$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa File: 5eb06c17-6f04-3135-bc69-e990ab9b6737.roa (raw, json) Hash identifier: Pe4jsWU+RdAb0CNA0S6Xypl5PEFg11FzIIccgXfAk20= Subject key identifier: C6:39:5A:72:60:31:2C:D1:97:8D:B6:DC:C0:8E:FC:41:BC:85:08:A1 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AD23BD145539A64F3C278F420 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 63199 IP address blocks: 148.153.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d1:45:53:9a:64:f3:c2:78:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=09478903-46f5-4a04-84af-6cde01eec31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:23:95:99:57:b3:6a:9b:9e:9c:56:8b:97: 03:fb:65:39:c7:84:02:e2:df:78:7a:dc:36:f0:de: f2:cc:ef:6b:f0:57:e7:0e:42:00:54:4e:a3:88:6a: c9:f8:55:93:12:58:b7:1e:6a:11:c0:80:1a:2c:a7: 82:ad:63:c6:20:14:3b:f0:04:e5:e6:0b:1d:3b:25: db:55:3d:38:52:40:ac:55:2c:73:88:3b:88:3c:12: 53:23:ce:59:02:ce:a9:e3:de:52:94:17:46:c1:5f: 85:e2:85:c8:47:6d:40:91:20:46:61:bf:8b:48:8e: 63:5d:58:e4:a7:27:33:98:1c:5b:5d:57:ca:d9:78: cb:59:43:f3:65:58:00:9f:d2:1a:5b:18:c6:d7:ec: fa:24:fb:77:f6:c5:89:e9:96:d4:e8:50:f4:33:2f: 36:62:08:f3:a4:cd:29:ba:cf:31:9d:a3:bb:1a:43: f6:e3:b9:d4:e6:b7:7f:47:22:2f:5e:a0:e3:23:5e: 2e:6c:30:28:86:5c:c9:b6:8f:6f:00:b5:fd:60:7f: 74:5c:d8:b8:b2:c2:df:fc:26:a5:a1:b2:8f:22:2c: 1c:46:1f:6b:f2:4f:27:d0:52:2f:3a:aa:3a:9b:bf: 2c:10:10:cb:7c:20:40:e9:b2:e3:f5:e7:a0:33:ba: 9d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:39:5A:72:60:31:2C:D1:97:8D:B6:DC:C0:8E:FC:41:BC:85:08:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5eb06c17-6f04-3135-bc69-e990ab9b6737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:76:ac:f8:da:1d:fd:9d:ae:f6:d4:3b:b3:66:38:cf:ff:2b: d6:59:68:47:62:32:f3:da:61:ac:f1:c2:58:aa:c7:a9:fc:d5: 72:1c:35:f6:5b:b3:13:33:8e:63:76:7a:d7:5a:99:7f:f1:16: db:6e:79:b2:ce:51:ac:d9:3d:88:19:8b:37:99:fa:39:93:dc: 5e:af:5e:b9:64:85:38:d1:8d:30:81:49:6a:e5:96:f5:5a:5f: df:b6:6e:10:af:44:a1:66:88:6d:6a:3d:e3:aa:54:9b:ed:23: 65:ab:5b:d0:9c:54:6f:22:e2:83:91:1a:06:e8:94:10:4a:84: c0:10:2b:b1:1b:de:a3:f4:82:f9:40:21:a1:19:93:9d:5d:e0: 82:88:72:e8:78:37:29:87:fb:41:dc:ce:3c:92:f3:39:12:5f: 6e:04:66:ff:db:47:c6:5d:d4:ce:a5:ad:58:65:57:48:74:37: 3f:11:0e:01:a5:fa:94:23:b2:e5:a6:80:63:16:c3:d2:77:97: 9e:8e:f0:d4:1a:bb:fb:d4:67:fa:95:ef:75:29:d6:1e:80:4a: 3f:99:27:89:5f:37:99:32:81:a7:39:29:15:77:1f:7e:75:63: 19:45:b4:4a:6b:85:d1:b7:8a:5b:7d:b6:a1:18:bd:ac:83:6a: c6:12:65:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9FFU5pk88J49CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MDk0Nzg5MDMtNDZmNS00YTA0LTg0YWYtNmNkZTAxZWVjMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nIjlZlXs2qbnpxWi5cD+2U5x4QC4t94etw2 8N7yzO9r8FfnDkIAVE6jiGrJ+FWTEli3HmoRwIAaLKeCrWPGIBQ78ATl5gsdOyXb VT04UkCsVSxziDuIPBJTI85ZAs6p495SlBdGwV+F4oXIR21AkSBGYb+LSI5jXVjk pyczmBxbXVfK2XjLWUPzZVgAn9IaWxjG1+z6JPt39sWJ6ZbU6FD0My82YgjzpM0p us8xnaO7GkP247nU5rd/RyIvXqDjI14ubDAohlzJto9vALX9YH90XNi4ssLf/Cal obKPIiwcRh9r8k8n0FIvOqo6m78sEBDLfCBA6bLj9eegM7qdXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY5WnJgMSzRl4223MCO/EG8hQihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNWViMDZjMTctNmYwNC0z MTM1LWJjNjktZTk5MGFiOWI2NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC12rPjaHf2drvbUO7NmOM//K9ZZaEdiMvPaYazxwliqx6n81XIcNfZb sxMzjmN2etdamX/xFttuebLOUazZPYgZizeZ+jmT3F6vXrlkhTjRjTCBSWrllvVa X9+2bhCvRKFmiG1qPeOqVJvtI2WrW9CcVG8i4oORGgbolBBKhMAQK7Eb3qP0gvlA IaEZk51d4IKIcuh4NymH+0HczjyS8zkSX24EZv/bR8Zd1M6lrVhlV0h0Nz8RDgGl +pQjsuWmgGMWw9J3l56O8NQau/vUZ/qV73Up1h6ASj+ZJ4lfN5kygac5KRV3H351 YxlFtEprhdG3ilt9tqEYvayDasYSZV0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:51 2025 by rpki-client