$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa File: 7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa (raw, json) Hash identifier: DngZNny5DjPaMpW/ZVBapAge4g85BI5uPcu5PQW5sRc= Subject key identifier: 82:1A:B8:5E:98:55:31:E4:3E:19:22:E6:1D:41:6C:FF:33:80:24:E1 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584B821CD5B497A64176A4E18300 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 63199 IP address blocks: 148.153.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d5:b4:97:a6:41:76:a4:e1:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=b0e9cebf-5e49-4557-8966-968f129ba457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:7f:fc:e3:37:da:fc:ca:f8:92:29:1e:72: 70:7c:11:7f:1e:9d:63:9a:5f:8c:2d:f9:b5:c0:3d: 1c:aa:4b:73:c4:0f:2d:e5:bc:30:95:cc:94:49:33: cd:89:26:7e:cc:4f:8d:1e:a7:47:f5:fb:77:5a:56: cf:7d:e7:bc:56:50:28:90:66:4c:ca:ac:e5:02:b3: de:10:2e:a3:16:9a:25:3d:c1:16:a5:5f:31:1e:d0: 0b:a5:9b:a5:34:ae:5d:09:5b:c0:cd:bb:60:69:5e: d0:46:27:c0:ac:72:91:a5:0b:06:19:a3:13:e7:49: 0e:86:bd:e0:8d:17:07:9d:5a:7b:70:72:be:33:06: 16:bc:2c:d3:66:b1:16:ff:3c:43:5e:d7:3c:cc:02: 09:c6:06:46:9e:49:3f:06:8c:59:7a:05:89:be:45: db:2f:47:b2:8d:83:f8:50:32:d2:76:ad:11:b0:75: 24:6a:1f:9a:b4:5a:cb:31:65:3f:7a:24:a4:cb:cf: 68:3b:7a:a8:6b:bf:20:3c:6c:1f:62:8e:f9:4f:58: 87:b2:e0:67:1f:db:b1:1a:69:72:dc:50:3c:ac:d5: fa:b0:11:c5:08:4c:43:74:34:45:b9:bb:d1:3b:7e: 54:44:18:7e:4e:5c:80:83:eb:7c:b6:78:b0:6f:90: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1A:B8:5E:98:55:31:E4:3E:19:22:E6:1D:41:6C:FF:33:80:24:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:21:c2:ec:d6:5a:3e:e5:c1:5e:52:2e:ff:6c:63:cf:5b:8d: 6b:06:26:04:9e:4d:f2:dc:ef:17:c4:d4:b1:49:03:a2:1c:e9: 8f:46:1d:8e:f0:f6:17:51:7d:9d:ac:73:d6:e5:7d:f9:18:de: cb:21:1b:e2:ad:26:33:0e:a7:00:91:15:9a:6b:f4:dd:7a:e8: 8b:7f:fe:58:27:dd:34:38:8f:b9:c1:96:20:a8:dd:3e:50:07: 16:8a:6b:bd:ab:89:80:fd:28:08:39:2f:a1:04:b8:05:7b:d2: 1e:80:cd:35:90:c8:d5:c2:c0:83:59:d5:df:52:4b:24:38:7a: 8d:3a:f5:a8:77:f4:f2:99:fc:d9:93:93:0b:37:04:9d:d1:b3: 19:83:ca:f9:8a:78:80:a1:be:10:76:60:79:81:c1:25:3c:d3: fa:1b:b4:13:72:83:2b:ab:8e:30:91:e2:62:ff:0b:b3:16:8d: 1f:a8:8f:35:b6:e3:76:df:e4:4b:ba:a7:c0:48:90:cf:04:27: d3:cc:37:78:89:12:3c:b8:0f:1b:e6:ed:6f:43:fe:f0:20:e9: 02:1f:be:c3:c1:bc:bd:46:f3:21:11:21:cc:36:1e:fc:92:10: e9:96:da:47:65:b7:98:5e:7f:8b:ca:f2:70:19:3e:24:42:9d: 00:42:d5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNW0l6ZBdqThgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YjBlOWNlYmYtNWU0OS00NTU3LTg5NjYtOTY4ZjEyOWJhNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP9//OM32vzK+JIpHnJwfBF/Hp1jml+MLfm1 wD0cqktzxA8t5bwwlcyUSTPNiSZ+zE+NHqdH9ft3WlbPfee8VlAokGZMyqzlArPe EC6jFpolPcEWpV8xHtALpZulNK5dCVvAzbtgaV7QRifArHKRpQsGGaMT50kOhr3g jRcHnVp7cHK+MwYWvCzTZrEW/zxDXtc8zAIJxgZGnkk/BoxZegWJvkXbL0eyjYP4 UDLSdq0RsHUkah+atFrLMWU/eiSky89oO3qoa78gPGwfYo75T1iHsuBnH9uxGmly 3FA8rNX6sBHFCExDdDRFubvRO35URBh+TlyAg+t8tniwb5D7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIauF6YVTHkPhki5h1BbP8zgCThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzE1M2EyYjYtM2ZiOS0z ZDA3LWE4NzItZDljZTM5MmZhNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAghwuzWWj7lwV5SLv9sY89bjWsGJgSeTfLc7xfE1LFJA6Ic6Y9GHY7w 9hdRfZ2sc9blffkY3sshG+KtJjMOpwCRFZpr9N166It//lgn3TQ4j7nBliCo3T5Q BxaKa72riYD9KAg5L6EEuAV70h6AzTWQyNXCwINZ1d9SSyQ4eo069ah39PKZ/NmT kws3BJ3RsxmDyvmKeIChvhB2YHmBwSU80/obtBNygyurjjCR4mL/C7MWjR+ojzW2 43bf5Eu6p8BIkM8EJ9PMN3iJEjy4Dxvm7W9D/vAg6QIfvsPBvL1G8yERIcw2HvyS EOmW2kdlt5hef4vK8nAZPiRCnQBC1eI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:37 2025 by rpki-client