$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa File: 700e458d-b871-3d96-a213-ce09bd907b87.roa (raw, json) Hash identifier: 0OZfvZbL3RJqd6wJb5CKsfQUFm9QRp4xRo1McQ5tbJ8= Subject key identifier: CC:48:DD:28:30:E9:D6:95:B1:8A:AE:62:06:71:29:F3:88:BC:3D:52 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A549B241478B1BBC469F3CF80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 63199 IP address blocks: 148.153.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:24:14:78:b1:bb:c4:69:f3:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=04c0c1f2-e3a5-4453-b289-07b3c2fd026e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:41:fa:95:b3:07:84:2d:05:15:ec:1d:cb:95: 4a:14:9b:27:9f:d4:58:87:18:7b:f9:ee:73:9f:a2: e9:00:79:42:ea:1e:ba:c4:9c:65:37:a6:19:8a:f9: c4:5c:40:db:c3:a9:e6:12:05:96:69:f5:8d:3f:3a: 60:bc:d3:ea:af:61:95:c2:41:6b:f5:8c:34:84:1d: a2:6d:55:33:54:c9:98:29:d5:bd:61:60:e8:9c:ba: 95:a5:ea:4d:c2:eb:86:9f:f4:e1:35:5a:4c:8f:29: 15:59:ff:55:6e:5a:54:b5:2d:72:99:be:2a:db:aa: f4:fd:87:dd:19:67:1f:32:a6:f2:1f:3e:48:45:df: 58:41:ce:69:0f:4a:91:c7:6d:47:45:87:0e:00:a2: c2:d8:bd:8f:59:71:32:5f:ae:9e:20:0a:ee:f1:45: d2:e9:a0:d0:13:52:50:ab:59:ea:e1:b8:61:39:c4: 68:00:07:2f:ba:1c:51:5c:20:9e:cb:3a:d4:94:37: 69:b4:c2:76:14:e8:1c:43:59:52:68:60:a5:a2:e8: 62:38:86:a5:a1:f0:14:e3:7f:0d:0f:f1:bb:17:d2: cd:51:6e:e1:21:0d:fe:b0:b7:f4:84:7b:34:4b:63: 46:50:83:f7:71:fc:67:43:e6:c3:f0:5e:fc:9b:43: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:48:DD:28:30:E9:D6:95:B1:8A:AE:62:06:71:29:F3:88:BC:3D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/700e458d-b871-3d96-a213-ce09bd907b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:86:d2:de:70:29:a8:42:a6:cc:75:e7:5c:6f:8f:8c:65:95: e4:bc:bc:c9:a3:19:c3:9b:65:1a:15:4a:ab:e7:7e:27:7f:5f: 23:96:aa:38:b3:57:57:17:59:b7:a6:c5:ee:93:50:3d:a2:0e: 6e:8d:82:80:46:3d:82:77:6f:bb:30:14:dc:d6:ba:8d:6b:98: c3:2f:f6:d2:2f:bf:56:e3:77:b2:16:0f:9e:4d:2b:2c:61:f5: 4b:d0:bb:77:af:84:79:d9:0e:8e:ef:36:d9:65:cb:f7:c9:7a: 02:1b:fe:0a:db:81:7f:bd:31:ca:7f:5e:0d:fb:da:0e:b7:45: 30:b8:cc:f6:8f:0a:ee:f3:da:dc:46:f3:bc:32:b4:42:7e:e6: 48:72:14:b8:fd:c9:e0:7e:9a:7e:bc:ce:82:81:6c:e7:8e:95: c4:df:c4:ae:49:0a:47:7f:6e:17:87:7b:ec:e8:cb:e9:30:81: 0f:68:d2:f7:39:75:ac:07:bc:1f:16:8b:b3:c3:3e:10:fc:b7: 2f:f6:a5:36:79:49:18:ea:5f:4d:70:f5:b8:03:28:1b:52:0f: 3a:9b:cd:d2:6a:d9:c9:64:cb:e4:0e:30:24:4d:95:8f:fb:59: 39:68:7a:48:dd:62:28:db:17:2b:0a:50:6c:47:f5:0f:76:08: e2:bf:4c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyQUeLG7xGnzz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MDRjMGMxZjItZTNhNS00NDUzLWIyODktMDdiM2MyZmQwMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEH6lbMHhC0FFewdy5VKFJsnn9RYhxh7+e5z n6LpAHlC6h66xJxlN6YZivnEXEDbw6nmEgWWafWNPzpgvNPqr2GVwkFr9Yw0hB2i bVUzVMmYKdW9YWDonLqVpepNwuuGn/ThNVpMjykVWf9VblpUtS1ymb4q26r0/Yfd GWcfMqbyHz5IRd9YQc5pD0qRx21HRYcOAKLC2L2PWXEyX66eIAru8UXS6aDQE1JQ q1nq4bhhOcRoAAcvuhxRXCCeyzrUlDdptMJ2FOgcQ1lSaGClouhiOIalofAU438N D/G7F9LNUW7hIQ3+sLf0hHs0S2NGUIP3cfxnQ+bD8F78m0P/DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxI3Sgw6daVsYquYgZxKfOIvD1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzAwZTQ1OGQtYjg3MS0z ZDk2LWEyMTMtY2UwOWJkOTA3Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqG0t5wKahCpsx151xvj4xlleS8vMmjGcObZRoVSqvnfid/XyOWqjiz V1cXWbemxe6TUD2iDm6NgoBGPYJ3b7swFNzWuo1rmMMv9tIvv1bjd7IWD55NKyxh 9UvQu3evhHnZDo7vNtlly/fJegIb/grbgX+9Mcp/Xg372g63RTC4zPaPCu7z2txG 87wytEJ+5khyFLj9yeB+mn68zoKBbOeOlcTfxK5JCkd/bheHe+zoy+kwgQ9o0vc5 dawHvB8Wi7PDPhD8ty/2pTZ5SRjqX01w9bgDKBtSDzqbzdJq2clky+QOMCRNlY/7 WTloekjdYijbFysKUGxH9Q92COK/TNo= -----END CERTIFICATE-----Generated at Mon Jun 30 08:30:45 2025 by rpki-client