$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa File: 40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa (raw, json) Hash identifier: EMxzRsaHYIiZCdyDf0SSyKu2s3uI5yc1mxZrw9TEyiU= Subject key identifier: AB:FA:DA:8C:91:2C:82:E9:54:8E:CF:B0:1E:04:01:A2:39:14:83:54 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E070088C6881C04B899519E80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 63199 IP address blocks: 148.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:88:c6:88:1c:04:b8:99:51:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=1cbc692c-23ef-41e5-9a64-e3bb4b18c8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d1:57:b6:ef:5c:33:27:18:7a:11:de:23:1a: 82:02:50:9e:82:92:8f:6a:17:80:2b:81:c0:cf:32: d1:d5:4e:51:e5:2b:cd:6b:1d:ce:c8:71:5d:57:9a: 1d:15:04:f7:70:34:41:4c:6e:7a:f9:a5:da:0f:ea: f9:38:81:c2:25:08:0c:a4:21:36:93:53:01:54:92: e7:c9:0f:e0:08:b8:55:2c:d3:53:3d:92:20:53:b0: b7:61:82:56:fe:5b:d6:9e:97:66:cb:fb:e4:64:8f: 7e:3e:43:22:e4:91:b0:b0:2b:19:41:d3:49:71:14: c0:53:92:64:64:7d:a0:30:3c:9f:2e:6d:be:78:8a: 7f:0f:34:67:7c:97:6c:52:cb:43:33:20:af:a0:58: 28:c0:75:e9:44:91:ed:fe:55:36:a8:9c:28:16:b4: 39:7a:b1:54:8d:b8:9d:46:06:53:23:57:78:d1:52: db:11:fc:fe:83:8d:b9:63:ba:5b:cc:d9:5e:d6:6f: a9:79:18:cf:0e:fb:f9:79:27:35:b2:94:0f:27:93: fc:83:2f:0b:7a:ae:16:4c:e8:56:25:3b:3e:b6:7b: d9:0a:36:3f:ec:f6:cc:85:d5:a9:bb:76:64:a8:2d: 31:61:cd:a4:35:d8:06:9c:ca:20:ea:08:aa:de:a9: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FA:DA:8C:91:2C:82:E9:54:8E:CF:B0:1E:04:01:A2:39:14:83:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9c:ea:e3:77:ff:d6:79:d0:20:c0:e7:1f:32:e1:be:5c:c5: 18:9a:09:a5:4c:be:17:bd:88:09:3a:94:97:cc:28:96:bf:98: 40:c0:d7:d9:1f:c7:10:2d:e7:98:25:17:8b:eb:f2:5b:a8:86: 45:f7:41:b6:1e:88:e4:64:2c:1f:d2:b8:4c:92:49:28:6f:ec: 1e:a8:85:8b:17:96:c0:e7:f0:10:3f:a4:0e:fc:24:a7:11:29: ef:6f:5b:c0:91:42:76:bc:91:af:3c:fc:2e:fe:9b:69:3f:6a: 6a:ea:7b:f3:4c:e5:2c:8c:6b:06:77:94:02:ea:37:dd:09:e8: f0:34:42:90:58:c4:ee:b3:2b:c9:4b:ff:8d:bb:99:b2:49:1e: 4f:b6:fa:08:18:54:8a:65:d9:01:cb:4f:86:cc:b5:57:4e:5f: 70:f2:cf:14:bf:30:f6:51:5d:95:74:b0:c3:2a:38:62:63:ec: 64:59:a3:88:d2:d0:8c:3f:f2:49:f7:59:f8:78:14:34:fb:96: 13:8a:a7:9c:ba:85:42:a8:ec:21:90:e3:3b:a4:de:f3:cf:e2: d7:8c:3f:13:c9:d8:41:42:93:a3:7e:95:8f:4c:32:8c:86:86: a8:9a:49:99:13:93:dd:42:fb:c8:3a:9c:f4:e5:2c:98:28:5f: ca:2f:01:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAIjGiBwEuJlRnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk MWNiYzY5MmMtMjNlZi00MWU1LTlhNjQtZTNiYjRiMThjOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptFXtu9cMycYehHeIxqCAlCegpKPaheAK4HA zzLR1U5R5SvNax3OyHFdV5odFQT3cDRBTG56+aXaD+r5OIHCJQgMpCE2k1MBVJLn yQ/gCLhVLNNTPZIgU7C3YYJW/lvWnpdmy/vkZI9+PkMi5JGwsCsZQdNJcRTAU5Jk ZH2gMDyfLm2+eIp/DzRnfJdsUstDMyCvoFgowHXpRJHt/lU2qJwoFrQ5erFUjbid RgZTI1d40VLbEfz+g425Y7pbzNle1m+peRjPDvv5eSc1spQPJ5P8gy8Leq4WTOhW JTs+tnvZCjY/7PbMhdWpu3ZkqC0xYc2kNdgGnMog6giq3qldwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv62oyRLILpVI7PsB4EAaI5FINUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDBiOWM5ODItMDVkMS0z ZTRhLTg4NDEtZjJkN2RiZGIxMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuc6uN3/9Z50CDA5x8y4b5cxRiaCaVMvhe9iAk6lJfMKJa/mEDA19kf xxAt55glF4vr8luohkX3QbYeiORkLB/SuEySSShv7B6ohYsXlsDn8BA/pA78JKcR Ke9vW8CRQna8ka88/C7+m2k/amrqe/NM5SyMawZ3lALqN90J6PA0QpBYxO6zK8lL /427mbJJHk+2+ggYVIpl2QHLT4bMtVdOX3DyzxS/MPZRXZV0sMMqOGJj7GRZo4jS 0Iw/8kn3Wfh4FDT7lhOKp5y6hUKo7CGQ4zuk3vPP4teMPxPJ2EFCk6N+lY9MMoyG hqiaSZkTk91C+8g6nPTlLJgoX8ovASg= -----END CERTIFICATE-----Generated at Thu Jun 4 12:05:39 2026 by rpki-client