$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa File: dc349e18-8ab9-3cef-be26-6418afc11db3.roa (raw, json) Hash identifier: osq33DZbKApXVaSQQkjGgnoqtLRp7QTdhDWPLXre4zc= Subject key identifier: 37:EE:23:8F:C1:D8:7E:86:5F:2D:61:57:B0:84:14:B0:A6:32:B5:26 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584A549B244424090864345A6880 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 63199 IP address blocks: 148.153.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:24:44:24:09:08:64:34:5a:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=f6787e50-728f-403d-bb9d-9cca4d0c2d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d0:65:99:97:a7:b1:d0:57:8a:10:d4:98:79: 18:d7:c5:b6:7e:2f:83:68:a3:18:da:15:5d:ea:42: bf:f5:0b:62:21:23:1a:4b:02:92:19:26:6e:46:68: 94:6e:91:66:de:49:c8:0f:bf:ef:a4:3e:fb:f6:0a: a9:32:f5:3f:6a:bc:82:48:ac:d3:6c:f6:56:8b:35: 00:46:2e:fa:4d:91:1d:28:c9:b5:e0:fe:8e:9f:67: 13:4c:a0:59:4f:32:6e:3b:89:0f:df:a6:24:9d:ad: e0:3b:cc:b6:0c:1b:ec:88:d6:cc:b2:7e:5e:0b:be: e3:7d:19:e2:a6:38:ee:5b:da:29:d0:df:12:6b:55: 5a:fa:47:1f:9f:8b:cf:9f:86:a3:42:c1:46:92:a8: 6e:2e:5c:a9:95:c3:36:ac:1d:5e:4a:7d:b2:dc:7e: 95:15:0c:92:30:16:90:55:22:33:8b:1c:61:9a:6c: 82:fd:22:71:e6:ac:61:97:60:af:5b:58:d4:10:7d: 90:90:1e:a2:52:a8:41:9e:4e:5b:c0:5c:16:7e:7b: df:aa:6b:f4:22:a0:67:bd:9a:10:23:97:ce:3b:d7: e5:52:b3:2c:78:06:89:84:b6:1d:94:66:7b:7e:2a: 12:9a:aa:fc:66:1d:15:e1:dc:c7:73:c6:fa:c2:ab: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EE:23:8F:C1:D8:7E:86:5F:2D:61:57:B0:84:14:B0:A6:32:B5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/dc349e18-8ab9-3cef-be26-6418afc11db3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ab:dc:b0:0b:ee:44:b2:10:f1:f6:f5:1e:34:3e:0b:77:a7: e6:61:63:eb:bc:f2:ad:6a:45:10:70:8b:da:84:c3:48:8c:3b: c5:7a:37:68:fb:86:62:bd:f8:5a:c5:f3:02:c1:f1:7e:a5:46: 35:55:88:25:61:40:8b:fc:f8:ce:a3:8a:3e:21:68:05:ad:a0: b1:15:b8:1e:63:8e:88:55:45:8e:e6:37:96:fa:2d:de:42:fb: f3:ab:b2:c9:e3:19:b4:a8:ae:31:02:e1:89:6f:42:ca:2f:b8: 07:42:5b:a1:9f:fd:54:d9:4d:85:88:db:f1:46:1d:de:35:e8: 12:de:85:0c:f3:42:cb:9d:bd:a1:38:04:44:0c:9a:bb:1c:4f: 87:43:ed:7f:14:04:26:70:b1:a6:ca:82:54:68:da:8e:7d:f9: 8d:fa:fb:7c:a3:4a:11:e0:da:82:e7:c4:b9:e1:6c:d2:78:8e: b6:ed:74:33:6b:79:03:b3:f5:15:02:55:e6:4c:33:d3:c1:94: db:11:fc:31:bc:08:93:b8:04:1e:87:92:af:f2:e5:a6:d5:ed: ab:27:7e:0c:cd:65:e3:ef:60:cd:be:07:3e:30:44:b4:89:04: db:52:ad:05:42:49:2e:49:c9:ce:88:57:80:1f:ad:5d:a1:17: f6:3d:a7:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmyREJAkIZDRaaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk ZjY3ODdlNTAtNzI4Zi00MDNkLWJiOWQtOWNjYTRkMGMyZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9BlmZensdBXihDUmHkY18W2fi+DaKMY2hVd 6kK/9QtiISMaSwKSGSZuRmiUbpFm3knID7/vpD779gqpMvU/aryCSKzTbPZWizUA Ri76TZEdKMm14P6On2cTTKBZTzJuO4kP36Ykna3gO8y2DBvsiNbMsn5eC77jfRni pjjuW9op0N8Sa1Va+kcfn4vPn4ajQsFGkqhuLlyplcM2rB1eSn2y3H6VFQySMBaQ VSIzixxhmmyC/SJx5qxhl2CvW1jUEH2QkB6iUqhBnk5bwFwWfnvfqmv0IqBnvZoQ I5fOO9flUrMseAaJhLYdlGZ7fioSmqr8Zh0V4dzHc8b6wqthwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfuI4/B2H6GXy1hV7CEFLCmMrUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGMzNDllMTgtOGFiOS0z Y2VmLWJlMjYtNjQxOGFmYzExZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEer3LAL7kSyEPH29R40Pgt3p+ZhY+u88q1qRRBwi9qEw0iMO8V6N2j7 hmK9+FrF8wLB8X6lRjVViCVhQIv8+M6jij4haAWtoLEVuB5jjohVRY7mN5b6Ld5C +/OrssnjGbSorjEC4YlvQsovuAdCW6Gf/VTZTYWI2/FGHd416BLehQzzQsudvaE4 BEQMmrscT4dD7X8UBCZwsabKglRo2o59+Y36+3yjShHg2oLnxLnhbNJ4jrbtdDNr eQOz9RUCVeZMM9PBlNsR/DG8CJO4BB6Hkq/y5abV7asnfgzNZePvYM2+Bz4wRLSJ BNtSrQVCSS5Jyc6IV4AfrV2hF/Y9p6g= -----END CERTIFICATE-----Generated at Mon Jun 30 09:04:31 2025 by rpki-client