$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa File: 00a67443-0fc8-3ea5-9b70-edf9d806b098.roa (raw, json) Hash identifier: YViu009odWkEeD4ZFuF9tg3PtE0rT+AXepJAlcVuwHU= Subject key identifier: C4:7C:22:66:8C:F3:77:EB:91:D7:C4:84:04:B5:38:95:74:81:F2:28 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E04360A00437A0679945AE660 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 63199 IP address blocks: 148.153.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:0a:00:43:7a:06:79:94:5a:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=ae57d21a-8ce7-40a1-9158-902e1cdb48b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:55:1e:3d:37:f5:f6:a1:65:1d:da:e2:80: 47:21:55:61:0e:2e:ea:f6:0a:1e:4d:74:eb:70:da: 33:e4:95:48:02:dd:60:67:3d:51:5d:cb:82:50:de: 92:e1:45:03:63:e6:d7:30:b4:a4:18:3f:1c:1b:a7: af:d8:89:a3:3a:56:8a:bf:b0:bf:27:1e:de:5a:47: 90:d6:8b:bd:dc:89:38:66:b1:d5:97:a8:b9:c2:a5: b6:9f:92:bb:4b:58:7d:1d:06:1a:6f:dd:4c:f5:f8: c9:be:cc:59:fc:86:57:bf:52:94:8b:d0:5d:76:54: a4:1e:80:b4:11:77:c5:49:1e:61:16:7b:63:ca:b5: 78:77:1b:f1:4b:b0:7c:84:74:99:38:76:29:3d:4c: ac:a9:a8:60:10:45:73:a4:e9:af:99:8d:c0:e6:fe: a9:a0:52:59:cd:d5:7c:2d:f9:3a:f5:dc:14:9c:e4: 0e:58:d0:6e:d8:fd:17:00:59:9c:37:6b:18:f2:d3: 27:62:b6:b9:91:37:30:2d:9f:ae:14:b1:c5:0a:72: ac:c4:a3:20:da:11:47:ee:5f:a3:22:af:1b:44:d2: 39:f0:0b:7d:6c:49:7b:ea:6b:89:88:d8:ec:09:00: e1:b7:df:e2:b2:9d:3c:87:72:7e:01:e9:58:78:5e: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7C:22:66:8C:F3:77:EB:91:D7:C4:84:04:B5:38:95:74:81:F2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/00a67443-0fc8-3ea5-9b70-edf9d806b098.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f5:14:ef:cb:6b:3b:7b:fa:cb:02:f1:cf:a1:1c:29:a3:9f: 4c:1c:40:d1:6e:de:c2:3c:b0:02:7c:54:e1:62:7c:91:8f:87: bf:f3:a0:7e:66:5c:81:17:88:26:7b:e9:39:0e:4b:00:6a:fb: 53:91:3e:5c:ec:ea:6b:27:d4:46:71:1f:ae:cf:e1:45:92:47: 07:ee:1a:91:60:6c:83:60:ea:7b:a4:b2:f3:aa:83:6e:9e:0c: 6c:79:e6:6b:4f:c7:0e:ca:27:68:34:ab:46:e0:fe:35:fa:15: 4d:a2:e5:84:96:0d:3f:1c:e6:4a:75:28:11:3e:29:8d:9c:95: 31:95:97:30:0e:b3:12:de:65:ad:b2:3e:95:5a:89:6f:aa:80: dd:a2:d4:69:74:a5:91:14:a3:7f:a1:56:70:f6:83:6c:a0:4d: af:9c:b2:c8:0d:2b:6a:2a:a6:a8:ae:0b:2f:62:eb:54:d7:3d: 73:22:af:19:6d:28:37:d3:e7:77:69:8b:b6:87:85:6c:2c:fe: 62:6c:51:52:60:ad:3c:42:d8:ce:02:ae:91:d5:01:b6:4b:9f: b4:4c:d8:c0:29:04:71:97:c3:73:2f:b4:0c:7f:21:8d:d8:ac: 8f:2e:2e:2e:99:8d:17:45:83:5e:ac:8a:f1:9b:90:81:94:59: c2:96:e6:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgoAQ3oGeZRa5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk YWU1N2QyMWEtOGNlNy00MGExLTkxNTgtOTAyZTFjZGI0OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD5VHj039fahZR3a4oBHIVVhDi7q9goeTXTr cNoz5JVIAt1gZz1RXcuCUN6S4UUDY+bXMLSkGD8cG6ev2ImjOlaKv7C/Jx7eWkeQ 1ou93Ik4ZrHVl6i5wqW2n5K7S1h9HQYab91M9fjJvsxZ/IZXv1KUi9BddlSkHoC0 EXfFSR5hFntjyrV4dxvxS7B8hHSZOHYpPUysqahgEEVzpOmvmY3A5v6poFJZzdV8 Lfk69dwUnOQOWNBu2P0XAFmcN2sY8tMnYra5kTcwLZ+uFLHFCnKsxKMg2hFH7l+j Iq8bRNI58At9bEl76muJiNjsCQDht9/isp08h3J+AelYeF64TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR8ImaM83frkdfEhAS1OJV0gfIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDBhNjc0NDMtMGZjOC0z ZWE1LTliNzAtZWRmOWQ4MDZiMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz1FO/Lazt7+ssC8c+hHCmjn0wcQNFu3sI8sAJ8VOFifJGPh7/zoH5m XIEXiCZ76TkOSwBq+1ORPlzs6msn1EZxH67P4UWSRwfuGpFgbINg6nuksvOqg26e DGx55mtPxw7KJ2g0q0bg/jX6FU2i5YSWDT8c5kp1KBE+KY2clTGVlzAOsxLeZa2y PpVaiW+qgN2i1Gl0pZEUo3+hVnD2g2ygTa+cssgNK2oqpqiuCy9i61TXPXMirxlt KDfT53dpi7aHhWws/mJsUVJgrTxC2M4CrpHVAbZLn7RM2MApBHGXw3MvtAx/IY3Y rI8uLi6ZjRdFg16sivGbkIGUWcKW5uc= -----END CERTIFICATE-----Generated at Thu Jun 4 12:04:11 2026 by rpki-client