$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa File: 88f21b14-08fd-3634-835b-99b37c6e1f52.roa (raw, json) Hash identifier: lx3AqpBiwX0pWW3qt+Ic8NHyDXyqsqWhxAl9kDFpjxE= Subject key identifier: 27:A5:CB:B0:A3:B0:25:A8:95:27:D8:EC:CB:92:D6:AA:1A:E3:9D:54 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EB8471B6C4D7311B303E6D9A8 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 63199 IP address blocks: 148.153.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:1b:6c:4d:73:11:b3:03:e6:d9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=d99e7210-90b7-4dc8-ae20-7be189c2c29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:71:c3:0e:90:bd:35:0a:c5:f1:ff:02:f9: cb:ba:7c:3b:d6:33:f3:39:66:1c:94:b5:fe:0b:ae: 62:ea:47:5f:13:d5:33:7f:97:f6:e1:a9:31:a0:9b: 0e:d1:15:e7:fe:d9:45:c4:cc:e1:e8:8e:91:59:d9: 0c:f2:9b:7a:ac:40:cc:b5:ed:9a:a7:eb:54:90:f3: 69:13:a3:5a:01:ea:a8:fd:b4:a7:06:f2:ed:ee:7a: 87:15:a4:71:f1:05:36:37:dd:35:2a:aa:bf:c3:7b: 4d:90:39:81:88:51:9f:85:11:bf:c3:ea:10:0d:08: 14:74:41:22:82:97:93:d7:e9:99:c2:dd:18:73:75: d3:60:c2:08:25:ec:76:48:72:27:9d:c5:93:12:94: 88:e4:fb:85:c6:dc:0c:06:06:6e:cc:1e:4b:4e:f2: 77:c7:69:77:b3:69:49:c2:70:7f:86:f9:6e:fd:5a: 20:20:b8:e1:30:56:3e:88:63:97:96:61:1a:47:e7: 25:ad:1e:06:ed:d3:1d:f8:08:64:44:ba:f6:8b:0d: 6f:e2:78:e0:25:67:ac:11:50:ec:ae:3f:26:c0:b1: 24:b4:91:a8:9a:10:71:b7:38:cc:7e:1f:8e:f3:06: 6d:98:59:47:2b:fb:25:bd:99:a2:31:a2:bd:fd:32: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A5:CB:B0:A3:B0:25:A8:95:27:D8:EC:CB:92:D6:AA:1A:E3:9D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/88f21b14-08fd-3634-835b-99b37c6e1f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:77:5d:6b:bd:7a:b8:46:bd:23:84:69:98:55:22:ba:52:f5: 07:ab:63:7b:40:be:9c:06:48:5f:08:e4:87:ba:4f:27:74:dc: 74:26:8d:1a:26:50:7b:76:7b:0d:5a:92:9b:27:58:6b:0a:84: b7:f4:57:fd:f5:21:ba:b9:38:bb:42:e0:d3:6d:1a:27:54:74: 15:63:35:23:d3:ce:b4:00:ee:51:84:3d:23:58:ab:86:18:77: d1:c7:e9:b8:48:07:01:b9:f8:99:3c:d5:17:70:f9:7a:9c:c4: 3c:46:a2:5d:40:97:f9:e7:1b:9f:b8:57:67:ad:46:21:09:a4: c7:0e:45:54:52:fc:62:f4:61:0d:05:66:a7:35:2d:2f:13:3a: a9:b4:02:0d:13:a3:60:26:50:33:cb:7c:8d:59:72:6f:e0:ae: a5:a7:fa:a6:3b:57:a8:42:71:d2:33:bd:44:51:2b:98:b8:91: 84:15:ff:f9:ab:46:d2:72:c5:5c:5a:95:2f:02:89:60:0c:5f: ec:ea:28:18:f0:95:95:f0:20:54:22:5e:0b:96:68:72:b8:6a: 1b:4a:98:d4:f9:e4:23:a0:77:28:50:eb:a5:67:99:af:dc:d7: 75:ff:a8:8f:06:84:64:ef:2d:e0:b6:88:6f:a6:52:29:c2:50: c5:7b:2b:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64RxtsTXMRswPm2agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDk5ZTcyMTAtOTBiNy00ZGM4LWFlMjAtN2JlMTg5YzJjMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmZxww6QvTUKxfH/AvnLunw71jPzOWYclLX+ C65i6kdfE9Uzf5f24akxoJsO0RXn/tlFxMzh6I6RWdkM8pt6rEDMte2ap+tUkPNp E6NaAeqo/bSnBvLt7nqHFaRx8QU2N901Kqq/w3tNkDmBiFGfhRG/w+oQDQgUdEEi gpeT1+mZwt0Yc3XTYMIIJex2SHInncWTEpSI5PuFxtwMBgZuzB5LTvJ3x2l3s2lJ wnB/hvlu/VogILjhMFY+iGOXlmEaR+clrR4G7dMd+AhkRLr2iw1v4njgJWesEVDs rj8mwLEktJGomhBxtzjMfh+O8wZtmFlHK/slvZmiMaK9/TK58wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCely7CjsCWolSfY7MuS1qoa451UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvODhmMjFiMTQtMDhmZC0z NjM0LTgzNWItOTliMzdjNmUxZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJl+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp3XWu9erhGvSOEaZhVIrpS9QerY3tAvpwGSF8I5Ie6Tyd03HQmjRom UHt2ew1akpsnWGsKhLf0V/31Ibq5OLtC4NNtGidUdBVjNSPTzrQA7lGEPSNYq4YY d9HH6bhIBwG5+Jk81Rdw+XqcxDxGol1Al/nnG5+4V2etRiEJpMcORVRS/GL0YQ0F Zqc1LS8TOqm0Ag0To2AmUDPLfI1Zcm/grqWn+qY7V6hCcdIzvURRK5i4kYQV//mr RtJyxVxalS8CiWAMX+zqKBjwlZXwIFQiXguWaHK4ahtKmNT55COgdyhQ66Vnma/c 13X/qI8GhGTvLeC2iG+mUinCUMV7K5w= -----END CERTIFICATE-----Generated at Sat Sep 5 05:03:07 2026 by rpki-client