$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa File: 6984b833-7006-3068-befa-e5584294fc77.roa (raw, json) Hash identifier: 8e8euQ4AaAvNdlpygkPKSqm19cMr13HGFu1vGufNq08= Subject key identifier: 88:80:EB:15:39:07:88:4A:A8:B0:0C:44:3F:7F:40:E5:1D:42:A0:17 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EC371C9A6A78D0E0EC52FFB00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 63199 IP address blocks: 148.153.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:c9:a6:a7:8d:0e:0e:c5:2f:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=02fa6304-e0f8-4408-87d0-7f2a0445beef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:71:e6:dd:de:15:a5:53:e0:c2:ae:77:37: dd:96:98:0b:01:6e:08:da:5f:fc:9b:f5:ad:a3:03: b6:ae:ab:29:47:68:90:a8:9d:e1:ad:e3:cc:0e:d1: 25:fe:1e:03:88:f6:ca:b3:91:7d:58:cf:c6:d1:aa: 40:ef:14:54:5e:06:f1:4d:9d:55:e3:f6:0f:21:a0: 96:19:b2:85:04:7e:59:7a:7f:98:88:ef:37:31:e7: 66:67:27:f6:85:6d:75:4c:77:00:64:75:31:ab:30: 0b:38:ee:2b:17:70:11:88:24:76:00:a0:b8:c4:4c: 48:50:6d:45:b3:8e:68:0a:b2:76:42:a7:21:0d:97: cb:ee:46:3d:eb:5b:ab:83:7c:f9:c0:a8:ee:9f:12: 05:d6:2b:e3:20:ae:76:43:8f:68:46:b6:f1:6f:96: f5:9b:da:35:50:98:af:a3:33:06:7f:7e:90:0a:05: 14:99:64:6c:8e:77:72:5d:a1:b1:ad:91:44:86:6b: 71:60:2d:2f:a7:9a:31:ec:bc:a7:f3:46:ab:50:1a: 0e:55:10:81:ff:50:2e:44:7a:54:43:c0:36:bd:4a: f2:4f:0b:f8:b1:d3:1e:1c:73:73:e9:21:cc:c1:a5: 64:09:15:25:0f:1c:49:a7:90:91:00:2d:ce:70:b6: 2a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:80:EB:15:39:07:88:4A:A8:B0:0C:44:3F:7F:40:E5:1D:42:A0:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/6984b833-7006-3068-befa-e5584294fc77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:42:a1:c1:fe:f1:c7:66:10:d7:f1:c6:4d:11:06:58:79:20: 74:ba:b0:55:3e:74:65:06:28:29:15:7c:33:90:9f:23:e8:23: 84:96:ec:d0:b1:b5:85:68:e0:4b:46:c4:a9:18:75:7e:64:37: fa:43:df:7e:c6:ec:04:2e:18:9b:f4:c1:9e:fc:28:29:c8:0e: 4b:01:af:7b:a8:d5:55:6c:92:37:25:30:7d:d6:99:e2:67:13: aa:a2:66:30:df:e6:c5:6f:42:1d:57:f6:96:fb:ed:24:74:c5: 12:f7:b4:17:86:7e:93:a8:f4:d7:8f:87:3b:7e:5d:11:01:f1: 14:8e:6d:8e:2b:6b:cd:29:06:8f:a5:d3:2d:60:8c:65:96:9d: e2:7a:4b:ad:86:89:72:d9:c9:aa:d4:4c:43:bb:14:1b:e5:df: bc:65:5a:ec:c8:62:05:5f:ee:24:c9:d8:9e:0f:ac:b2:73:06: 03:02:21:b0:7a:4c:c2:45:50:81:50:70:27:bf:40:39:9a:1d: 22:63:38:3a:9a:99:f6:e6:30:fe:28:8d:53:37:a3:34:2c:c9: 07:40:2d:ac:8c:8c:47:c8:7c:b5:20:af:ba:87:d6:61:e4:6b: 71:64:c0:6f:e2:13:f5:73:5e:8d:89:ad:e9:e5:4d:eb:da:56: 39:a1:7e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dccmmp40ODsUv+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MDJmYTYzMDQtZTBmOC00NDA4LTg3ZDAtN2YyYTA0NDViZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyRx5t3eFaVT4MKudzfdlpgLAW4I2l/8m/Wt owO2rqspR2iQqJ3hrePMDtEl/h4DiPbKs5F9WM/G0apA7xRUXgbxTZ1V4/YPIaCW GbKFBH5Zen+YiO83MedmZyf2hW11THcAZHUxqzALOO4rF3ARiCR2AKC4xExIUG1F s45oCrJ2QqchDZfL7kY961urg3z5wKjunxIF1ivjIK52Q49oRrbxb5b1m9o1UJiv ozMGf36QCgUUmWRsjndyXaGxrZFEhmtxYC0vp5ox7Lyn80arUBoOVRCB/1AuRHpU Q8A2vUryTwv4sdMeHHNz6SHMwaVkCRUlDxxJp5CRAC3OcLYqEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiA6xU5B4hKqLAMRD9/QOUdQqAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNjk4NGI4MzMtNzAwNi0z MDY4LWJlZmEtZTU1ODQyOTRmYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdCocH+8cdmENfxxk0RBlh5IHS6sFU+dGUGKCkVfDOQnyPoI4SW7NCx tYVo4EtGxKkYdX5kN/pD337G7AQuGJv0wZ78KCnIDksBr3uo1VVskjclMH3WmeJn E6qiZjDf5sVvQh1X9pb77SR0xRL3tBeGfpOo9NePhzt+XREB8RSObY4ra80pBo+l 0y1gjGWWneJ6S62GiXLZyarUTEO7FBvl37xlWuzIYgVf7iTJ2J4PrLJzBgMCIbB6 TMJFUIFQcCe/QDmaHSJjODqamfbmMP4ojVM3ozQsyQdALayMjEfIfLUgr7qH1mHk a3FkwG/iE/VzXo2JrenlTevaVjmhfkI= -----END CERTIFICATE-----Generated at Sat Sep 5 04:30:45 2026 by rpki-client