$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa File: 40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa (raw, json) Hash identifier: LoET2kEmBTkcVVVYEOA7sQ9z6qVScnL7QQYRsMa6QoY= Subject key identifier: 10:DD:1A:8E:59:F0:1C:DA:AD:A2:8F:3C:93:46:C9:0D:96:63:43:8D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EA8EC3A3DE4B834421E4D24C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 63199 IP address blocks: 148.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:3a:3d:e4:b8:34:42:1e:4d:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=1fb5f24d-489e-40d1-8594-e95cd1176a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:d0:0b:9f:ec:1a:f2:de:3a:f9:db:78:2c: 78:72:48:fe:12:ba:3a:12:7d:d8:39:56:a7:6c:09: ca:9c:81:9e:51:90:ef:61:ce:5d:e3:dc:a8:48:6f: 68:7d:65:b6:eb:cc:17:8c:7e:7c:5c:48:d5:60:3a: 1f:5e:56:09:79:3d:00:6a:56:ec:94:54:b5:d0:7a: 6f:57:cb:6c:19:e6:30:38:a6:b0:66:ff:2b:56:e8: 3d:68:cc:93:77:41:39:1a:a4:4c:08:cf:20:7c:b9: fd:11:3f:31:a8:02:ba:58:4f:d0:b3:a3:d5:43:01: 3d:c5:93:57:11:d1:71:f1:61:a3:1a:7d:70:80:8c: f4:45:2c:35:2e:91:b6:49:4f:0c:6b:4f:1b:e5:c5: fd:7c:2c:40:f2:c3:4a:c0:ac:74:58:5c:b9:e1:5e: 7e:5d:13:bd:e7:8e:49:ec:03:ad:da:e8:5f:e3:7f: 0f:a2:7f:5f:29:7b:ad:9c:b2:f0:e2:72:36:97:68: 32:e9:01:25:5d:f1:eb:30:34:eb:59:bd:de:c4:d2: 8f:50:d8:79:18:f0:0b:e8:b0:18:cd:27:24:01:cc: a6:2e:9f:fa:cb:51:cf:33:b7:60:e0:a9:8e:25:13: d2:d6:f2:85:90:d1:dc:27:d6:34:07:75:bf:0d:be: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DD:1A:8E:59:F0:1C:DA:AD:A2:8F:3C:93:46:C9:0D:96:63:43:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:25:8a:3a:3c:da:ac:3d:63:3c:36:8b:c7:fc:6c:bc:35:92: f3:8f:53:10:bd:9b:68:bc:ea:8d:d7:08:e1:ce:82:be:a0:0f: 66:a2:fc:03:f0:6d:72:0a:4d:4e:eb:f2:10:f2:dd:cc:8e:09: 40:c0:96:18:4b:08:cb:84:02:7c:4e:95:5e:b0:bd:da:f4:17: 5e:49:88:b1:9d:fd:1c:57:60:5a:92:39:41:93:b7:9e:6d:22: 96:9b:4c:ae:78:1b:bd:4f:ea:cd:32:1f:6f:fa:b3:da:9a:b4: f3:7e:20:c3:90:c0:b9:13:a9:9b:7a:be:2f:97:fc:6e:c0:10: 02:e4:77:ff:ea:26:29:08:0f:79:fd:30:8b:a6:03:26:eb:57: 66:a1:ce:15:23:fa:bd:ad:f7:cd:67:e7:16:51:7a:a4:33:5d: b2:f8:18:89:d8:fc:e2:21:16:ac:97:36:e9:61:ae:a3:52:3b: f6:f5:56:21:b7:af:ac:cf:d6:fc:77:fe:56:e1:cc:a2:5b:55: 30:4d:c9:fb:46:a3:9a:e1:fa:13:89:1b:de:9f:94:d1:5e:9f: 93:ce:4b:bc:21:f6:60:c3:f8:f8:8a:6f:ea:32:97:e4:9a:e9: 46:14:1c:cc:c7:3a:6f:99:1e:3c:28:d5:da:86:79:87:91:e9: c4:56:97:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7Do95Lg0Qh5NJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk MWZiNWYyNGQtNDg5ZS00MGQxLTg1OTQtZTk1Y2QxMTc2YThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfTQC5/sGvLeOvnbeCx4ckj+Ero6En3YOVan bAnKnIGeUZDvYc5d49yoSG9ofWW268wXjH58XEjVYDofXlYJeT0AalbslFS10Hpv V8tsGeYwOKawZv8rVug9aMyTd0E5GqRMCM8gfLn9ET8xqAK6WE/Qs6PVQwE9xZNX EdFx8WGjGn1wgIz0RSw1LpG2SU8Ma08b5cX9fCxA8sNKwKx0WFy54V5+XRO9545J 7AOt2uhf438Pon9fKXutnLLw4nI2l2gy6QElXfHrMDTrWb3exNKPUNh5GPAL6LAY zSckAcymLp/6y1HPM7dg4KmOJRPS1vKFkNHcJ9Y0B3W/Db6+EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDdGo5Z8BzaraKPPJNGyQ2WY0ONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDBiOWM5ODItMDVkMS0z ZTRhLTg4NDEtZjJkN2RiZGIxMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEolijo82qw9Yzw2i8f8bLw1kvOPUxC9m2i86o3XCOHOgr6gD2ai/APw bXIKTU7r8hDy3cyOCUDAlhhLCMuEAnxOlV6wvdr0F15JiLGd/RxXYFqSOUGTt55t IpabTK54G71P6s0yH2/6s9qatPN+IMOQwLkTqZt6vi+X/G7AEALkd//qJikID3n9 MIumAybrV2ahzhUj+r2t981n5xZReqQzXbL4GInY/OIhFqyXNulhrqNSO/b1ViG3 r6zP1vx3/lbhzKJbVTBNyftGo5rh+hOJG96flNFen5POS7wh9mDD+PiKb+oyl+Sa 6UYUHMzHOm+ZHjwo1dqGeYeR6cRWl0c= -----END CERTIFICATE-----Generated at Sat Sep 5 06:31:00 2026 by rpki-client