$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa File: 0399118c-609b-3b8a-8490-f03a3e398256.roa (raw, json) Hash identifier: 7DHEn24p79ZJEdOsJ8IjX20hU+kxzuTFa2CRAuaUGzQ= Subject key identifier: DD:D6:17:55:C5:D0:8F:DD:32:82:22:9F:8A:FE:94:6F:91:ED:64:5F Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E54B4ABB21573D22884408DA0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 63199 IP address blocks: 148.153.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:ab:b2:15:73:d2:28:84:40:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=30ecc5aa-eb19-45a3-97b1-109be927c02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:ce:aa:aa:07:c8:40:48:d5:d7:c8:da:f2: 7c:4c:a6:ef:85:df:3e:0d:8b:19:90:ee:c9:2f:0e: 18:79:16:b6:8e:21:2c:73:70:1a:4f:38:4f:b2:44: f0:a7:a1:26:92:ca:83:7b:0a:70:28:64:e4:c5:da: 28:d0:e2:84:23:9a:3c:8e:77:5d:49:41:76:d0:e8: ba:de:d9:81:44:f9:68:91:85:ac:1c:b0:22:fc:f0: 0b:fe:0f:e3:60:35:67:7d:7e:8d:b4:7b:90:7a:4a: ae:3d:97:56:9b:03:0a:5f:4c:2e:28:f1:02:fd:11: 65:9c:8c:29:41:e4:34:82:3c:a1:09:94:fe:18:a1: f5:46:ff:27:0c:84:7d:ee:87:4e:34:8a:16:53:06: a0:6b:1c:ce:83:6b:89:e5:2d:09:27:95:a4:8d:d8: 39:15:ea:e5:9e:15:7c:e8:63:aa:9c:aa:eb:87:99: 0d:02:36:71:89:b4:b2:4a:86:67:eb:cc:e5:16:ec: db:36:a9:be:8b:8e:04:24:4d:e2:69:75:39:83:f5: 11:50:e0:1e:30:6e:33:64:4c:0e:4c:7c:f9:47:62: 17:4d:45:25:93:db:1a:66:e2:44:be:87:a0:41:58: c1:31:78:5a:2a:5c:24:5e:07:ed:64:87:ca:85:f1: 72:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D6:17:55:C5:D0:8F:DD:32:82:22:9F:8A:FE:94:6F:91:ED:64:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a0:d8:f4:10:1f:a9:d3:55:32:48:6b:23:69:00:23:38:cb: 32:ae:b2:e2:7f:ec:1f:6d:7d:56:91:0c:34:5b:71:f5:54:b6: 9b:6d:bc:79:16:8e:58:18:55:db:2e:0f:1a:e4:4a:d0:0e:55: 82:b7:57:5a:59:f4:68:d9:42:7f:cc:5f:32:5b:4f:60:80:df: 19:7e:f7:a7:ca:3c:9b:fc:c2:5a:1d:df:60:ae:c5:52:7d:c8: 7f:6b:ef:f5:7e:05:a9:cc:75:91:cd:6e:5e:02:93:ee:6a:5d: 46:06:47:12:46:71:95:fb:32:70:84:2f:b9:dc:c2:57:22:4c: 38:70:42:af:59:e1:da:c7:53:ef:05:25:20:6d:18:b5:f3:80: 26:92:bd:64:a7:ec:35:35:58:50:1f:f4:50:15:59:6a:f0:4e: 82:dc:88:0b:35:fb:2d:85:28:84:70:2a:cc:b3:f0:4e:0b:c7: 17:4e:df:7f:55:69:9f:73:24:49:fb:8b:1d:a2:7c:74:bc:2c: c2:c9:5f:26:d0:b6:a8:da:47:57:56:79:7c:ff:1d:08:0b:45: 2b:1e:80:28:0c:a7:13:e8:c2:c3:3f:68:52:7c:97:fa:c8:7f: 3b:b3:e2:37:7e:08:5b:9f:07:bf:76:b6:c8:7b:7e:48:21:af: 2f:e2:9c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtKuyFXPSKIRAjaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk MzBlY2M1YWEtZWIxOS00NWEzLTk3YjEtMTA5YmU5MjdjMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBbOqqoHyEBI1dfI2vJ8TKbvhd8+DYsZkO7J Lw4YeRa2jiEsc3AaTzhPskTwp6EmksqDewpwKGTkxdoo0OKEI5o8jnddSUF20Oi6 3tmBRPlokYWsHLAi/PAL/g/jYDVnfX6NtHuQekquPZdWmwMKX0wuKPEC/RFlnIwp QeQ0gjyhCZT+GKH1Rv8nDIR97odONIoWUwagaxzOg2uJ5S0JJ5Wkjdg5FerlnhV8 6GOqnKrrh5kNAjZxibSySoZn68zlFuzbNqm+i44EJE3iaXU5g/URUOAeMG4zZEwO THz5R2IXTUUlk9saZuJEvoegQVjBMXhaKlwkXgftZIfKhfFyOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3WF1XF0I/dMoIin4r+lG+R7WRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDM5OTExOGMtNjA5Yi0z YjhhLTg0OTAtZjAzYTNlMzk4MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqg2PQQH6nTVTJIayNpACM4yzKusuJ/7B9tfVaRDDRbcfVUtpttvHkW jlgYVdsuDxrkStAOVYK3V1pZ9GjZQn/MXzJbT2CA3xl+96fKPJv8wlod32CuxVJ9 yH9r7/V+BanMdZHNbl4Ck+5qXUYGRxJGcZX7MnCEL7ncwlciTDhwQq9Z4drHU+8F JSBtGLXzgCaSvWSn7DU1WFAf9FAVWWrwToLciAs1+y2FKIRwKsyz8E4LxxdO339V aZ9zJEn7ix2ifHS8LMLJXybQtqjaR1dWeXz/HQgLRSsegCgMpxPowsM/aFJ8l/rI fzuz4jd+CFufB792tsh7fkghry/inKk= -----END CERTIFICATE-----Generated at Tue Jul 21 17:28:10 2026 by rpki-client