$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa File: 6984b833-7006-3068-befa-e5584294fc77.roa (raw, json) Hash identifier: qfOjxlrYK+PAekDHCX2MamGMA+aOpuYeY0h1BCu9Kyg= Subject key identifier: F2:56:2A:FD:F6:D7:C4:EC:99:DF:47:58:C7:02:AA:E5:FD:E1:62:3D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F655D804720FA640EC066AAC0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 63199 IP address blocks: 148.153.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:80:47:20:fa:64:0e:c0:66:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=47c0bb30-313f-4886-9d28-a126ebf61477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:af:81:64:79:30:34:a9:d8:ee:ca:c6:4f: 97:42:9d:90:53:cd:75:74:f7:3d:fc:f3:5f:ca:3b: 4e:a7:9d:a4:26:9d:f7:cf:3a:36:09:5a:93:4f:07: a5:6b:7b:a5:5b:cc:65:7e:20:a1:2b:fc:71:8e:97: 45:6d:34:62:4e:29:6f:4f:c9:05:3a:71:da:8b:e0: f8:c0:f8:ea:a1:39:70:24:b4:80:15:51:b3:57:a9: 61:b5:20:05:11:b3:c6:c9:a9:84:8c:c0:95:fe:3f: c7:2c:46:ed:96:ad:c4:73:01:e4:ee:f9:9e:75:bd: 26:87:3d:43:57:06:8a:24:f2:a1:84:81:ef:9e:db: eb:2e:f9:11:2a:8e:f9:b3:84:10:d2:fe:7f:59:47: 1a:27:83:49:77:a4:ff:e4:d1:83:c2:e5:74:61:8f: 25:1e:94:4d:03:c6:f8:69:22:30:b4:94:3e:3e:6a: 6e:f5:ff:37:c1:17:6d:6c:f8:40:c8:42:34:f7:87: e1:e1:65:d0:2c:d8:cf:fb:01:fd:27:df:4f:97:1b: 9e:a3:9d:08:00:40:b4:a6:c9:7c:71:c8:a9:b1:77: 40:93:2a:0e:ad:fe:b4:8d:36:3c:01:94:1e:cf:d6: 31:18:2d:d8:98:19:af:af:15:8c:f1:04:6c:38:1b: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:56:2A:FD:F6:D7:C4:EC:99:DF:47:58:C7:02:AA:E5:FD:E1:62:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:76:37:80:a5:66:47:bd:0d:1b:9f:bc:6b:15:63:9b:6e:6d: d8:d1:05:88:50:e2:dc:5c:ef:53:24:d1:fc:37:6c:76:03:65: 4d:a2:7c:4c:26:a6:a9:ce:1f:53:16:db:00:37:fb:9e:b4:c3: 10:f4:74:29:ce:04:0f:2f:39:91:44:38:e7:9c:80:06:f7:cf: 03:43:ed:dc:ea:70:43:72:70:c3:31:07:20:5c:69:c5:a3:5d: 34:b9:62:d9:e4:43:ce:0a:6e:aa:fe:f0:c9:b2:96:e0:36:4b: 3d:06:4c:92:c1:e5:50:a6:65:3c:b1:8f:df:f6:8c:cd:8e:41: 22:65:5b:b2:c9:c5:5e:ff:24:94:21:56:ed:b9:a5:ca:94:ec: cf:14:f7:de:8e:b1:4d:1f:98:41:da:d1:ed:0f:3e:97:3f:62: 3d:f5:b9:11:e7:32:ef:99:d5:d2:dd:21:6e:4f:af:89:52:cd: 37:81:9c:25:f8:73:97:3f:11:2f:b9:c3:eb:e4:1e:38:7a:30: 44:d0:70:34:f7:70:05:7e:96:a1:26:8e:28:ec:c0:17:05:32: 97:e9:c8:ce:d1:cb:80:0b:97:d7:12:58:35:e0:2d:ca:0e:c2: 81:6e:7b:13:26:69:fc:5a:8e:87:af:ef:46:97:de:59:d0:f6: 1f:96:c5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYBHIPpkDsBmqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NDdjMGJiMzAtMzEzZi00ODg2LTlkMjgtYTEyNmViZjYxNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDyvgWR5MDSp2O7Kxk+XQp2QU811dPc9/PNf yjtOp52kJp33zzo2CVqTTwela3ulW8xlfiChK/xxjpdFbTRiTilvT8kFOnHai+D4 wPjqoTlwJLSAFVGzV6lhtSAFEbPGyamEjMCV/j/HLEbtlq3EcwHk7vmedb0mhz1D VwaKJPKhhIHvntvrLvkRKo75s4QQ0v5/WUcaJ4NJd6T/5NGDwuV0YY8lHpRNA8b4 aSIwtJQ+Pmpu9f83wRdtbPhAyEI094fh4WXQLNjP+wH9J99Plxueo50IAEC0psl8 ccipsXdAkyoOrf60jTY8AZQez9YxGC3YmBmvrxWM8QRsOBsZFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJWKv3218Tsmd9HWMcCquX94WI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNjk4NGI4MzMtNzAwNi0z MDY4LWJlZmEtZTU1ODQyOTRmYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ2N4ClZke9DRufvGsVY5tubdjRBYhQ4txc71Mk0fw3bHYDZU2ifEwm pqnOH1MW2wA3+560wxD0dCnOBA8vOZFEOOecgAb3zwND7dzqcENycMMxByBcacWj XTS5YtnkQ84Kbqr+8MmyluA2Sz0GTJLB5VCmZTyxj9/2jM2OQSJlW7LJxV7/JJQh Vu25pcqU7M8U996OsU0fmEHa0e0PPpc/Yj31uRHnMu+Z1dLdIW5Pr4lSzTeBnCX4 c5c/ES+5w+vkHjh6METQcDT3cAV+lqEmjijswBcFMpfpyM7Ry4ALl9cSWDXgLcoO woFuexMmafxajoev70aX3lnQ9h+Wxfk= -----END CERTIFICATE-----Generated at Wed Oct 21 07:22:33 2026 by rpki-client