$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa File: 6367678a-e23c-33d0-8e43-2013d216b88a.roa (raw, json) Hash identifier: ZS59IQbr4OnV5ZX4bOhkzfPMAHQ4xEoGN7QMvVOJ3N0= Subject key identifier: 5D:1D:AB:48:5B:19:43:18:EF:BC:62:90:10:BF:23:3F:F9:2C:EF:9F Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B92DCF19CB2A7E0863D5EDD40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 63199 IP address blocks: 148.153.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f1:9c:b2:a7:e0:86:3d:5e:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=4f2c9334-8831-4944-926b-306e7cb8ee28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:12:34:c0:cb:20:d6:15:09:20:00:dd:b7: b5:2d:31:cf:13:aa:97:28:ec:ba:17:60:4f:a7:2c: 0d:75:2d:e0:e3:50:ce:d9:21:66:8f:bc:4e:8e:6b: 43:70:2f:fa:da:fa:c1:26:07:ab:41:78:e8:11:5d: e6:ce:90:a5:b0:85:0e:23:51:04:58:40:61:0c:31: 16:3c:18:10:e9:7a:81:0d:b1:6a:63:19:b1:b1:92: be:1e:39:75:61:4a:29:88:cf:92:03:cc:63:5c:f9: 2f:32:9a:8a:9e:69:13:93:95:89:4e:be:6b:ff:35: 17:7c:cd:e3:7b:0b:ee:bf:ec:3f:85:af:ca:84:96: 23:8a:cf:1e:98:7a:b9:aa:e6:8f:36:35:37:7c:ec: 6d:e2:58:8a:80:11:a4:0f:ca:ee:75:09:7c:a9:43: 05:90:73:24:50:4e:2e:2c:b9:76:9c:5f:41:c2:8f: 7f:bd:a3:2b:19:2e:90:c7:52:53:c4:78:3d:1c:1a: 98:5c:e5:46:c5:15:d2:94:a3:c1:be:17:b3:5c:ef: 02:2e:52:74:cb:52:5c:e7:19:9f:d2:89:61:d7:a7: 40:0e:38:be:89:0a:6e:e2:05:5d:f9:9b:55:92:fa: 48:8f:37:e4:da:96:48:dc:af:41:e1:df:a9:d9:46: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1D:AB:48:5B:19:43:18:EF:BC:62:90:10:BF:23:3F:F9:2C:EF:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6367678a-e23c-33d0-8e43-2013d216b88a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:0c:93:85:58:47:50:35:8b:55:a6:85:f0:d5:3d:5c:5e:a4: 96:7c:57:1a:42:b8:22:a0:cf:2b:ff:06:a4:a6:c4:c8:b8:71: e0:5f:06:b8:6f:42:fe:8c:95:e7:c7:5b:c1:ed:69:7d:76:f9: af:45:85:7a:31:e9:bf:5b:7c:0a:af:d7:52:64:88:ff:7c:e6: 0a:00:82:9e:10:81:65:fd:a4:3c:de:e7:fd:12:14:64:f0:24: 22:d7:1f:e4:92:62:d6:fe:44:9c:81:41:c7:36:b3:bc:ab:4e: 44:45:4c:0b:c5:65:9e:44:8c:61:03:be:55:d6:9c:1e:1d:62: c4:53:90:7c:0d:87:a1:47:1b:fc:b4:6f:10:32:7f:a3:98:98: 0c:02:11:97:15:14:bf:aa:b9:1d:37:69:cc:c4:4b:db:db:b1: f1:16:ff:70:54:d7:d4:b2:56:bf:cd:60:1b:cc:c7:c8:0b:96: 5a:e4:16:ae:d1:3e:a9:ca:72:76:e4:15:83:4e:ef:b5:09:cf: f4:e8:b8:30:a3:af:b1:37:d7:b3:d5:c9:b1:d8:fb:de:7f:91: 34:7b:dc:01:a3:0e:12:36:59:5f:6c:98:19:32:2d:9e:b4:b3: b1:22:b4:80:27:a7:e5:03:de:df:14:de:40:3b:77:cb:16:69: d3:1d:46:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PGcsqfghj1e3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NGYyYzkzMzQtODgzMS00OTQ0LTkyNmItMzA2ZTdjYjhlZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosESNMDLINYVCSAA3be1LTHPE6qXKOy6F2BP pywNdS3g41DO2SFmj7xOjmtDcC/62vrBJgerQXjoEV3mzpClsIUOI1EEWEBhDDEW PBgQ6XqBDbFqYxmxsZK+Hjl1YUopiM+SA8xjXPkvMpqKnmkTk5WJTr5r/zUXfM3j ewvuv+w/ha/KhJYjis8emHq5quaPNjU3fOxt4liKgBGkD8rudQl8qUMFkHMkUE4u LLl2nF9Bwo9/vaMrGS6Qx1JTxHg9HBqYXOVGxRXSlKPBvhezXO8CLlJ0y1Jc5xmf 0olh16dADji+iQpu4gVd+ZtVkvpIjzfk2pZI3K9B4d+p2UZA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0dq0hbGUMY77xikBC/Iz/5LO+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNjM2NzY3OGEtZTIzYy0z M2QwLThlNDMtMjAxM2QyMTZiODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgMk4VYR1A1i1WmhfDVPVxepJZ8VxpCuCKgzyv/BqSmxMi4ceBfBrhv Qv6MlefHW8HtaX12+a9FhXox6b9bfAqv11JkiP985goAgp4QgWX9pDze5/0SFGTw JCLXH+SSYtb+RJyBQcc2s7yrTkRFTAvFZZ5EjGEDvlXWnB4dYsRTkHwNh6FHG/y0 bxAyf6OYmAwCEZcVFL+quR03aczES9vbsfEW/3BU19SyVr/NYBvMx8gLllrkFq7R PqnKcnbkFYNO77UJz/TouDCjr7E317PVybHY+95/kTR73AGjDhI2WV9smBkyLZ60 s7EitIAnp+UD3t8U3kA7d8sWadMdRmo= -----END CERTIFICATE-----Generated at Mon Oct 20 17:36:15 2025 by rpki-client