80:52:bf:a9:d0: 9f:f0:a7:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UT6ZBnXHrxnMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YzFhZDVjZjktNzhlZi00MDU4LTk1N2UtNGJiMjY2NzJhYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli1A0kXL/tV/9MYbxQdn1W5Y2ijJz0X8v5jW rRaQwkZ7BlKCKq4I2gCHurdUUIl4dsNKFj2aUmgjt4iCnuof5KPDMzaI3LUAstld zgpo749phVYzKZ++5cbgzLWka3SUsP4MExYq07/nDdhHzJdkPROsjB62YdbXnt4w tL3ucALkKLrdY5C+4Z0tSeEcfx5G0IyPIGIzu2LOAAcxMz6ZtssgMdkYwBeh+/QF yFR9ft2gA6CdYySK8tQJBkziHkbW33ln+SEV03F9ANu9bfFc/qIkgh0VdxcyiS46 IQCeJA10Tda/u9L0ilq6hgmYM5EVjTB6zRWbxbbBsZpcS7OBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdORudwQYkEMBYdM0j/dBfln2fWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjQzYWFmNDMtYzlkZi0z YTA4LWI5NjMtZjBlMzU4YmUxZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJwGA4rYk7tMj0rgs8YPbGfjt16Z812wDMmQ/TTLFtNuAqQUF37xK1W 3avLbX6Wo5J6EDzAxSqvoDOttjwT6b04dt1+afOdbiBP0g7LgZtM12E5QY2gz9HM kTPNPcA3DcjWKHWKx6OsYDXVCs2cwctHwG6KZhs6XtXw14nLPABIfAJJkGlRrN1D tXtdC1f0R8tafzYajOZpfZjayc1kw8IuKR//uO7+krW78IL0KiurfBduWzDECbzE Y6qUt+NuBybrqx2Zo9BTWSeAF1mYeADwpYb5WO5rRQ55CGInsvm7HHXFPW4xCBH9 t1nXzrDJNAS+hEDXAT2AUr+p0J/wp2k= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:18 2025 by rpki-client