$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa File: 2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa (raw, json) Hash identifier: XIvqJoGAiuy6zCtEfDojM2EMzj9Xd75uQsO5cTdR8S4= Subject key identifier: E2:4A:5D:43:6C:5C:04:29:DB:F8:38:F7:7C:DF:E2:8C:96:98:06:02 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E3E5F3E3E91FA0A96485F2200 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 63199 IP address blocks: 148.153.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:3e:3e:91:fa:0a:96:48:5f:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=e8ad18d6-e22e-42aa-86cc-2d36c0e958c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:df:be:9f:5f:23:c1:a3:94:64:14:c1:22:67: 45:e4:c7:32:eb:6d:7c:e9:9f:e5:36:93:67:4f:cb: 65:bb:1b:50:3c:1d:df:78:58:6d:ff:a6:a1:2c:86: 74:41:26:da:44:aa:c1:50:83:25:60:8a:f6:25:68: 1f:75:83:00:05:11:6e:ab:fd:ab:8f:e0:45:a7:74: 3f:6a:7c:4d:c7:1a:9f:c8:3c:78:5c:47:b6:c6:89: 22:0f:82:76:9b:e5:2b:f6:73:a1:e5:43:e9:8d:4c: ac:06:64:8c:0d:4e:85:82:46:bd:d5:ba:14:2f:37: 07:d3:0f:3d:67:91:70:3c:da:51:60:1c:88:41:62: f8:98:19:85:a3:90:cc:64:60:b2:e1:1c:56:42:ed: 5a:09:d7:8c:ee:73:ba:d7:eb:e1:75:56:81:6d:75: d9:18:81:cc:9c:43:63:69:69:a3:11:69:00:0e:41: 26:82:94:41:de:4c:01:8d:bc:de:c2:c5:3c:29:40: 0e:10:d0:c1:23:22:a0:c1:ed:b6:41:f1:c0:ac:0a: d5:0a:c1:f7:05:df:e1:90:7d:fd:4e:aa:84:f5:bc: 49:ee:74:f7:71:e3:1a:d3:03:e1:be:98:c9:8c:d1: ad:a2:11:e4:9b:89:8c:40:7e:98:76:8a:a9:17:0b: 76:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4A:5D:43:6C:5C:04:29:DB:F8:38:F7:7C:DF:E2:8C:96:98:06:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:3f:31:ee:c8:6d:71:8a:ca:64:46:ea:f8:cb:e8:2e:c7:48: 68:5c:d8:66:64:2f:27:ea:c0:f7:06:e5:eb:6c:48:52:39:6b: 02:68:3a:48:47:fb:5d:e4:dc:05:58:ae:30:ef:c9:d4:03:50: 6b:2c:bb:32:16:20:c9:5c:ff:17:a9:2d:53:cd:cd:11:46:ef: 5d:dd:bb:8b:bd:4d:7b:b9:9a:df:ab:d7:32:3b:e1:43:58:3e: 74:82:4c:4c:7d:38:f1:4f:bc:75:b5:1e:27:2c:1b:b2:5a:c3: 7b:87:03:d8:9a:bb:fc:5c:3c:0e:f1:7f:e1:dd:13:95:ad:80: 96:ca:34:59:60:1c:1c:fa:f2:00:b0:ab:6d:41:d5:70:45:cc: bb:88:b1:46:f3:60:7d:c3:92:e0:fc:f3:80:1c:de:b5:ec:4a: 82:c5:f9:8e:c8:6e:a2:20:f2:51:74:34:50:89:4b:37:da:42: 70:a2:48:17:83:3d:99:e8:ba:75:e6:4d:7e:6e:db:c3:17:b1: 15:1a:ac:39:3a:5a:ca:9b:bf:b6:56:f7:58:6e:2e:87:98:26: a4:11:75:98:f7:23:7f:5e:8f:3a:3f:c6:bf:81:d3:a6:32:bd: 07:b0:48:56:2a:dc:2a:b1:64:e4:8f:8a:62:e1:af:5a:23:b3: 1d:f5:17:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xz4+kfoKlkhfIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZThhZDE4ZDYtZTIyZS00MmFhLTg2Y2MtMmQzNmMwZTk1OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9++n18jwaOUZBTBImdF5Mcy62186Z/lNpNn T8tluxtQPB3feFht/6ahLIZ0QSbaRKrBUIMlYIr2JWgfdYMABRFuq/2rj+BFp3Q/ anxNxxqfyDx4XEe2xokiD4J2m+Ur9nOh5UPpjUysBmSMDU6Fgka91boULzcH0w89 Z5FwPNpRYByIQWL4mBmFo5DMZGCy4RxWQu1aCdeM7nO61+vhdVaBbXXZGIHMnENj aWmjEWkADkEmgpRB3kwBjbzewsU8KUAOENDBIyKgwe22QfHArArVCsH3Bd/hkH39 TqqE9bxJ7nT3ceMa0wPhvpjJjNGtohHkm4mMQH6YdoqpFwt2+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJKXUNsXAQp2/g493zf4oyWmAYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmMyMGQyMWItOGEwZS0z ZGY0LTkxMTMtYzg2NmY1Yjk4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJm5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABI/Me7IbXGKymRG6vjL6C7HSGhc2GZkLyfqwPcG5etsSFI5awJoOkhH +13k3AVYrjDvydQDUGssuzIWIMlc/xepLVPNzRFG713du4u9TXu5mt+r1zI74UNY PnSCTEx9OPFPvHW1HicsG7Jaw3uHA9iau/xcPA7xf+HdE5WtgJbKNFlgHBz68gCw q21B1XBFzLuIsUbzYH3DkuD884Ac3rXsSoLF+Y7IbqIg8lF0NFCJSzfaQnCiSBeD PZnounXmTX5u28MXsRUarDk6Wsqbv7ZW91huLoeYJqQRdZj3I39ejzo/xr+B06Yy vQewSFYq3CqxZOSPimLhr1ojsx31F7c= -----END CERTIFICATE-----Generated at Tue Jul 21 17:28:26 2026 by rpki-client