$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa File: 7714cc44-3890-3c14-9f5c-e99518c1af61.roa (raw, json) Hash identifier: qgyCI/qz3mTO6HjI4qBAPzEVIYeXuRSfDB2bXv70l68= Subject key identifier: D9:A4:CF:62:EE:3E:62:6D:F4:8D:5A:D1:0A:FF:8E:F7:F7:99:54:5D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A549B24523A86BC976BA7D15C Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 63199 IP address blocks: 148.153.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:24:52:3a:86:bc:97:6b:a7:d1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=7a74621a-580e-4f00-a005-c6d76ace36fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a2:73:82:0c:4f:51:f5:aa:82:d8:c4:33:17: 9c:5a:f7:c4:2e:f7:11:66:18:1f:f3:e9:a8:1d:26: b4:1e:76:ea:d6:60:7c:28:be:23:4c:a1:83:5b:84: 00:28:eb:ac:75:38:55:51:8e:e2:fa:59:f4:bb:d6: 06:dc:0b:9d:e0:db:e2:03:d6:1a:ad:85:ee:a7:d6: 73:96:b0:e9:17:ac:9f:02:84:1d:37:7f:07:5f:9c: eb:00:9e:be:88:f5:12:20:d9:b3:2a:9e:db:6d:a2: 18:26:a2:b0:ca:61:b9:42:fc:fe:01:01:97:0a:df: 81:47:a1:4a:e4:be:1c:7d:37:ab:33:d3:da:5a:74: 29:3e:25:b8:7e:4c:0e:84:e7:62:a6:29:92:c0:65: 6b:c5:fb:77:0b:8c:36:e4:98:de:84:81:93:99:4a: 01:bc:a8:1c:39:f1:56:24:19:50:1d:3f:66:fb:6a: 65:75:8e:97:59:65:aa:28:08:48:b3:09:ac:85:61: 48:ec:ab:02:78:62:36:fd:5f:32:ee:83:90:37:59: 5e:89:10:9f:cc:01:a5:c9:7b:11:09:ee:f0:ed:fd: 01:3d:3c:86:b4:96:be:ae:51:4e:2e:05:de:7f:62: 11:a1:95:11:4a:6c:e3:17:4d:41:5f:41:49:71:67: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A4:CF:62:EE:3E:62:6D:F4:8D:5A:D1:0A:FF:8E:F7:F7:99:54:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7714cc44-3890-3c14-9f5c-e99518c1af61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5d:cd:68:73:69:4a:19:de:35:42:f0:cf:ef:74:ba:56:d4: 5b:38:d2:e6:27:a8:50:ef:4c:3a:42:f1:57:4e:ca:b3:da:84: 75:21:42:ea:cb:b8:7a:06:4c:d5:2e:b9:90:08:e6:31:b2:09: 3c:33:5d:44:de:fa:b3:ee:1a:b1:2d:5c:40:d0:82:f8:2c:a5: 68:ed:45:f8:57:2c:f2:55:b3:ca:5e:2f:a1:29:74:08:e4:12: 4f:ff:63:6d:7e:17:57:24:f2:99:99:5c:c3:95:50:f6:2b:6f: 32:93:27:56:0f:e5:c5:0f:10:1b:18:1c:ea:2b:ed:7f:09:a3: 37:e6:e9:08:11:ab:97:27:4f:7d:51:ca:44:30:1d:f6:04:ca: ff:ce:f7:fd:4b:3b:c0:a6:bf:4c:6a:c9:23:56:d4:01:e8:d9: ee:99:86:53:24:7e:5b:37:29:cc:fe:5f:76:b8:59:5a:e8:35: dd:8d:57:b1:39:d3:56:91:44:cc:1b:b8:5d:7a:5f:fc:59:a3: 2d:60:ab:95:ab:17:8e:42:c3:df:3d:b3:af:42:cb:5f:a0:03: 43:5a:2e:ca:93:0a:ac:2e:a2:27:eb:9c:ce:cd:2a:c9:4c:92: 12:64:92:34:e4:b3:ea:96:dd:32:39:75:3a:5a:14:ee:d9:8a: e3:b2:ab:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyRSOoa8l2un0VwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk N2E3NDYyMWEtNTgwZS00ZjAwLWEwMDUtYzZkNzZhY2UzNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKJzggxPUfWqgtjEMxecWvfELvcRZhgf8+mo HSa0Hnbq1mB8KL4jTKGDW4QAKOusdThVUY7i+ln0u9YG3Aud4NviA9YarYXup9Zz lrDpF6yfAoQdN38HX5zrAJ6+iPUSINmzKp7bbaIYJqKwymG5Qvz+AQGXCt+BR6FK 5L4cfTerM9PaWnQpPiW4fkwOhOdipimSwGVrxft3C4w25JjehIGTmUoBvKgcOfFW JBlQHT9m+2pldY6XWWWqKAhIswmshWFI7KsCeGI2/V8y7oOQN1leiRCfzAGlyXsR Ce7w7f0BPTyGtJa+rlFOLgXef2IRoZURSmzjF01BX0FJcWfgyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmkz2LuPmJt9I1a0Qr/jvf3mVRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzcxNGNjNDQtMzg5MC0z YzE0LTlmNWMtZTk5NTE4YzFhZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVdzWhzaUoZ3jVC8M/vdLpW1Fs40uYnqFDvTDpC8VdOyrPahHUhQurL uHoGTNUuuZAI5jGyCTwzXUTe+rPuGrEtXEDQgvgspWjtRfhXLPJVs8peL6EpdAjk Ek//Y21+F1ck8pmZXMOVUPYrbzKTJ1YP5cUPEBsYHOor7X8Jozfm6QgRq5cnT31R ykQwHfYEyv/O9/1LO8Cmv0xqySNW1AHo2e6ZhlMkfls3Kcz+X3a4WVroNd2NV7E5 01aRRMwbuF16X/xZoy1gq5WrF45Cw989s69Cy1+gA0NaLsqTCqwuoifrnM7NKslM khJkkjTks+qW3TI5dTpaFO7ZiuOyq6Q= -----END CERTIFICATE-----Generated at Mon Jun 30 06:55:28 2025 by rpki-client