$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa File: 2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa (raw, json) Hash identifier: IKHRJaWgzqEsE/PfEGTJ98LQo4rA7qHgMdRGNse8KtY= Subject key identifier: 8E:E7:90:FD:C8:B1:A4:E2:33:CB:DF:8A:C1:A2:F2:65:20:C6:87:0C Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E6144B1CED521BB9C1FCD1880 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 63199 IP address blocks: 148.153.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:b1:ce:d5:21:bb:9c:1f:cd:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=d0c63429-334b-46b0-b8d4-79c3dfcedf18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ca:31:aa:d8:45:0d:e2:eb:ad:ea:e2:a6:9b: 20:bb:fe:49:42:57:1b:b9:96:84:34:b8:98:16:31: 30:ba:bc:2a:f9:ba:0a:a7:fd:b9:d7:59:cc:5c:11: 95:ed:16:b5:c6:e8:e1:db:8d:82:79:28:3c:60:2f: a6:1e:e2:29:3b:f3:a1:88:9a:c9:66:43:30:99:3e: b4:11:73:45:92:66:66:68:ac:62:36:a1:da:15:b2: a2:27:66:19:2f:1f:2d:60:63:9e:72:4c:7e:4f:f6: 52:6b:98:18:23:0b:1e:16:e7:15:76:ff:f6:0e:27: 1a:f2:d9:64:83:43:7f:e8:28:06:f5:13:b0:c4:d5: 0b:de:e2:bd:70:f2:e2:86:b3:b3:c0:ff:ef:d0:53: b5:4d:32:88:19:b2:47:a1:9a:e4:13:f4:00:51:52: 30:f1:0b:64:c8:d3:90:1b:0c:bd:41:2a:76:ca:f9: 61:2f:2d:f3:ac:e3:0e:28:b7:e0:a8:08:f5:69:16: 00:34:0f:4a:d4:d7:97:ca:42:98:7f:bd:ce:c2:9d: af:ab:87:cb:2c:48:98:5b:b1:0f:45:a2:bf:8f:63: 59:66:96:9d:46:36:03:37:38:70:e9:47:dd:49:0a: bc:d8:5a:56:ca:9c:1e:9b:c6:10:aa:dc:3e:15:21: 9d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:90:FD:C8:B1:A4:E2:33:CB:DF:8A:C1:A2:F2:65:20:C6:87:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:04:bf:5d:8c:91:d5:27:e3:88:3a:cb:34:02:05:0e:41:da: ac:b6:91:e8:22:1e:28:b1:b5:7e:c4:ea:43:95:fb:b5:3c:83: 09:4e:bd:db:54:77:1c:00:41:24:84:32:b0:0f:06:2e:00:c3: f0:ab:fb:2c:ac:6e:68:78:99:09:b2:7a:33:25:4c:79:fa:16: 5f:7c:f0:f0:9e:c9:97:41:4c:b5:b4:e5:c7:5b:32:63:28:4e: 15:92:96:62:6c:98:02:b6:07:63:5a:a9:9c:91:2b:49:79:a3: 1e:0d:65:0e:eb:d0:7b:13:44:ab:49:b9:8b:7d:43:65:e9:13: f2:ef:c0:43:c1:2f:0b:42:f6:8f:ff:fb:98:c4:86:38:28:b1: d2:d6:aa:51:82:2e:dc:23:ee:c2:51:30:02:92:41:36:68:7c: 17:9b:dc:c0:37:19:eb:4d:08:77:66:a0:c1:1d:21:10:6b:3b: b2:0a:c1:2e:b5:ee:74:2c:53:b4:1a:43:07:a0:62:e2:17:6a: cc:22:ab:22:d5:05:40:85:18:7c:49:0c:f7:8a:2e:9b:aa:8f: a9:f3:c6:15:c5:e1:f3:d1:ba:49:5d:46:48:0c:21:fb:9e:c9: d3:32:d6:b3:27:0e:8f:0a:6e:8a:bc:95:30:2c:c5:54:15:e9: f9:f7:f7:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRLHO1SG7nB/NGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk ZDBjNjM0MjktMzM0Yi00NmIwLWI4ZDQtNzljM2RmY2VkZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcoxqthFDeLrrerippsgu/5JQlcbuZaENLiY FjEwurwq+boKp/2511nMXBGV7Ra1xujh242CeSg8YC+mHuIpO/OhiJrJZkMwmT60 EXNFkmZmaKxiNqHaFbKiJ2YZLx8tYGOeckx+T/ZSa5gYIwseFucVdv/2Dica8tlk g0N/6CgG9ROwxNUL3uK9cPLihrOzwP/v0FO1TTKIGbJHoZrkE/QAUVIw8QtkyNOQ Gwy9QSp2yvlhLy3zrOMOKLfgqAj1aRYANA9K1NeXykKYf73Owp2vq4fLLEiYW7EP RaK/j2NZZpadRjYDNzhw6UfdSQq82FpWypwem8YQqtw+FSGdeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7nkP3IsaTiM8vfisGi8mUgxocMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmZkMzBiNmQtNjJhNi0z NDc2LTk4Y2MtZjE1YTUwYmQ1MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgEv12MkdUn44g6yzQCBQ5B2qy2kegiHiixtX7E6kOV+7U8gwlOvdtU dxwAQSSEMrAPBi4Aw/Cr+yysbmh4mQmyejMlTHn6Fl988PCeyZdBTLW05cdbMmMo ThWSlmJsmAK2B2NaqZyRK0l5ox4NZQ7r0HsTRKtJuYt9Q2XpE/LvwEPBLwtC9o// +5jEhjgosdLWqlGCLtwj7sJRMAKSQTZofBeb3MA3GetNCHdmoMEdIRBrO7IKwS61 7nQsU7QaQwegYuIXaswiqyLVBUCFGHxJDPeKLpuqj6nzxhXF4fPRukldRkgMIfue ydMy1rMnDo8Kboq8lTAsxVQV6fn399I= -----END CERTIFICATE-----Generated at Tue Jul 21 17:28:13 2026 by rpki-client