$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa File: 48dc100e-8d7e-3d30-90c2-6334f2764387.roa (raw, json) Hash identifier: opK/viWwu/bNYaVyKh2WfAA/5djl3ITccoZ0ekAGnU8= Subject key identifier: C1:F7:8F:E5:2D:A4:C9:56:50:63:9E:E2:AF:EF:8B:1D:8F:C9:59:79 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F655D803B3115E3E9C02DC120 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 63199 IP address blocks: 148.153.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:80:3b:31:15:e3:e9:c0:2d:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=23c3721d-bf5e-4beb-9b02-df0419486799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:b5:1b:1c:ea:11:de:c2:e8:a0:1f:2c:26: 73:56:25:14:89:ff:89:96:82:90:b3:68:f8:90:07: 77:86:ad:2d:87:b4:c1:89:ec:73:46:15:dd:05:a3: cd:d7:3c:33:14:db:a8:21:84:26:95:2a:9a:54:1a: a6:52:35:55:81:06:ad:20:e9:d9:c7:03:cb:31:aa: f3:55:52:27:a5:4c:8b:93:22:a4:95:79:01:0d:23: 5c:c1:19:7c:90:58:c5:b9:f8:15:c9:44:dd:9d:8c: 34:c4:f0:e4:6e:83:1c:4f:f2:cf:94:47:f5:d5:0b: 7a:17:51:57:5b:9e:1e:8c:e5:4b:4c:a5:94:1d:a6: 69:9c:56:54:fd:ff:3e:d2:63:fe:8f:33:c0:f9:3a: 30:9e:51:ee:8b:f8:52:50:d0:5b:78:77:2c:e4:71: 84:54:93:19:7b:14:87:2f:b4:07:2b:f5:f7:cb:f5: 94:cf:d6:4e:37:b2:7f:b6:e5:26:58:b0:1a:6c:21: 6d:90:75:55:f3:0b:0c:76:84:2c:51:e6:87:12:c0: fe:8d:4c:41:cc:44:50:51:c9:29:43:c3:94:03:42: 3e:bf:3c:3e:00:d6:ef:33:54:50:be:db:4c:cf:1a: e4:3d:00:da:eb:0b:48:9b:60:d2:c9:85:e4:96:cb: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:8F:E5:2D:A4:C9:56:50:63:9E:E2:AF:EF:8B:1D:8F:C9:59:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d3:63:49:ca:3a:cb:c5:4a:31:46:e6:64:58:23:83:74:3e: 5c:49:46:d8:3e:a6:18:f9:7f:74:c7:29:0c:30:d5:ea:28:62: 7d:f9:fe:a4:03:56:9a:41:cc:2b:0d:9a:04:54:dd:57:36:57: 87:85:25:b1:95:39:10:cf:8d:1e:d4:41:12:56:4b:1e:12:97: 97:a3:96:0f:c4:d4:a2:34:a4:80:c0:20:10:8e:08:00:83:c2: 60:3c:f5:6a:26:f9:8e:b4:db:f2:50:e1:88:a8:d8:77:ec:c5: 29:0c:96:c4:e8:6e:92:a8:c5:bc:c3:11:ab:c3:64:23:17:18: 48:c9:6e:97:5a:71:2d:6e:f2:d8:71:2c:75:a5:fa:0b:a3:27: 0e:4f:d7:72:7d:35:eb:f1:ea:b4:72:ba:66:1c:37:4a:87:be: ce:81:1e:86:d7:e1:05:ee:31:28:fe:17:fe:ec:e7:3d:1f:70: d3:0b:ae:e8:2c:89:c5:c5:59:a0:55:72:e4:b3:0f:f4:aa:00: 3a:1c:a0:16:0a:85:50:43:31:7a:ec:98:7f:61:34:37:ad:e0: 62:09:38:b2:f6:9e:b0:41:30:01:70:c0:30:15:85:80:66:4f: cc:01:80:85:ab:31:e0:79:7d:39:f3:3d:11:02:ee:41:ef:26: de:83:68:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYA7MRXj6cAtwSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MjNjMzcyMWQtYmY1ZS00YmViLTliMDItZGYwNDE5NDg2Nzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PG1GxzqEd7C6KAfLCZzViUUif+JloKQs2j4 kAd3hq0th7TBiexzRhXdBaPN1zwzFNuoIYQmlSqaVBqmUjVVgQatIOnZxwPLMarz VVInpUyLkyKklXkBDSNcwRl8kFjFufgVyUTdnYw0xPDkboMcT/LPlEf11Qt6F1FX W54ejOVLTKWUHaZpnFZU/f8+0mP+jzPA+TownlHui/hSUNBbeHcs5HGEVJMZexSH L7QHK/X3y/WUz9ZON7J/tuUmWLAabCFtkHVV8wsMdoQsUeaHEsD+jUxBzERQUckp Q8OUA0I+vzw+ANbvM1RQvttMzxrkPQDa6wtIm2DSyYXklstjBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH3j+UtpMlWUGOe4q/vix2PyVl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDhkYzEwMGUtOGQ3ZS0z ZDMwLTkwYzItNjMzNGYyNzY0Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnTY0nKOsvFSjFG5mRYI4N0PlxJRtg+phj5f3THKQww1eooYn35/qQD VppBzCsNmgRU3Vc2V4eFJbGVORDPjR7UQRJWSx4Sl5ejlg/E1KI0pIDAIBCOCACD wmA89Wom+Y602/JQ4Yio2HfsxSkMlsTobpKoxbzDEavDZCMXGEjJbpdacS1u8thx LHWl+gujJw5P13J9Nevx6rRyumYcN0qHvs6BHobX4QXuMSj+F/7s5z0fcNMLrugs icXFWaBVcuSzD/SqADocoBYKhVBDMXrsmH9hNDet4GIJOLL2nrBBMAFwwDAVhYBm T8wBgIWrMeB5fTnzPREC7kHvJt6DaG4= -----END CERTIFICATE-----Generated at Sat Oct 24 17:46:39 2026 by rpki-client