$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa File: d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa (raw, json) Hash identifier: EIcYLB31wjz6kLpUqIZu10C4oDvdUMe7bGOQ3qVqxb0= Subject key identifier: 37:B9:86:04:DD:53:57:96:FB:CB:0D:07:A1:F3:97:6C:DC:93:69:72 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584AD23BD132ECFCDB20C4B02C80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 63199 IP address blocks: 148.153.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d1:32:ec:fc:db:20:c4:b0:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=33d7cb4a-efa1-4f4f-adcf-4e5b5468a34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:3d:16:50:41:a8:a6:d4:e0:d8:1a:fb:bb: 71:03:76:2b:4f:9a:93:9d:c7:fe:56:23:04:d6:69: ac:49:5c:89:fd:b5:ec:82:35:03:64:ed:d2:5f:55: 48:06:ab:cf:91:e8:a0:66:25:10:04:2a:ec:ae:96: 82:82:92:ba:3f:af:b9:ed:8e:4c:6b:5d:8e:32:0b: d0:6d:75:3d:3c:75:f8:03:26:6d:c3:61:4d:49:78: d5:73:1e:51:b1:87:a0:36:9e:c1:4e:e6:57:73:04: e1:be:1f:43:bb:35:e6:11:62:78:27:d6:2c:22:c1: 8a:d3:cb:54:e5:44:7a:5a:bb:ca:4e:6f:b6:89:00: 5d:72:59:9b:3c:18:a6:d8:11:7a:b4:66:aa:b1:a9: 93:4d:15:7a:f5:01:cc:36:7f:ae:ae:e9:56:68:88: a8:39:43:fb:30:9d:10:e1:96:57:6f:93:48:7d:b4: 3d:59:f9:77:83:59:12:ef:ce:fe:0a:12:b2:25:9a: 0b:e4:55:92:00:b2:33:d8:80:2c:8c:4d:81:0f:37: b6:96:32:75:eb:f1:0f:68:32:fc:d2:23:ea:43:f9: 0b:6c:ae:33:4f:fa:7b:7c:b3:27:b5:0e:26:c6:e1: be:72:68:1c:9e:b8:a6:5b:24:18:01:1f:54:4c:35: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B9:86:04:DD:53:57:96:FB:CB:0D:07:A1:F3:97:6C:DC:93:69:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:16:48:a6:9d:bc:1b:1c:d0:b2:69:c3:47:85:82:ac:57:2e: 50:e7:c0:19:4f:da:e4:72:b6:3c:95:34:2f:66:d1:f6:93:f3: a5:3e:b3:30:c8:af:b5:7a:a4:6a:a0:37:49:ca:ef:20:9e:04: 3b:02:c6:4b:30:34:3e:be:b2:33:b5:eb:cd:42:1a:d7:dc:97: ee:b5:dc:18:69:e6:0d:d9:9c:6a:32:96:c0:bd:ad:a4:05:e9: c2:36:63:e6:f3:5a:44:96:42:ff:8c:d3:b7:1d:97:a7:1d:d7: 8e:0e:89:95:9d:74:d5:9a:4c:95:e8:30:49:5c:40:e1:fe:9a: 80:60:be:a4:32:1e:03:65:69:c9:3e:07:97:8a:28:11:63:33: aa:e6:e8:d7:ed:2a:0f:df:74:d0:80:47:cc:84:db:27:3a:d8: a5:f9:7d:6f:21:c7:4c:af:52:d0:98:68:fa:ec:d5:bd:44:23: 50:a4:4d:12:fd:8a:46:41:09:5b:86:b1:7f:bb:2c:41:81:2a: db:61:c5:ac:52:b2:6a:aa:18:44:57:38:2c:d6:17:7a:93:ee: c2:78:93:40:21:46:50:64:d1:08:8e:6a:c1:37:6e:ee:d4:9f: c2:42:2a:c9:d6:af:7b:55:36:89:bc:16:e2:bf:8a:0f:67:08: d0:79:a8:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9Ey7PzbIMSwLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MzNkN2NiNGEtZWZhMS00ZjRmLWFkY2YtNGU1YjU0NjhhMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNw9FlBBqKbU4Nga+7txA3YrT5qTncf+ViME 1mmsSVyJ/bXsgjUDZO3SX1VIBqvPkeigZiUQBCrsrpaCgpK6P6+57Y5Ma12OMgvQ bXU9PHX4AyZtw2FNSXjVcx5RsYegNp7BTuZXcwThvh9DuzXmEWJ4J9YsIsGK08tU 5UR6WrvKTm+2iQBdclmbPBim2BF6tGaqsamTTRV69QHMNn+urulWaIioOUP7MJ0Q 4ZZXb5NIfbQ9Wfl3g1kS787+ChKyJZoL5FWSALIz2IAsjE2BDze2ljJ16/EPaDL8 0iPqQ/kLbK4zT/p7fLMntQ4mxuG+cmgcnrimWyQYAR9UTDW5pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe5hgTdU1eW+8sNB6Hzl2zck2lyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZDhjM2I3YzUtZDYyYy0z ODJjLWE4ZTEtYmVlZjI3YjE2NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQWSKadvBsc0LJpw0eFgqxXLlDnwBlP2uRytjyVNC9m0faT86U+szDI r7V6pGqgN0nK7yCeBDsCxkswND6+sjO1681CGtfcl+613Bhp5g3ZnGoylsC9raQF 6cI2Y+bzWkSWQv+M07cdl6cd144OiZWddNWaTJXoMElcQOH+moBgvqQyHgNlack+ B5eKKBFjM6rm6NftKg/fdNCAR8yE2yc62KX5fW8hx0yvUtCYaPrs1b1EI1CkTRL9 ikZBCVuGsX+7LEGBKtthxaxSsmqqGERXOCzWF3qT7sJ4k0AhRlBk0QiOasE3bu7U n8JCKsnWr3tVNom8FuK/ig9nCNB5qLg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:55:49 2025 by rpki-client