$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa File: 0399118c-609b-3b8a-8490-f03a3e398256.roa (raw, json) Hash identifier: 62IB9+yFodCZ+8B9nakLT6YhS9MuFYYBp9EzEJXwrao= Subject key identifier: F3:F6:74:72:7C:DE:24:15:F4:38:48:9A:87:8C:74:AE:D1:D1:0D:E7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EF71777C9BBC8C6F0F31B4980 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 63199 IP address blocks: 148.153.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:77:c9:bb:c8:c6:f0:f3:1b:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=840ac43a-a6c6-4027-9eef-9b4474c08691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:a5:9f:9c:74:92:d8:25:38:7f:cf:df:73: ed:ac:6a:12:7e:d5:0e:ee:35:23:19:ac:5b:b8:c8: 12:ad:21:49:ed:26:ca:32:4c:82:dc:1e:8e:83:b4: d2:1f:f2:d5:2f:f3:e9:48:65:28:15:b2:18:ac:27: 78:a4:9b:76:4e:72:b8:7a:d1:06:3b:69:e3:12:db: 38:2c:ac:db:84:42:ad:86:c4:0d:fc:9f:7f:18:44: 03:0c:4b:24:90:ec:2e:3d:61:3c:4e:be:c5:98:2e: de:06:38:93:6d:b0:0f:09:e4:bf:ba:e1:47:8b:02: f1:67:74:8e:1c:99:cf:43:4b:5f:44:33:cf:1b:c9: a4:70:e0:60:ca:43:e2:32:95:e9:90:6f:a1:7f:34: 6c:07:04:7c:3b:55:d3:26:57:f6:78:54:92:84:8f: c0:e6:04:2f:6b:d0:97:36:af:2f:9b:f0:c8:82:8f: 85:32:ca:13:07:9c:45:28:66:de:38:9c:c5:73:48: d9:da:89:da:16:75:82:ac:44:0e:4d:e2:64:c7:24: 08:35:05:37:91:55:40:b2:c8:f8:6a:39:fd:e3:4c: 75:eb:24:84:8a:ca:1b:7e:ed:ec:50:c9:0f:0c:6c: ed:4a:19:fa:6a:40:29:9f:64:fa:11:56:61:c6:58: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F6:74:72:7C:DE:24:15:F4:38:48:9A:87:8C:74:AE:D1:D1:0D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/0399118c-609b-3b8a-8490-f03a3e398256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:33:34:f0:a9:42:63:74:d2:b0:dd:9d:80:ad:d6:19:ce:77: 06:1e:80:8f:0a:9a:90:e1:fd:b4:71:ee:a3:2e:b3:4c:86:84: e6:62:62:71:8b:aa:0f:49:06:8b:b8:fc:60:90:7b:f9:eb:ec: 4b:81:9a:cc:26:29:05:6c:ac:16:69:ce:88:92:20:55:a0:9d: 80:8a:d3:da:6f:48:90:df:25:4c:b0:25:3b:9a:d8:6e:de:cc: e8:2f:8a:bc:c2:c1:ce:f0:c0:30:d0:00:fb:99:06:2d:59:09: 4e:46:fa:b7:98:0c:20:16:3e:94:20:a6:bb:be:59:30:d9:32: 61:20:b1:20:9c:09:ba:67:00:57:14:64:df:05:92:4e:68:a2: 1b:c4:91:b1:57:63:83:3b:3a:a2:3d:8d:d0:04:f1:9f:bf:30: 3c:22:d1:b0:3d:f1:48:da:32:44:83:5f:e8:04:f4:91:e4:dd: c3:29:a8:63:12:bd:ef:dc:15:f4:d0:a9:9e:16:c7:bf:76:79: 73:22:95:96:2d:5b:47:a7:3c:5d:7b:5f:a1:26:4a:59:05:a5: 94:0d:07:19:11:7a:e3:48:5e:a1:df:12:a9:18:04:b9:9e:c5: 28:a2:f9:ca:10:35:b3:9e:45:55:38:9c:22:69:49:da:88:5e: 64:1e:a7:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3fJu8jG8PMbSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ODQwYWM0M2EtYTZjNi00MDI3LTllZWYtOWI0NDc0YzA4NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j6ln5x0ktglOH/P33PtrGoSftUO7jUjGaxb uMgSrSFJ7SbKMkyC3B6Og7TSH/LVL/PpSGUoFbIYrCd4pJt2TnK4etEGO2njEts4 LKzbhEKthsQN/J9/GEQDDEskkOwuPWE8Tr7FmC7eBjiTbbAPCeS/uuFHiwLxZ3SO HJnPQ0tfRDPPG8mkcOBgykPiMpXpkG+hfzRsBwR8O1XTJlf2eFSShI/A5gQva9CX Nq8vm/DIgo+FMsoTB5xFKGbeOJzFc0jZ2onaFnWCrEQOTeJkxyQINQU3kVVAssj4 ajn940x16ySEisobfu3sUMkPDGztShn6akApn2T6EVZhxlj7hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP2dHJ83iQV9DhImoeMdK7R0Q3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDM5OTExOGMtNjA5Yi0z YjhhLTg0OTAtZjAzYTNlMzk4MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGozNPCpQmN00rDdnYCt1hnOdwYegI8KmpDh/bRx7qMus0yGhOZiYnGL qg9JBou4/GCQe/nr7EuBmswmKQVsrBZpzoiSIFWgnYCK09pvSJDfJUywJTua2G7e zOgvirzCwc7wwDDQAPuZBi1ZCU5G+reYDCAWPpQgpru+WTDZMmEgsSCcCbpnAFcU ZN8Fkk5oohvEkbFXY4M7OqI9jdAE8Z+/MDwi0bA98UjaMkSDX+gE9JHk3cMpqGMS ve/cFfTQqZ4Wx792eXMilZYtW0enPF17X6EmSlkFpZQNBxkReuNIXqHfEqkYBLme xSii+coQNbOeRVU4nCJpSdqIXmQep20= -----END CERTIFICATE-----Generated at Sat Sep 5 04:01:26 2026 by rpki-client