$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa File: 854f0b13-0526-3986-a284-6ca1d255b066.roa (raw, json) Hash identifier: q4amhTvqyMXvxNrLiYU3r7HV5CnHCzJUZEuTAUTemIs= Subject key identifier: A9:CF:50:98:E8:25:7D:47:85:47:FD:4A:29:F8:67:37:CF:FF:13:E5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E561A0515F40F2AF626739100 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 63199 IP address blocks: 148.153.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:1a:05:15:f4:0f:2a:f6:26:73:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=f4b74b44-b9ce-43ee-82c1-8783a7bf4648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:d1:ed:d7:e7:ec:16:9c:9f:88:9b:1e:62: a5:14:df:17:ee:d4:f4:58:4d:6c:6e:ed:c4:77:3f: 1a:5b:71:df:af:64:b6:a7:f8:37:85:7b:6a:5f:f3: 32:f5:2a:79:57:09:b3:bf:b8:2b:76:08:11:cf:34: 0b:5f:a0:3d:f6:d8:81:ea:93:6d:b8:17:fb:58:bc: 92:11:89:6b:11:3a:30:82:e6:ce:d7:be:f8:7b:54: 04:56:f7:f3:a6:3f:92:b9:eb:52:06:48:e8:cb:00: b6:c3:99:1c:7a:49:21:87:56:eb:ca:a3:58:b8:91: 74:bf:41:8b:54:c5:43:84:ae:74:8b:eb:d8:13:42: ac:51:03:32:63:63:ca:6f:10:98:5e:4e:d3:b5:5e: 85:70:9f:fa:76:6d:d9:84:fa:ea:90:74:69:27:b4: 00:fd:3f:03:a6:aa:61:6b:46:fc:13:f2:3c:36:c9: 06:7a:6f:bd:08:ba:7e:5f:11:a5:9f:9e:eb:02:6d: 7b:ec:d1:49:51:a9:15:7e:98:a8:8c:4d:86:0d:4e: a5:da:90:3c:3f:4e:1e:4c:39:72:f6:c0:44:2e:0d: 92:ed:a3:8c:a4:20:91:ac:bc:d7:0c:f1:63:cf:9c: fc:66:e4:c1:7a:3c:61:75:7f:01:dd:1c:15:5d:7a: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CF:50:98:E8:25:7D:47:85:47:FD:4A:29:F8:67:37:CF:FF:13:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0e:96:41:e8:33:bd:25:79:e4:fa:09:d1:58:bb:5e:3e:03: d3:1a:79:bb:d5:34:21:1b:87:6b:59:ff:f6:50:6f:3a:9d:3d: ea:8c:6f:39:5c:e0:3e:40:f6:36:bc:99:f3:48:80:b1:99:6e: 81:46:c3:b7:bc:f8:93:bd:6a:37:d0:41:b6:b2:4c:96:71:72: 2b:2e:bf:66:0d:b5:f3:89:ff:80:93:82:88:67:71:1b:21:e4: 38:e9:84:f1:5d:9c:8b:9b:56:a0:f1:a8:66:13:46:80:a5:fa: ff:d8:b0:e9:29:f3:a1:1c:cb:29:59:81:f0:c2:40:84:e6:4a: 28:08:46:94:f6:1c:65:d2:e9:52:4d:17:79:10:f6:97:00:dd: 3d:26:ca:b8:e5:ad:c5:3f:ed:b0:1b:5b:a3:35:7e:65:b4:21: f4:01:a3:e7:e2:ac:5d:42:b9:46:bc:56:cf:69:06:1d:cd:a7: 29:1d:7c:7d:8c:26:f6:41:8a:4b:e1:46:f1:a7:e1:3a:61:11: 11:84:66:ab:b6:5d:6d:5f:0b:be:a0:10:d8:c7:c2:61:29:56: d4:13:1c:d3:cd:09:11:22:71:be:f6:03:2f:74:47:2d:3d:38: 40:e2:3f:04:1a:77:48:77:09:22:d7:89:43:7a:7f:5b:87:1d: 8d:12:01:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGgUV9A8q9iZzkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjRiNzRiNDQtYjljZS00M2VlLTgyYzEtODc4M2E3YmY0NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorvR7dfn7Bacn4ibHmKlFN8X7tT0WE1sbu3E dz8aW3Hfr2S2p/g3hXtqX/My9Sp5Vwmzv7grdggRzzQLX6A99tiB6pNtuBf7WLyS EYlrETowgubO1774e1QEVvfzpj+SuetSBkjoywC2w5kcekkhh1bryqNYuJF0v0GL VMVDhK50i+vYE0KsUQMyY2PKbxCYXk7TtV6FcJ/6dm3ZhPrqkHRpJ7QA/T8Dpqph a0b8E/I8NskGem+9CLp+XxGln57rAm177NFJUakVfpiojE2GDU6l2pA8P04eTDly 9sBELg2S7aOMpCCRrLzXDPFjz5z8ZuTBejxhdX8B3RwVXXrMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnPUJjoJX1HhUf9Sin4ZzfP/xPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvODU0ZjBiMTMtMDUyNi0z OTg2LWEyODQtNmNhMWQyNTViMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkOlkHoM70leeT6CdFYu14+A9MaebvVNCEbh2tZ//ZQbzqdPeqMbzlc 4D5A9ja8mfNIgLGZboFGw7e8+JO9ajfQQbayTJZxcisuv2YNtfOJ/4CTgohncRsh 5DjphPFdnIubVqDxqGYTRoCl+v/YsOkp86EcyylZgfDCQITmSigIRpT2HGXS6VJN F3kQ9pcA3T0myrjlrcU/7bAbW6M1fmW0IfQBo+firF1CuUa8Vs9pBh3NpykdfH2M JvZBikvhRvGn4TphERGEZqu2XW1fC76gENjHwmEpVtQTHNPNCREicb72Ay90Ry09 OEDiPwQad0h3CSLXiUN6f1uHHY0SAT4= -----END CERTIFICATE-----Generated at Tue Jul 21 17:28:12 2026 by rpki-client