$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa File: 020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa (raw, json) Hash identifier: PYjIWOadYzI/vpme5kuL1XHyfTQH9fx/vTR2e3NnmG4= Subject key identifier: EE:29:1F:91:17:57:21:81:64:2E:02:9E:18:12:AE:9C:88:A1:B5:7D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E043609F3CDE54A1D2164CCE0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 63199 IP address blocks: 148.153.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:09:f3:cd:e5:4a:1d:21:64:cc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=102c6e56-b068-4d97-a470-985389b6adae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:71:4f:fc:af:6c:80:7e:d1:1e:55:fa:1f: da:53:c5:80:42:05:90:b6:82:74:f3:80:fc:dd:e3: 33:d4:90:93:4d:0f:8a:87:4c:78:a3:04:67:78:ad: 04:97:dc:ae:f8:7e:67:39:f8:d3:77:c2:90:1b:c6: 4f:e7:a7:60:04:f9:f7:39:10:52:08:97:e9:85:b1: a0:3b:5c:8a:36:a6:4d:b2:13:f7:0c:a5:49:1d:27: 8e:b6:ee:1f:ea:a1:78:00:da:13:28:f9:cf:36:e7: 38:bb:e4:76:86:ea:94:4e:8e:21:b3:2a:f2:1a:fb: 80:87:01:92:51:7d:d9:d2:a1:d3:73:28:79:fc:67: 25:b0:f6:d7:f4:2a:c7:98:05:a3:2c:d5:ba:f6:2b: 3b:59:84:1b:a2:93:c8:24:c1:49:a8:c9:b2:e5:a5: 83:d5:7d:a9:46:5b:2a:b0:42:ad:26:87:cc:ce:cb: 64:51:cb:e4:2d:73:c9:13:e2:e3:c5:5b:5e:17:19: fb:5c:6b:eb:38:23:66:15:75:22:16:42:0d:c9:81: 46:51:62:c9:6d:4e:09:8d:70:f6:1d:a7:bd:4e:bc: a0:83:35:cc:fc:cf:9d:81:3c:16:8a:25:24:2e:ef: de:bd:b4:69:28:ed:67:51:ab:90:db:5d:75:7d:8a: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:29:1F:91:17:57:21:81:64:2E:02:9E:18:12:AE:9C:88:A1:B5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b3:13:07:63:ad:05:3a:f3:87:c1:94:cb:d2:05:c0:d3:ab: b8:c5:ed:07:18:d2:2e:82:18:9d:ad:0e:5a:fc:5e:fc:37:89: f6:f7:65:ec:f9:cf:41:40:bc:46:d3:17:4a:42:80:c4:cd:5f: 26:b4:b0:d3:64:85:4d:3a:eb:0a:f2:2f:15:46:f9:5f:de:8d: c1:ff:ee:a3:fc:8d:2b:83:57:41:e1:e8:18:50:8c:1a:1e:d5: f5:aa:ad:d5:34:56:ae:ae:ba:b4:b2:1e:fe:f4:14:e7:18:f1: 89:47:0f:ca:03:b2:da:c5:f1:41:6e:4e:cf:a0:fd:c0:1e:46: 7e:10:42:db:a9:39:ae:75:a3:26:dc:f5:3e:11:28:22:c6:0b: a4:62:f9:c3:08:32:4f:8a:af:70:c7:bc:d9:08:33:c0:ee:1a: 63:67:b7:85:1f:21:78:19:a0:65:7b:6a:fe:5c:db:59:30:1d: ef:bf:20:b2:af:2a:50:0b:6f:28:0b:3b:1b:c7:20:23:ca:6b: 1c:85:16:95:1c:71:ee:94:0b:20:3f:02:2a:50:d3:2d:96:2b: 06:36:3f:28:29:51:51:d6:70:4f:30:6e:35:81:7c:df:e8:1e: 40:f6:c3:c3:9d:b0:9f:fe:93:60:9f:da:a7:b6:c9:d2:47:bd: 5b:3e:11:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgnzzeVKHSFkzOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MTAyYzZlNTYtYjA2OC00ZDk3LWE0NzAtOTg1Mzg5YjZhZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+9xT/yvbIB+0R5V+h/aU8WAQgWQtoJ084D8 3eMz1JCTTQ+Kh0x4owRneK0El9yu+H5nOfjTd8KQG8ZP56dgBPn3ORBSCJfphbGg O1yKNqZNshP3DKVJHSeOtu4f6qF4ANoTKPnPNuc4u+R2huqUTo4hsyryGvuAhwGS UX3Z0qHTcyh5/GclsPbX9CrHmAWjLNW69is7WYQbopPIJMFJqMmy5aWD1X2pRlsq sEKtJofMzstkUcvkLXPJE+LjxVteFxn7XGvrOCNmFXUiFkINyYFGUWLJbU4JjXD2 Hae9TryggzXM/M+dgTwWiiUkLu/evbRpKO1nUauQ2111fYr75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4pH5EXVyGBZC4CnhgSrpyIobV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDIwYjU5YTItYTlhYS0z OGNiLWJjMmItZDM3YzUyN2I0MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqzEwdjrQU684fBlMvSBcDTq7jF7QcY0i6CGJ2tDlr8Xvw3ifb3Zez5 z0FAvEbTF0pCgMTNXya0sNNkhU066wryLxVG+V/ejcH/7qP8jSuDV0Hh6BhQjBoe 1fWqrdU0Vq6uurSyHv70FOcY8YlHD8oDstrF8UFuTs+g/cAeRn4QQtupOa51oybc 9T4RKCLGC6Ri+cMIMk+Kr3DHvNkIM8DuGmNnt4UfIXgZoGV7av5c21kwHe+/ILKv KlALbygLOxvHICPKaxyFFpUcce6UCyA/AipQ0y2WKwY2PygpUVHWcE8wbjWBfN/o HkD2w8OdsJ/+k2Cf2qe2ydJHvVs+EbY= -----END CERTIFICATE-----Generated at Thu Jun 4 12:05:01 2026 by rpki-client