$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa File: 243aaf43-c9df-3a08-b963-f0e358be1f43.roa (raw, json) Hash identifier: KJD7fazd84AKSZ4p27M2OB6/98Qi9oowiWcMOUxnvdU= Subject key identifier: 0A:6E:33:87:81:F0:D8:A3:06:47:10:C5:96:D2:11:76:AC:15:4E:EC Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E7204D412D6382F03CC0A2FB0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 63199 IP address blocks: 148.153.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d4:12:d6:38:2f:03:cc:0a:2f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=4fa78124-d16a-4def-b96e-81b4c704c482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:48:13:e1:6c:55:45:fc:c5:d8:b6:3c:af: 8f:85:88:b5:be:31:e4:7d:50:59:d2:e7:af:87:74: ed:9a:f3:57:7a:42:6c:7b:f2:8f:72:f0:18:d0:2a: cd:70:f9:d6:77:77:56:e5:fb:9f:13:5c:4b:8b:17: c7:33:00:1c:a8:c7:d4:0a:c7:20:8c:d2:1b:ab:eb: 6d:a8:91:a2:ff:4a:5e:ea:f9:d2:3c:72:ab:ea:44: e5:c4:e9:2d:28:bf:43:f1:31:27:23:4c:88:aa:7e: f4:60:20:9a:09:24:c6:2d:ba:65:1d:ef:3d:e9:79: 3d:94:c5:b3:6e:13:75:8c:76:5c:d3:13:5c:cf:5f: 3f:fc:b5:05:20:ad:de:e2:48:75:91:db:5e:2f:fa: db:d9:9f:40:0a:11:4d:d1:58:6e:3f:b0:71:0d:85: bc:c5:eb:e0:6c:47:d3:fe:89:32:bc:eb:c2:b4:76: f4:9a:a4:39:61:f3:bd:ef:8e:bb:3c:94:f0:88:b6: 67:6d:c1:07:2b:b1:b0:15:f3:d0:83:27:00:c4:16: 36:ed:cf:c3:17:e7:19:38:ba:2f:0d:a2:16:70:36: 80:05:33:1e:92:1a:9d:b8:74:9a:71:d6:c8:f5:d9: 75:92:96:9e:eb:1c:e6:28:f9:82:d6:a0:95:19:ae: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6E:33:87:81:F0:D8:A3:06:47:10:C5:96:D2:11:76:AC:15:4E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:85:cb:f0:e1:9a:08:44:a5:d1:e9:70:2f:45:35:38:fc:9a: 89:66:71:da:77:fb:2c:2f:ba:e9:72:4f:9c:00:0b:48:9f:09: 63:ef:ee:8d:d1:2a:cc:87:47:3d:22:db:a4:d0:80:f2:72:d2: 03:7b:f2:32:33:76:cd:e0:31:a8:98:33:1e:44:02:c9:9e:61: 25:73:8d:9e:91:cd:3d:c2:96:3d:17:01:64:92:48:1d:bc:89: 6f:d3:88:c4:30:6c:4b:b6:ea:76:17:4b:8c:ae:20:ec:c6:0d: 8c:be:70:11:44:23:8f:d3:0b:e7:bf:0b:11:57:b2:38:cc:44: f8:68:b9:91:6e:73:f0:27:0f:23:95:c4:17:4a:77:80:9d:ce: 6b:59:80:f0:15:ed:cb:29:eb:f3:e4:ea:0d:7a:d9:59:a5:4e: 60:50:5f:5d:a4:11:d0:92:13:ff:2b:33:00:06:5e:63:17:b9: 7e:22:45:37:6b:9b:a9:93:b1:bf:17:48:35:6b:08:c3:26:83: 93:58:2e:a6:87:63:81:fb:59:7f:8d:ed:23:8f:0d:0b:4b:ea: 28:09:cc:62:e7:75:15:84:7c:89:ad:e4:7e:6a:fd:3b:10:53: a6:af:13:88:40:00:8c:8b:59:c9:66:06:a1:16:79:e8:5b:c9: c6:22:53:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNQS1jgvA8wKL7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk NGZhNzgxMjQtZDE2YS00ZGVmLWI5NmUtODFiNGM3MDRjNDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot1IE+FsVUX8xdi2PK+PhYi1vjHkfVBZ0uev h3TtmvNXekJse/KPcvAY0CrNcPnWd3dW5fufE1xLixfHMwAcqMfUCscgjNIbq+tt qJGi/0pe6vnSPHKr6kTlxOktKL9D8TEnI0yIqn70YCCaCSTGLbplHe896Xk9lMWz bhN1jHZc0xNcz18//LUFIK3e4kh1kdteL/rb2Z9AChFN0VhuP7BxDYW8xevgbEfT /okyvOvCtHb0mqQ5YfO97467PJTwiLZnbcEHK7GwFfPQgycAxBY27c/DF+cZOLov DaIWcDaABTMekhqduHSacdbI9dl1kpae6xzmKPmC1qCVGa77iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApuM4eB8NijBkcQxZbSEXasFU7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjQzYWFmNDMtYzlkZi0z YTA4LWI5NjMtZjBlMzU4YmUxZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqFy/DhmghEpdHpcC9FNTj8molmcdp3+ywvuulyT5wAC0ifCWPv7o3R KsyHRz0i26TQgPJy0gN78jIzds3gMaiYMx5EAsmeYSVzjZ6RzT3Clj0XAWSSSB28 iW/TiMQwbEu26nYXS4yuIOzGDYy+cBFEI4/TC+e/CxFXsjjMRPhouZFuc/AnDyOV xBdKd4CdzmtZgPAV7csp6/Pk6g162VmlTmBQX12kEdCSE/8rMwAGXmMXuX4iRTdr m6mTsb8XSDVrCMMmg5NYLqaHY4H7WX+N7SOPDQtL6igJzGLndRWEfImt5H5q/TsQ U6avE4hAAIyLWclmBqEWeehbycYiUzE= -----END CERTIFICATE-----Generated at Tue Jul 21 17:28:13 2026 by rpki-client