$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa File: 00a67443-0fc8-3ea5-9b70-edf9d806b098.roa (raw, json) Hash identifier: 0e+Ni+Xup064zkCUBfCZ34mBq9FM30Ryif00UIUi0tY= Subject key identifier: 8D:90:2C:09:BD:97:58:20:C5:05:32:18:7B:25:AC:7F:47:94:C6:54 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EA79C4F6AA3FB8C8F568F1D80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63199 IP address blocks: 148.153.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:4f:6a:a3:fb:8c:8f:56:8f:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=955d6d25-0e68-4a9f-bd31-31a43c30ce03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:39:10:d4:cf:19:10:a4:c8:0d:53:bc:45: 82:c6:62:12:f9:8a:a3:bb:e0:1a:93:a5:aa:d2:e5: 3e:16:39:12:61:ae:28:74:a1:87:e2:54:fd:df:c5: ae:b0:09:ce:ac:ec:be:c5:ab:7b:89:69:57:3b:4d: a5:5c:1f:b1:23:5a:8a:b6:62:61:bf:a0:08:e9:77: 91:b9:9f:9f:98:e2:a6:74:98:88:6d:e7:8b:e3:dc: db:b6:ff:78:cf:37:74:e4:09:62:10:57:b2:84:c1: 34:08:a5:f3:d8:d8:00:39:f4:09:50:a9:a3:67:df: e5:c5:f9:df:be:d8:33:e7:89:35:31:b2:f4:1b:51: 4e:c3:7f:8a:33:05:f3:b4:bd:94:83:f2:9c:6e:d7: 33:38:ad:32:24:bf:37:46:9c:c6:73:ec:8b:07:79: d6:40:a8:40:db:40:ed:f4:72:7b:ba:19:4f:f6:15: cf:a0:b4:8a:56:45:8b:14:49:4c:16:d5:0f:00:02: 8c:fe:53:0e:20:df:f0:73:aa:7c:55:fe:de:39:67: df:be:f3:3b:62:62:d5:07:57:df:c2:8f:96:7a:08: 04:c5:01:16:74:a4:c8:fa:bf:af:b2:27:cf:25:7d: ba:72:3b:bb:26:8b:df:36:26:1e:87:19:bc:76:32: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:90:2C:09:BD:97:58:20:C5:05:32:18:7B:25:AC:7F:47:94:C6:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:05:f2:f6:fa:83:2f:8f:f6:77:2f:c2:51:16:a0:11:df:f8: 90:e2:aa:f3:8e:ea:fe:cc:98:e6:5e:53:83:e1:7e:e7:d2:cf: 59:10:58:31:d7:eb:c7:0e:d6:be:8f:e7:09:e7:58:ed:a5:31: f8:3f:12:37:15:ff:5c:a3:c6:23:16:21:ef:34:e4:eb:da:b4: 08:e1:5e:42:5e:ef:f1:a4:d6:5f:c9:c5:10:9c:c9:47:9c:45: d8:51:25:94:13:bc:7f:c1:b1:ab:a4:ec:50:27:59:84:b5:76: 61:c1:75:db:17:f3:20:71:ab:77:a6:ed:7f:55:83:05:75:40: b8:8b:ef:9f:79:86:69:72:18:92:3c:00:9a:df:25:84:6c:6f: 48:85:bf:f8:f9:7c:81:9e:12:7d:bc:da:3e:e7:9c:e3:e2:91: a5:04:f8:2e:57:5e:18:eb:6c:93:f0:54:8a:78:e3:47:dc:d1: bb:7b:a6:94:38:48:e8:52:21:c8:0a:44:e3:51:e3:4d:e8:35: 1e:3e:92:7d:bd:64:37:c7:c1:fd:ed:b1:e0:6b:cb:f7:4b:a7: 39:3e:78:e4:5b:9e:c5:d4:30:f6:c3:6f:f1:0a:17:1f:81:62: 3e:41:23:b2:5c:9b:07:5b:c3:25:b8:7b:8b:95:de:d9:8e:8d: 9e:5f:74:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnE9qo/uMj1aPHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTU1ZDZkMjUtMGU2OC00YTlmLWJkMzEtMzFhNDNjMzBjZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWY5ENTPGRCkyA1TvEWCxmIS+Yqju+Aak6Wq 0uU+FjkSYa4odKGH4lT938WusAnOrOy+xat7iWlXO02lXB+xI1qKtmJhv6AI6XeR uZ+fmOKmdJiIbeeL49zbtv94zzd05AliEFeyhME0CKXz2NgAOfQJUKmjZ9/lxfnf vtgz54k1MbL0G1FOw3+KMwXztL2Ug/KcbtczOK0yJL83RpzGc+yLB3nWQKhA20Dt 9HJ7uhlP9hXPoLSKVkWLFElMFtUPAAKM/lMOIN/wc6p8Vf7eOWffvvM7YmLVB1ff wo+WeggExQEWdKTI+r+vsifPJX26cju7JovfNiYehxm8djKS9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2QLAm9l1ggxQUyGHslrH9HlMZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDBhNjc0NDMtMGZjOC0z ZWE1LTliNzAtZWRmOWQ4MDZiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoF8vb6gy+P9ncvwlEWoBHf+JDiqvOO6v7MmOZeU4PhfufSz1kQWDHX 68cO1r6P5wnnWO2lMfg/EjcV/1yjxiMWIe805OvatAjhXkJe7/Gk1l/JxRCcyUec RdhRJZQTvH/Bsauk7FAnWYS1dmHBddsX8yBxq3em7X9VgwV1QLiL7595hmlyGJI8 AJrfJYRsb0iFv/j5fIGeEn282j7nnOPikaUE+C5XXhjrbJPwVIp440fc0bt7ppQ4 SOhSIcgKRONR403oNR4+kn29ZDfHwf3tseBry/dLpzk+eORbnsXUMPbDb/EKFx+B Yj5BI7JcmwdbwyW4e4uV3tmOjZ5fdD0= -----END CERTIFICATE-----Generated at Sat Sep 5 04:02:24 2026 by rpki-client