$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa File: 5fd740b0-36b5-3924-ab89-baf72be4370e.roa (raw, json) Hash identifier: /4doDgiMVy45uqnU5zRMKKL1DPQFNgXn85ulK3Q2ahg= Subject key identifier: F8:09:B3:72:23:C7:14:42:D4:3C:B8:2F:9C:3F:77:3E:44:9C:99:47 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A549B245FCFC2411F16C42080 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 63199 IP address blocks: 148.153.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:24:5f:cf:c2:41:1f:16:c4:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=160289ec-52cd-4981-a245-52ee893d4a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:f9:82:38:9a:f2:79:3e:04:b8:be:f7:fb: 52:f9:41:62:65:29:c3:68:13:db:ff:22:87:3b:b4: 73:66:d7:69:c6:bb:cc:81:08:2e:a2:ec:ce:f3:f5: 22:40:8e:49:7d:a7:46:ab:75:d7:6c:6d:a2:11:7d: a6:fa:54:fb:fb:52:ec:92:e5:26:41:05:06:50:32: 0b:ff:ef:72:c6:b4:fd:09:fa:d1:01:07:bc:04:c6: 73:cb:38:80:67:f1:cb:7a:c0:dc:1d:3a:2a:92:be: ad:58:f8:61:f2:df:76:42:9c:6e:b1:0b:82:bd:4d: e0:cd:98:20:11:a0:08:1f:70:7e:e0:5b:3c:59:1c: b1:17:2e:e8:99:e5:bb:19:12:ec:72:4c:09:5e:4e: eb:59:e2:f1:6c:50:15:b0:3c:c3:59:47:14:d0:75: a9:17:4c:bb:62:b1:c1:c3:14:ca:0d:d1:51:8a:b1: 92:11:6e:d1:09:a7:99:4e:9c:42:70:69:da:f0:98: 05:e7:0e:be:f9:d7:f0:0b:f6:fa:7b:fb:c3:b9:f9: c6:66:59:e9:47:44:83:8e:ce:4a:7f:68:d1:1e:91: 48:82:67:c4:42:cf:7e:9d:b9:7b:d6:1c:62:e0:ce: 14:70:d3:84:a7:b9:07:89:83:75:83:6b:5e:d1:83: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:09:B3:72:23:C7:14:42:D4:3C:B8:2F:9C:3F:77:3E:44:9C:99:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c1:82:47:3c:b9:ff:fb:4d:78:b5:c5:72:d3:1b:5b:84:92: 6a:df:b6:63:c8:37:5a:a3:e4:3c:ba:cc:ea:96:8a:3b:77:38: 25:db:64:f9:6e:93:4b:16:16:51:39:ca:6d:d5:ac:1b:c7:3b: ca:bd:68:f8:e5:cd:22:85:31:fc:5f:32:5a:05:7b:cd:c7:51: d0:98:b4:5f:03:18:6d:bb:ce:d1:dd:83:3e:e5:77:88:27:f2: 12:ee:71:fe:a5:28:5c:3b:0f:d5:56:18:b9:e5:0b:ff:70:e0: fb:6b:91:f4:1f:aa:30:be:78:ab:c7:3b:f7:19:76:03:e5:f6: 5d:59:56:db:5d:fd:6e:c3:8c:ee:19:88:21:8f:73:a7:b2:20: 99:00:e8:a2:aa:36:19:1c:08:df:bf:c3:30:1d:c4:2d:97:4a: 9d:34:ab:fc:72:72:59:6a:ae:d0:b6:d8:06:e2:75:30:80:4b: 63:15:75:d6:62:75:15:85:99:90:de:eb:a0:2a:42:0e:eb:53: 58:ed:f4:60:59:cd:db:ef:14:b8:4c:56:34:77:02:d4:98:32: 7c:56:03:1a:c7:1d:b1:ab:c0:b1:b9:d9:f6:4a:e1:b8:36:05: 08:4a:c8:2c:88:a0:06:29:d4:1c:da:e8:d4:ad:1d:b4:96:6c: 98:ac:80:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyRfz8JBHxbEIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MTYwMjg5ZWMtNTJjZC00OTgxLWEyNDUtNTJlZTg5M2Q0YTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3n5gjia8nk+BLi+9/tS+UFiZSnDaBPb/yKH O7RzZtdpxrvMgQguouzO8/UiQI5JfadGq3XXbG2iEX2m+lT7+1LskuUmQQUGUDIL /+9yxrT9CfrRAQe8BMZzyziAZ/HLesDcHToqkr6tWPhh8t92QpxusQuCvU3gzZgg EaAIH3B+4Fs8WRyxFy7omeW7GRLsckwJXk7rWeLxbFAVsDzDWUcU0HWpF0y7YrHB wxTKDdFRirGSEW7RCaeZTpxCcGna8JgF5w6++dfwC/b6e/vDufnGZlnpR0SDjs5K f2jRHpFIgmfEQs9+nbl71hxi4M4UcNOEp7kHiYN1g2te0YNelwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgJs3IjxxRC1Dy4L5w/dz5EnJlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNWZkNzQwYjAtMzZiNS0z OTI0LWFiODktYmFmNzJiZTQzNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrBgkc8uf/7TXi1xXLTG1uEkmrftmPIN1qj5Dy6zOqWijt3OCXbZPlu k0sWFlE5ym3VrBvHO8q9aPjlzSKFMfxfMloFe83HUdCYtF8DGG27ztHdgz7ld4gn 8hLucf6lKFw7D9VWGLnlC/9w4PtrkfQfqjC+eKvHO/cZdgPl9l1ZVttd/W7DjO4Z iCGPc6eyIJkA6KKqNhkcCN+/wzAdxC2XSp00q/xycllqrtC22AbidTCAS2MVddZi dRWFmZDe66AqQg7rU1jt9GBZzdvvFLhMVjR3AtSYMnxWAxrHHbGrwLG52fZK4bg2 BQhKyCyIoAYp1Bza6NStHbSWbJisgFE= -----END CERTIFICATE-----Generated at Mon Jun 30 03:19:56 2025 by rpki-client