$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa File: badd067d-d8c6-3638-b8fc-51032051faf9.roa (raw, json) Hash identifier: ThhMK5zvDMEIXCPqfaKbLJTT9p3w2bC6Oo00FkY+MAM= Subject key identifier: C4:0D:5E:B7:4A:7D:3D:35:79:AC:92:8D:2C:35:69:12:89:DD:69:92 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E66DA1AF0BBD501029F9E8700 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 63199 IP address blocks: 148.153.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:1a:f0:bb:d5:01:02:9f:9e:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=b7f1dd1a-b215-4699-8412-574c916588c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:97:d5:c3:cc:d5:be:de:9e:08:23:0f:b5:5e: 85:27:99:85:d1:05:63:58:ae:db:1d:e7:36:91:84: 20:66:de:2c:80:ff:b8:fc:09:14:7f:e0:e6:b5:3d: be:73:5f:2e:8d:1c:a0:75:e9:56:91:2a:6b:14:77: 57:7a:54:a7:83:b9:01:a9:4d:72:8f:ca:b3:a6:82: b4:33:cd:d2:9b:9e:8a:c6:a3:93:af:29:59:00:a7: cf:82:cb:55:b6:7e:fc:cf:e0:4a:70:58:b7:7b:96: 0c:a4:b4:54:0f:e1:d2:32:25:70:f5:87:4b:1d:b7: 1e:13:28:87:e4:4c:56:40:39:56:c3:87:ff:2e:9e: d9:29:6a:af:84:2c:5e:45:7e:87:0a:e4:79:36:86: 8e:d2:0b:b5:3c:35:a8:3c:61:37:d0:08:39:30:11: 4f:09:5a:ac:15:d7:4b:82:36:bf:3f:56:12:2e:b3: e6:66:f4:bf:14:f6:3a:ac:57:94:f8:77:ed:f7:ff: 22:24:73:45:68:f2:9e:c0:ba:1e:35:b5:df:e7:b6: fb:34:a9:0a:37:a8:53:c2:6d:ec:d7:da:ee:e3:88: 7c:ec:c8:2f:37:55:c1:b6:f9:a1:7f:ea:c5:57:92: 8d:23:db:e8:df:80:b2:2c:e3:0a:0f:61:f6:19:69: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0D:5E:B7:4A:7D:3D:35:79:AC:92:8D:2C:35:69:12:89:DD:69:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/badd067d-d8c6-3638-b8fc-51032051faf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:3f:75:29:df:f3:1c:c6:de:33:67:7b:a3:7f:22:cb:e1: a5:ff:ed:f7:db:e5:e2:90:f2:86:f1:f7:c9:1e:3b:60:6e:5a: fa:d9:7b:d1:25:f9:33:bf:fb:60:66:ef:93:91:92:1d:e7:64: 1f:03:77:b7:d6:b0:40:8b:ec:9e:03:db:64:c2:9f:37:24:c6: bd:ba:71:a7:c5:8f:7d:cd:bb:ae:89:97:f0:e8:5f:79:ed:23: 88:75:13:15:e7:a0:bc:85:0f:01:64:c4:b9:1e:8c:a5:a7:22: 33:1f:f2:be:f6:3d:ac:2f:21:af:27:2a:c2:ef:77:85:ed:c0: 2f:77:86:02:d1:ef:b7:94:61:83:34:0c:d3:08:42:cd:49:6d: 49:6f:58:8f:35:f1:0b:dc:11:2e:81:e7:53:eb:41:58:86:e2: aa:aa:d7:63:e7:cf:6b:06:cc:a3:c3:6e:6e:dd:75:e0:fa:e8: 98:71:cd:e7:5e:4b:31:e1:c8:bf:c3:21:f9:51:e1:52:6a:3f: eb:9b:aa:18:18:69:bd:87:d7:75:df:14:a0:32:11:18:09:61: e1:fc:f0:b5:60:36:2b:d2:ec:6d:31:52:f5:84:25:22:1a:e5: 5d:47:fd:0f:62:80:c7:22:bd:c8:f4:20:64:90:83:c4:95:eb: 5f:e9:bc:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hrwu9UBAp+ehwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk YjdmMWRkMWEtYjIxNS00Njk5LTg0MTItNTc0YzkxNjU4OGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5fVw8zVvt6eCCMPtV6FJ5mF0QVjWK7bHec2 kYQgZt4sgP+4/AkUf+DmtT2+c18ujRygdelWkSprFHdXelSng7kBqU1yj8qzpoK0 M83Sm56KxqOTrylZAKfPgstVtn78z+BKcFi3e5YMpLRUD+HSMiVw9YdLHbceEyiH 5ExWQDlWw4f/Lp7ZKWqvhCxeRX6HCuR5NoaO0gu1PDWoPGE30Ag5MBFPCVqsFddL gja/P1YSLrPmZvS/FPY6rFeU+Hft9/8iJHNFaPKewLoeNbXf57b7NKkKN6hTwm3s 19ru44h87MgvN1XBtvmhf+rFV5KNI9vo34CyLOMKD2H2GWnPxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQNXrdKfT01eaySjSw1aRKJ3WmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYmFkZDA2N2QtZDhjNi0z NjM4LWI4ZmMtNTEwMzIwNTFmYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHTP3Up3/Mcxt4zZ3ujfyLL4aX/7ffb5eKQ8obx98keO2BuWvrZe9El +TO/+2Bm75ORkh3nZB8Dd7fWsECL7J4D22TCnzckxr26cafFj33Nu66Jl/DoX3nt I4h1ExXnoLyFDwFkxLkejKWnIjMf8r72PawvIa8nKsLvd4XtwC93hgLR77eUYYM0 DNMIQs1JbUlvWI818QvcES6B51PrQViG4qqq12Pnz2sGzKPDbm7ddeD66Jhxzede SzHhyL/DIflR4VJqP+ubqhgYab2H13XfFKAyERgJYeH88LVgNivS7G0xUvWEJSIa 5V1H/Q9igMcivcj0IGSQg8SV61/pvNQ= -----END CERTIFICATE-----Generated at Tue Jul 21 17:28:16 2026 by rpki-client