$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa File: 1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa (raw, json) Hash identifier: BhoUjD+njoQiSuEwDZL1OiKYCd5y0FpJGsB4KcHjEBw= Subject key identifier: F5:6C:56:02:C2:F6:55:2D:39:27:7D:1A:1C:7B:F9:C5:A2:2F:37:F9 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584DE15074E3858FD747F5E94B80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 63199 IP address blocks: 148.153.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:74:e3:85:8f:d7:47:f5:e9:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=9c5ac300-28bb-45a6-b285-580b33a11671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a7:d5:cd:ee:d3:78:e4:c3:69:a6:b4:4e:86: 2e:ea:ab:4f:55:cc:f4:d8:24:34:dc:75:e8:73:bd: 56:cc:df:f6:15:3b:07:73:32:eb:23:9a:5a:36:73: 18:44:d0:e1:74:d3:5d:20:d4:c3:23:27:70:80:8a: d6:29:88:cd:f6:5d:72:46:c8:f6:fb:f6:7c:9c:4f: d4:9b:16:2e:92:92:ff:cc:9e:7f:9f:3f:24:f8:4a: ad:cd:13:54:7b:22:7f:81:ae:0f:ef:5a:1e:22:db: 76:b6:83:da:01:3d:70:6a:58:e5:ec:1e:cc:ee:01: 12:66:74:09:2e:6b:bc:8e:70:c4:bd:93:a5:2c:08: ba:96:c7:a8:7f:fd:5a:99:85:99:bc:c4:64:3e:7a: 90:e8:a5:38:b2:69:99:1e:98:f8:d9:06:53:3d:7a: e4:2d:76:0e:4b:c8:69:9d:5a:0c:96:ba:e1:04:e2: 49:53:84:ea:23:4b:24:32:5d:62:24:b7:36:57:d3: 01:0e:57:28:0a:c5:29:18:c8:fd:cf:07:a5:d6:09: 39:3d:23:e9:39:b9:5a:cb:46:da:c9:da:a2:b5:b0: 0b:7d:da:22:5e:51:be:56:11:f6:2c:03:9b:0a:f7: ef:73:d9:3d:5b:20:74:5b:8b:68:19:17:a9:65:6e: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:56:02:C2:F6:55:2D:39:27:7D:1A:1C:7B:F9:C5:A2:2F:37:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/1eb6ac26-de8a-3558-939f-a7dcac5cb8fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:69:7c:23:c5:85:90:36:54:9a:69:d9:15:a3:71:ac:ec:11: 52:80:74:95:17:b9:3c:b8:b9:62:0b:e0:63:93:61:ca:d6:5e: 97:c2:b8:39:24:11:aa:37:1c:06:37:3f:2f:e3:67:87:f9:21: 9b:8f:cb:49:d6:00:65:cd:75:e4:88:fd:59:30:97:8b:9f:38: 37:e0:a9:11:ad:30:94:20:5d:fe:54:e3:2e:4b:3f:5b:7d:d7: 11:c7:10:0d:9e:b7:39:3f:3e:f7:8d:6b:cb:d7:72:ea:61:85: 98:2b:f6:cf:e0:8f:7d:5e:4b:d8:76:bf:a4:2b:68:0b:4d:e2: 4e:10:e2:f4:11:c2:69:94:e5:34:62:ca:1f:34:21:4f:28:11: 1c:d9:5e:5f:94:e7:45:20:b9:0d:d9:68:f5:d8:19:1e:a5:75: 53:41:01:96:25:77:d3:57:2c:da:ba:62:97:ec:db:55:1d:0a: c4:33:9a:8b:f3:3e:84:4e:69:fc:ae:27:ba:4e:63:ab:88:17: aa:15:fa:77:7d:ad:d2:5e:cc:ce:c2:a8:5b:6e:66:cb:91:83: ed:38:82:ef:78:2e:27:9d:ed:11:65:50:52:50:6e:b6:36:1d: 6b:3e:23:29:2f:7b:52:e5:5c:10:01:f9:2c:10:a6:b9:2f:95: 7d:2c:a0:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUHTjhY/XR/XpS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk OWM1YWMzMDAtMjhiYi00NWE2LWIyODUtNTgwYjMzYTExNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKfVze7TeOTDaaa0ToYu6qtPVcz02CQ03HXo c71WzN/2FTsHczLrI5paNnMYRNDhdNNdINTDIydwgIrWKYjN9l1yRsj2+/Z8nE/U mxYukpL/zJ5/nz8k+EqtzRNUeyJ/ga4P71oeItt2toPaAT1waljl7B7M7gESZnQJ Lmu8jnDEvZOlLAi6lseof/1amYWZvMRkPnqQ6KU4smmZHpj42QZTPXrkLXYOS8hp nVoMlrrhBOJJU4TqI0skMl1iJLc2V9MBDlcoCsUpGMj9zwel1gk5PSPpOblay0ba ydqitbALfdoiXlG+VhH2LAObCvfvc9k9WyB0W4toGRepZW7loQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVsVgLC9lUtOSd9Ghx7+cWiLzf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMWViNmFjMjYtZGU4YS0z NTU4LTkzOWYtYTdkY2FjNWNiOGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9pfCPFhZA2VJpp2RWjcazsEVKAdJUXuTy4uWIL4GOTYcrWXpfCuDkk Eao3HAY3Py/jZ4f5IZuPy0nWAGXNdeSI/Vkwl4ufODfgqRGtMJQgXf5U4y5LP1t9 1xHHEA2etzk/PveNa8vXcuphhZgr9s/gj31eS9h2v6QraAtN4k4Q4vQRwmmU5TRi yh80IU8oERzZXl+U50UguQ3ZaPXYGR6ldVNBAZYld9NXLNq6Ypfs21UdCsQzmovz PoROafyuJ7pOY6uIF6oV+nd9rdJezM7CqFtuZsuRg+04gu94Lied7RFlUFJQbrY2 HWs+Iykve1LlXBAB+SwQprkvlX0soHA= -----END CERTIFICATE-----Generated at Thu Jun 4 12:05:00 2026 by rpki-client