$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa File: 33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa (raw, json) Hash identifier: RmyB5z7WBkcqEJ+V4C19qrNkbyqbswj5pS4pAlLvhaI= Subject key identifier: 41:96:E9:52:16:D3:A1:CB:02:4D:CE:DC:A1:DB:C8:64:1B:6C:8C:6C Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E815FC144A6918D3BDB2DE400 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 63199 IP address blocks: 148.153.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:c1:44:a6:91:8d:3b:db:2d:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=401635dd-ef77-43c4-8973-1434f25359ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:d4:de:c4:3a:b0:dc:b1:35:ad:dc:a3:37: c0:a6:f6:c4:28:ef:63:26:8e:53:c7:22:3a:0e:d2: a8:9d:bd:13:7f:f9:b3:ef:fa:e1:c3:56:bc:49:aa: 1e:ac:35:5a:33:9b:5d:2b:46:46:24:15:55:fb:d1: 40:89:45:04:a5:bd:01:23:77:65:c5:17:94:09:82: c6:18:91:fd:2d:a2:81:ec:ee:44:ed:3f:f9:83:a5: f7:01:24:b6:7b:c2:b3:cb:62:0f:9a:5e:3b:14:ab: 97:25:95:a3:f4:64:6a:d6:b4:d2:42:c8:a4:59:5c: 1c:46:4e:46:6e:eb:9e:b1:dd:2a:09:e1:a7:32:d8: 6a:fc:2d:99:14:45:45:58:a9:76:b8:ad:24:28:00: 9b:13:69:ca:0a:dc:91:f9:56:c9:d3:2a:45:e6:f7: 80:48:ed:d2:2f:05:0d:95:20:b9:ba:00:79:cb:9f: 68:8a:05:f2:57:15:62:e0:0d:8a:88:14:9f:d2:8d: e4:02:09:aa:da:55:ec:8b:01:dd:ad:ac:e8:3a:8f: c5:9f:be:03:a5:dd:f0:31:9d:6d:c6:53:58:19:9c: fe:01:71:6a:b9:f1:85:5b:01:28:5e:89:91:8a:54: d9:7c:64:35:92:89:11:ad:c3:a7:46:cc:cd:f7:d7: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:96:E9:52:16:D3:A1:CB:02:4D:CE:DC:A1:DB:C8:64:1B:6C:8C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b9:4e:b0:27:13:42:fe:6e:f9:29:9f:8d:b0:88:bf:09:65: ab:05:e4:26:86:01:84:53:28:16:9a:ff:94:6f:72:7b:8f:b8: 67:de:52:15:ff:05:1f:cf:0a:7d:21:d8:46:d1:55:ad:b2:a7: 5e:39:f0:bc:eb:e4:aa:fb:6f:1c:7d:d8:c4:db:54:0a:83:54: e6:a1:4d:45:d5:5a:d5:20:0f:28:37:7a:c5:16:6a:60:1e:8a: c5:ff:ad:07:8a:46:ed:2e:39:62:6d:df:4e:49:c8:c6:be:23: b2:9e:e8:06:0a:91:d9:59:f4:cc:3f:97:78:d3:3a:da:6f:68: 87:67:6e:26:58:44:71:db:48:fa:58:28:5c:fe:b8:9d:62:9f: 39:7b:4f:dc:b1:81:8f:c6:a5:1b:a1:18:4f:e7:25:08:e9:2c: 4f:16:e0:83:69:38:c9:55:23:92:75:6c:fc:a2:32:92:03:ee: cd:d0:0e:52:2e:6c:e7:e7:28:e8:dd:68:e5:79:ed:ab:af:3a: 01:eb:96:c1:aa:73:7d:cd:b2:3c:78:56:7b:eb:7b:c8:7e:86: 6b:79:c5:51:af:e1:b6:21:ef:e4:96:ae:fb:df:63:6a:f2:95: 96:0d:e5:c6:fd:68:f0:04:05:f3:c7:d2:e3:b2:81:46:95:0f: 28:0c:4d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX8FEppGNO9st5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk NDAxNjM1ZGQtZWY3Ny00M2M0LTg5NzMtMTQzNGYyNTM1OWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtavU3sQ6sNyxNa3cozfApvbEKO9jJo5TxyI6 DtKonb0Tf/mz7/rhw1a8SaoerDVaM5tdK0ZGJBVV+9FAiUUEpb0BI3dlxReUCYLG GJH9LaKB7O5E7T/5g6X3ASS2e8Kzy2IPml47FKuXJZWj9GRq1rTSQsikWVwcRk5G buuesd0qCeGnMthq/C2ZFEVFWKl2uK0kKACbE2nKCtyR+VbJ0ypF5veASO3SLwUN lSC5ugB5y59oigXyVxVi4A2KiBSf0o3kAgmq2lXsiwHdrazoOo/Fn74Dpd3wMZ1t xlNYGZz+AXFqufGFWwEoXomRilTZfGQ1kokRrcOnRszN99cDoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGW6VIW06HLAk3O3KHbyGQbbIxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMzNhNjE2YmUtY2U4MC0z NWMyLWI3ZjctZWE5YzAwYTJhNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADy5TrAnE0L+bvkpn42wiL8JZasF5CaGAYRTKBaa/5RvcnuPuGfeUhX/ BR/PCn0h2EbRVa2yp1458Lzr5Kr7bxx92MTbVAqDVOahTUXVWtUgDyg3esUWamAe isX/rQeKRu0uOWJt305JyMa+I7Ke6AYKkdlZ9Mw/l3jTOtpvaIdnbiZYRHHbSPpY KFz+uJ1inzl7T9yxgY/GpRuhGE/nJQjpLE8W4INpOMlVI5J1bPyiMpID7s3QDlIu bOfnKOjdaOV57auvOgHrlsGqc33Nsjx4Vnvre8h+hmt5xVGv4bYh7+SWrvvfY2ry lZYN5cb9aPAEBfPH0uOygUaVDygMTe8= -----END CERTIFICATE-----Generated at Tue Jul 21 17:29:15 2026 by rpki-client