$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa File: c0d325d4-637f-36da-a8b1-3933c07dd546.roa (raw, json) Hash identifier: TZr8x467obGMgFlwd2SXpd672kO37Pg9b3yyIR29J3I= Subject key identifier: C5:6B:39:19:E1:89:28:56:6F:70:1C:A4:56:36:0D:16:71:9E:E1:0E Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A3B7AF67C058BF6333A00D840 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 63199 IP address blocks: 148.153.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f6:7c:05:8b:f6:33:3a:00:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=75596849-e560-4199-926a-1a9f29163b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e5:b4:4c:be:f0:3f:3f:0c:e5:65:46:9f:f0: 60:24:b1:49:7c:01:74:b9:db:5b:59:69:a0:49:d0: 21:64:be:66:a0:b1:8d:b1:94:b2:39:27:1f:c7:65: d3:48:3b:3a:f3:ed:65:37:59:9b:d5:4c:4c:42:ad: 0b:5a:d0:8e:73:24:88:44:ee:d0:76:97:af:59:34: 32:f0:bf:04:e6:34:61:73:3e:b9:6a:2e:ea:0f:f6: cf:77:fe:e0:41:d6:55:21:01:31:14:bc:6f:fa:e8: 0e:23:23:03:3f:55:4b:57:8a:28:c7:ea:84:a8:92: 2a:50:c7:c5:fa:e4:30:92:3f:5b:7b:a1:79:9b:d7: 03:9f:fd:9c:8f:00:8a:f1:91:57:ee:d9:cf:52:a0: 07:e9:84:66:b2:62:7b:ac:06:71:f2:24:62:94:15: 0e:28:6c:e2:bb:69:41:77:b2:f3:e7:34:a8:32:2b: 4f:12:aa:54:d0:29:07:1e:1f:68:d0:22:c9:86:34: 02:27:c7:52:89:9e:96:d9:61:4e:14:b4:d6:3d:ab: 69:11:5a:21:83:04:a4:d7:2e:b8:66:01:32:7f:2d: cf:83:c7:54:a0:20:18:15:ee:ed:f4:32:d2:53:ae: af:ea:40:24:a5:0c:37:6d:3c:6f:a1:5a:ab:5e:b2: 90:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6B:39:19:E1:89:28:56:6F:70:1C:A4:56:36:0D:16:71:9E:E1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:3a:64:09:ac:19:f8:ac:a9:89:4f:ab:e3:e8:6a:5f:17:b5: 30:6f:6d:17:2b:e5:de:89:e5:9e:8c:b3:7a:13:ae:ce:5f:e5: 69:2a:67:1d:7f:ff:47:6d:e1:7a:d7:c3:e8:29:77:c8:12:37: f7:c2:0f:1d:32:ba:2d:73:b0:5a:8c:6e:b7:23:a3:d0:4a:84: 3e:9b:ac:bd:3b:c9:05:3b:3f:c3:70:6d:af:65:b4:a4:63:03: e0:05:fb:8b:12:34:22:7f:33:29:aa:f5:70:56:3d:bf:32:54: 37:18:98:2e:b7:6e:aa:53:9f:e5:e4:1f:75:2c:1c:ce:45:b7: 02:92:14:d7:3a:0d:a7:a6:4e:50:a4:77:e6:04:29:6f:03:eb: 10:02:97:be:00:17:33:54:d9:b8:80:bb:f3:80:4c:b6:60:60: 9d:68:d2:e1:b5:7e:74:2c:83:ca:08:63:ff:ec:5d:1e:84:01: 48:5d:b5:63:30:91:00:93:bb:9e:35:63:e2:e1:f4:58:1c:f7: 0d:ff:4c:66:5a:5f:08:dc:f8:b0:c7:b6:51:09:f1:d1:3c:78: 5b:25:21:f1:bd:9a:1e:cf:24:74:91:73:79:cf:81:72:d2:db: 2d:78:7e:10:f2:23:cb:d5:01:f5:26:6e:33:15:3a:ca:1d:49: ab:d8:9b:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evZ8BYv2MzoA2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NzU1OTY4NDktZTU2MC00MTk5LTkyNmEtMWE5ZjI5MTYzYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+W0TL7wPz8M5WVGn/BgJLFJfAF0udtbWWmg SdAhZL5moLGNsZSyOScfx2XTSDs68+1lN1mb1UxMQq0LWtCOcySIRO7QdpevWTQy 8L8E5jRhcz65ai7qD/bPd/7gQdZVIQExFLxv+ugOIyMDP1VLV4oox+qEqJIqUMfF +uQwkj9be6F5m9cDn/2cjwCK8ZFX7tnPUqAH6YRmsmJ7rAZx8iRilBUOKGziu2lB d7Lz5zSoMitPEqpU0CkHHh9o0CLJhjQCJ8dSiZ6W2WFOFLTWPatpEVohgwSk1y64 ZgEyfy3Pg8dUoCAYFe7t9DLSU66v6kAkpQw3bTxvoVqrXrKQsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVrORnhiShWb3AcpFY2DRZxnuEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzBkMzI1ZDQtNjM3Zi0z NmRhLWE4YjEtMzkzM2MwN2RkNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU6ZAmsGfisqYlPq+Poal8XtTBvbRcr5d6J5Z6Ms3oTrs5f5WkqZx1/ /0dt4XrXw+gpd8gSN/fCDx0yui1zsFqMbrcjo9BKhD6brL07yQU7P8Nwba9ltKRj A+AF+4sSNCJ/Mymq9XBWPb8yVDcYmC63bqpTn+XkH3UsHM5FtwKSFNc6DaemTlCk d+YEKW8D6xACl74AFzNU2biAu/OATLZgYJ1o0uG1fnQsg8oIY//sXR6EAUhdtWMw kQCTu541Y+Lh9Fgc9w3/TGZaXwjc+LDHtlEJ8dE8eFslIfG9mh7PJHSRc3nPgXLS 2y14fhDyI8vVAfUmbjMVOsodSavYm8M= -----END CERTIFICATE-----Generated at Mon Jun 30 08:16:57 2025 by rpki-client