$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa File: d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa (raw, json) Hash identifier: izBRp6G2xLDzE6FT+vNJMyVH2ypxB829LVvGSl6dFdg= Subject key identifier: F1:63:05:F3:14:21:0C:70:8F:44:A8:E6:2B:04:84:C8:F7:A0:04:C2 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E54B4AB9A3AB03B89BA9598A0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 63199 IP address blocks: 148.153.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:ab:9a:3a:b0:3b:89:ba:95:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=43b5035d-c043-4d39-ac57-807036a18dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:d2:1f:a3:a5:91:15:34:e5:c7:8a:a5:22: a3:70:c6:74:f1:54:3a:ca:5f:2e:44:8d:64:f2:49: d4:29:41:b5:6e:27:a8:5c:ba:03:b9:3b:80:37:d6: a5:11:6f:a8:a6:13:d2:e9:b7:f4:ff:3f:8b:66:c3: d9:17:30:52:ff:68:94:36:1d:da:a5:af:1c:bc:bf: 45:b7:9d:87:2a:1a:9c:c2:c7:9d:da:25:67:80:8d: 11:e7:cd:45:b2:ba:0e:48:b7:03:bc:45:6c:6c:c9: ee:da:73:c7:4e:ac:4b:34:75:01:cd:70:bd:ba:3b: 17:3d:ef:5c:97:b4:34:6e:66:bc:2d:45:d5:2c:b6: 40:81:e5:12:6b:46:9d:b5:8e:6b:77:d5:0c:03:38: 60:9b:c3:09:8f:c6:ee:ff:ca:c2:29:3d:b9:9c:fe: 59:6f:09:c6:96:0b:ae:9e:01:71:10:45:72:39:ea: 78:91:84:21:1b:7e:49:89:64:03:0f:32:c3:71:63: c8:b7:38:72:aa:fa:0b:65:fa:6d:cc:01:a5:93:59: 1f:de:00:ed:65:b5:43:29:04:98:6a:de:f7:f6:68: 79:b8:30:d3:49:89:3b:0f:0b:81:e8:be:64:e5:fe: 58:30:23:db:38:ba:b0:a2:2a:83:4e:4c:4c:03:ad: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:63:05:F3:14:21:0C:70:8F:44:A8:E6:2B:04:84:C8:F7:A0:04:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:99:2b:0b:00:b7:28:2e:01:39:46:4f:49:ea:73:26:cd:22: d4:0d:29:14:8d:40:81:54:f6:e6:cf:73:0d:d4:6e:53:69:2c: 14:1e:fa:b7:02:7e:6c:3a:26:df:1a:da:82:84:71:aa:46:7e: 84:20:5c:2c:84:e9:c5:a0:35:0f:cd:31:6b:44:4a:bc:e6:2a: ba:db:d2:30:0a:8c:de:7a:45:d3:f9:cc:cf:fd:4d:e5:bf:08: c7:42:29:e0:e6:04:ae:bf:3c:50:23:dc:5b:66:e4:52:fd:30: 90:0a:23:b2:c7:d3:91:f1:f7:21:20:22:c4:4f:48:c1:91:ea: d4:26:cb:73:a0:01:a2:24:04:49:92:00:cb:b0:33:5c:ff:ff: 90:1e:c3:3b:31:28:60:b0:1c:19:fa:11:73:aa:4e:c2:33:f6: cd:57:37:ad:24:db:ce:40:26:83:c3:67:27:28:e6:a7:0d:f4: 49:a3:66:a1:43:98:3d:82:29:a7:86:ae:d3:14:6c:a2:7e:c6: a8:ce:40:e4:4e:97:4f:60:ec:81:5a:57:c5:ff:2e:ed:4e:84: b1:9b:dd:be:af:22:e3:6a:84:f3:e8:85:5b:e5:97:48:39:21: 7e:12:b7:60:fb:70:22:d1:22:07:79:39:9e:ce:af:50:46:02: 13:39:65:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtKuaOrA7ibqVmKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk NDNiNTAzNWQtYzA0My00ZDM5LWFjNTctODA3MDM2YTE4ZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr/SH6OlkRU05ceKpSKjcMZ08VQ6yl8uRI1k 8knUKUG1bieoXLoDuTuAN9alEW+ophPS6bf0/z+LZsPZFzBS/2iUNh3apa8cvL9F t52HKhqcwsed2iVngI0R581FsroOSLcDvEVsbMnu2nPHTqxLNHUBzXC9ujsXPe9c l7Q0bma8LUXVLLZAgeUSa0adtY5rd9UMAzhgm8MJj8bu/8rCKT25nP5ZbwnGlguu ngFxEEVyOep4kYQhG35JiWQDDzLDcWPItzhyqvoLZfptzAGlk1kf3gDtZbVDKQSY at739mh5uDDTSYk7DwuB6L5k5f5YMCPbOLqwoiqDTkxMA62mXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFjBfMUIQxwj0So5isEhMj3oATCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZDhjM2I3YzUtZDYyYy0z ODJjLWE4ZTEtYmVlZjI3YjE2NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOZKwsAtyguATlGT0nqcybNItQNKRSNQIFU9ubPcw3UblNpLBQe+rcC fmw6Jt8a2oKEcapGfoQgXCyE6cWgNQ/NMWtESrzmKrrb0jAKjN56RdP5zM/9TeW/ CMdCKeDmBK6/PFAj3Ftm5FL9MJAKI7LH05Hx9yEgIsRPSMGR6tQmy3OgAaIkBEmS AMuwM1z//5AewzsxKGCwHBn6EXOqTsIz9s1XN60k285AJoPDZyco5qcN9EmjZqFD mD2CKaeGrtMUbKJ+xqjOQOROl09g7IFaV8X/Lu1OhLGb3b6vIuNqhPPohVvll0g5 IX4St2D7cCLRIgd5OZ7Or1BGAhM5ZSM= -----END CERTIFICATE-----Generated at Tue Jul 21 17:28:29 2026 by rpki-client