$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35954a57-a0ff-3d3c-a824-8b5a83e0c7eb.roa File: 35954a57-a0ff-3d3c-a824-8b5a83e0c7eb.roa (raw, json) Hash identifier: tcMy6QpOjjAoUe6okvmrfknEqrXOJBofxbHWJIWVc/8= Subject key identifier: 6F:22:89:BE:3C:BB:06:4A:56:12:68:0B:D7:CF:F5:F3:17:0F:FD:58 Certificate issuer: /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de Certificate serial: 010D0C9F4328584ACE0B9BEB974D12FA1D6C1A00 Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35954a57-a0ff-3d3c-a824-8b5a83e0c7eb.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 36054 IP address blocks: 148.76.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:9b:eb:97:4d:12:fa:1d:6c:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=f64520b4-4685-456e-a593-8b36e6e182da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:59:67:1d:d8:f2:26:e1:b5:6e:d7:92:c6: 2f:45:fe:ba:6e:26:5d:d1:22:b7:19:c5:48:3c:28: 3a:54:e7:f1:e4:25:a0:62:c7:e0:94:05:f1:4b:f8: 09:ab:8c:bf:0f:f3:05:fb:79:0c:c7:01:a5:03:f7: 0f:b4:2e:26:91:6c:0c:71:3c:45:73:b8:b0:1d:5a: 42:9c:8e:e2:6b:f8:cc:2d:ac:3e:d1:7d:0b:3f:9f: 40:b7:4b:52:4c:1f:de:5f:04:4f:06:82:b3:a0:c8: 67:bf:1d:20:42:d9:f2:83:bf:87:3b:65:d6:a2:32: 1f:18:aa:0c:67:a2:9a:90:1f:bf:cb:0f:58:65:67: 42:78:1a:f4:c5:b9:cf:cc:b9:45:c4:56:e8:dd:07: 91:15:43:3f:46:a7:dc:96:cb:3d:e0:59:98:b2:61: 31:cf:d3:b7:98:b6:9a:01:2e:e1:88:04:74:b0:8d: 43:21:e3:57:31:aa:fd:26:69:35:db:2b:5e:2c:30: 46:e2:0b:74:ce:03:58:e7:36:31:d3:04:cd:4f:37: 79:eb:5e:83:17:bc:6e:33:91:d2:31:46:00:77:b2: 81:89:7e:38:2e:72:b7:56:e4:20:b4:41:76:f6:52: 09:3d:38:a8:1d:83:43:95:c9:87:b5:c8:f4:1a:a3: 66:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:22:89:BE:3C:BB:06:4A:56:12:68:0B:D7:CF:F5:F3:17:0F:FD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35954a57-a0ff-3d3c-a824-8b5a83e0c7eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl X509v3 Authority Key Identifier: keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer sbgp-ipAddrBlock: critical IPv4: 148.76.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:34:ab:ec:66:bb:37:9b:a0:dd:6a:f8:4f:ec:cf:81:76:84: dc:f7:e5:c4:f7:e9:68:c8:85:5f:a2:7c:2b:9c:44:65:dd:88: b4:a3:20:ea:22:45:b2:4e:6e:10:25:54:22:39:ae:fb:38:b8: d1:16:9d:ae:e1:ba:ca:70:69:1c:ed:d0:72:dd:3a:68:48:97: ef:71:8e:20:35:08:f2:f6:23:fe:ce:0d:60:02:a3:ce:81:08: 67:81:dc:4f:2b:85:00:5b:05:57:28:09:8f:1a:95:19:9f:ac: 25:86:6a:3f:64:dc:e8:3a:aa:aa:cb:e3:4f:63:01:93:a9:6e: 13:eb:37:e5:d6:a8:04:1d:cf:28:01:73:24:b5:c2:02:df:4e: f4:bc:68:37:af:5d:98:1c:6e:71:3e:11:65:ed:5d:05:71:b2: 16:dc:fc:ce:43:3c:47:e3:58:c1:8a:f2:fe:f9:0f:59:3a:c3: 13:50:8e:14:78:61:7f:be:60:5e:11:31:63:cd:8b:03:cf:bf: d8:23:01:96:ce:bd:11:85:7f:08:6e:42:83:60:fc:36:21:d1: 47:17:c5:f2:4b:c1:69:71:2b:53:38:61:9c:82:e0:36:7b:97: 12:f9:08:cd:a1:e4:80:4c:42:38:e4:7d:5f:53:d4:5c:f7:7c: 8c:d3:cf:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5vrl00S+h1sGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU0NTliZTEtZjJjNy00NGEyLWFjNjktMDFkMjM4ZjFi MGRlMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZjY0NTIwYjQtNDY4NS00NTZlLWE1OTMtOGIzNmU2ZTE4MmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU1ZZx3Y8ibhtW7XksYvRf66biZd0SK3GcVI PCg6VOfx5CWgYsfglAXxS/gJq4y/D/MF+3kMxwGlA/cPtC4mkWwMcTxFc7iwHVpC nI7ia/jMLaw+0X0LP59At0tSTB/eXwRPBoKzoMhnvx0gQtnyg7+HO2XWojIfGKoM Z6KakB+/yw9YZWdCeBr0xbnPzLlFxFbo3QeRFUM/Rqfclss94FmYsmExz9O3mLaa AS7hiAR0sI1DIeNXMar9Jmk12yteLDBG4gt0zgNY5zYx0wTNTzd5616DF7xuM5HS MUYAd7KBiX44LnK3VuQgtEF29lIJPTioHYNDlcmHtcj0GqNmXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8iib48uwZKVhJoC9fP9fMXD/1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1 OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQyMzhmMWIwZGUvMzU5NTRhNTctYTBmZi0z ZDNjLWE4MjQtOGI1YTgzZTBjN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU0NTliZTEtZjJjNy00NGEyLWFj NjktMDFkMjM4ZjFiMGRlLzE1NDU5YmUxLWYyYzctNDRhMi1hYzY5LTAxZDIzOGYx YjBkZS5jcmwwHwYDVR0jBBgwFoAUBXpuInCyuuyxWzzTdkAFIVAzxRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTQ1OWJlMS1mMmM3LTQ0YTItYWM2OS0wMWQy MzhmMWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlEyZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc0q+xmuzeboN1q+E/sz4F2hNz35cT36WjIhV+ifCucRGXdiLSjIOoi RbJObhAlVCI5rvs4uNEWna7huspwaRzt0HLdOmhIl+9xjiA1CPL2I/7ODWACo86B CGeB3E8rhQBbBVcoCY8alRmfrCWGaj9k3Og6qqrL409jAZOpbhPrN+XWqAQdzygB cyS1wgLfTvS8aDevXZgcbnE+EWXtXQVxshbc/M5DPEfjWMGK8v75D1k6wxNQjhR4 YX++YF4RMWPNiwPPv9gjAZbOvRGFfwhuQoNg/DYh0UcXxfJLwWlxK1M4YZyC4DZ7 lxL5CM2h5IBMQjjkfV9T1Fz3fIzTzxQ= -----END CERTIFICATE-----Generated at Sun Aug 24 02:52:53 2025 by rpki-client