$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa File: 2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa (raw, json) Hash identifier: sO3E+NWrNPKoT4Cy9ahzYMJbZ3QrFSEPmXEcVeJuIZs= Subject key identifier: 47:A9:F2:82:68:DD:45:33:8B:96:16:AF:E3:F1:8D:7A:9A:47:5C:1E Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EE0C209B0DB31748A4F0E7C00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 63199 IP address blocks: 148.153.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:09:b0:db:31:74:8a:4f:0e:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=a30bc55b-2f76-45a0-acab-1895bb4de1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:b6:67:08:3e:69:97:06:d6:7c:54:fa:33: b1:ef:80:f8:dc:68:96:cb:ee:3b:86:01:e2:c2:61: e3:db:7f:32:ef:66:04:98:74:e4:e8:6d:bc:0b:76: 87:19:97:a5:c0:ef:d7:23:26:1a:d8:f7:3a:16:9a: 4f:85:1e:9d:91:50:68:39:e8:87:e9:ec:ae:51:c3: 8d:bf:27:f5:30:8d:5d:33:e8:6f:5f:49:34:51:e9: 26:48:89:74:98:41:1e:a2:4b:3c:10:17:11:e0:06: 2b:6f:3d:76:8d:eb:36:ca:e3:20:6f:d8:1e:76:ec: a4:0d:a9:fe:93:a5:e8:49:a4:a5:e2:18:86:d8:2e: 52:95:33:57:d1:b0:dc:f9:92:67:17:5a:99:da:a6: 98:0b:d3:e5:7f:e9:88:d3:bf:da:d0:65:81:1c:06: 71:80:57:7b:2b:0a:91:2f:b7:c6:c7:6d:92:3d:40: 85:f2:84:e7:53:2d:76:a5:b0:db:25:50:63:3d:3c: bc:95:4f:e9:7d:d7:2c:ef:28:48:2c:a7:9d:bc:ca: 05:f8:f9:b9:23:36:e9:03:98:f4:cc:b0:46:de:31: 18:0b:8f:47:6b:1e:da:6d:e4:10:7b:a9:90:04:51: 75:a5:ee:2f:f2:ef:2f:41:9b:15:f5:09:bc:f2:e9: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A9:F2:82:68:DD:45:33:8B:96:16:AF:E3:F1:8D:7A:9A:47:5C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6b:a5:0e:26:9a:e0:ed:d3:8c:f6:59:5a:3c:ab:45:ed:a9: 45:90:da:e8:48:e3:91:ec:50:d5:b1:2e:eb:71:5d:ce:50:d2: e5:f3:2a:b8:88:39:3c:56:a6:a7:4a:18:5b:0a:14:da:a4:40: d2:79:0f:07:03:0b:33:4e:85:3e:f7:c9:3b:6d:56:87:4b:2e: e7:db:ff:80:d3:d0:d2:52:7c:be:82:c8:41:c3:58:9f:2d:23: 13:9d:a7:a2:51:a6:fe:de:4d:ee:59:03:ce:79:10:ea:a4:b2: 92:d5:d6:f5:b5:8b:c2:71:34:30:0f:61:59:be:93:d7:ad:99: d8:ec:c1:e0:79:00:f7:2d:c3:42:5b:a3:ac:7a:a0:38:f6:27: 3d:ec:df:8f:63:81:3f:ab:79:8b:6d:6f:00:4b:bf:85:45:1e: e1:36:39:b2:97:b1:95:8a:89:d3:27:0f:7f:42:54:91:7f:69: d8:9f:9a:e8:47:c1:85:b9:74:20:4e:65:d6:24:bf:1c:c9:ba: 78:e3:9e:61:ce:83:e7:8d:b7:94:b4:d3:18:a9:aa:38:52:72: cf:c2:89:0e:9b:90:d6:21:0c:3f:a6:1a:07:10:b5:7c:7f:04: 38:44:5d:00:1a:66:15:0e:b4:e8:0f:a5:ce:18:aa:57:52:62: 2b:39:8d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgmw2zF0ik8OfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk YTMwYmM1NWItMmY3Ni00NWEwLWFjYWItMTg5NWJiNGRlMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSW2Zwg+aZcG1nxU+jOx74D43GiWy+47hgHi wmHj238y72YEmHTk6G28C3aHGZelwO/XIyYa2Pc6FppPhR6dkVBoOeiH6eyuUcON vyf1MI1dM+hvX0k0UekmSIl0mEEeoks8EBcR4AYrbz12jes2yuMgb9geduykDan+ k6XoSaSl4hiG2C5SlTNX0bDc+ZJnF1qZ2qaYC9Plf+mI07/a0GWBHAZxgFd7KwqR L7fGx22SPUCF8oTnUy12pbDbJVBjPTy8lU/pfdcs7yhILKedvMoF+Pm5IzbpA5j0 zLBG3jEYC49Hax7abeQQe6mQBFF1pe4v8u8vQZsV9Qm88ul8iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEep8oJo3UUzi5YWr+PxjXqaR1weMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmMyMGQyMWItOGEwZS0z ZGY0LTkxMTMtYzg2NmY1Yjk4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJm5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxrpQ4mmuDt04z2WVo8q0XtqUWQ2uhI45HsUNWxLutxXc5Q0uXzKriI OTxWpqdKGFsKFNqkQNJ5DwcDCzNOhT73yTttVodLLufb/4DT0NJSfL6CyEHDWJ8t IxOdp6JRpv7eTe5ZA855EOqkspLV1vW1i8JxNDAPYVm+k9etmdjsweB5APctw0Jb o6x6oDj2Jz3s349jgT+reYttbwBLv4VFHuE2ObKXsZWKidMnD39CVJF/adifmuhH wYW5dCBOZdYkvxzJunjjnmHOg+eNt5S00xipqjhScs/CiQ6bkNYhDD+mGgcQtXx/ BDhEXQAaZhUOtOgPpc4YqldSYis5jSc= -----END CERTIFICATE-----Generated at Sat Sep 5 05:22:12 2026 by rpki-client