$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa File: a5fade6e-275c-3ed2-a0be-b21ddef61294.roa (raw, json) Hash identifier: G4GA7OvQK8kuCmKyXLTe9RV8C6d5tmMXSPxH5gVZP0c= Subject key identifier: 9F:1B:D5:4C:F0:4C:D2:F5:57:C6:FF:01:D8:70:6D:17:D1:A0:38:C7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E04360A263A3A1E6798BBE800 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 63199 IP address blocks: 148.153.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:0a:26:3a:3a:1e:67:98:bb:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=f7338e5e-ec7f-4450-9b4d-e582976abb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:c6:ef:9b:2a:02:a9:c6:79:06:04:8f:28: df:e3:ff:1d:57:7e:17:b0:6e:84:0d:48:eb:1c:11: 60:4f:96:e9:a0:32:c4:58:3a:19:f9:4a:14:ba:a4: 32:ef:47:d0:fe:e3:38:79:88:30:4c:58:4a:23:f9: 06:1b:29:1a:29:08:30:6f:ed:85:0b:97:9c:bc:33: e5:ad:67:77:a6:f1:93:d4:c1:67:79:84:65:dd:70: 21:6e:cd:dd:37:84:a4:a1:23:b9:a1:96:2e:a6:0f: c1:99:b6:6c:2e:58:75:b3:9c:e9:72:b2:3b:8d:3b: a3:83:5d:94:7b:bf:b2:51:63:67:c6:3f:a7:fb:ac: 52:26:56:e4:8c:c6:97:8e:e4:55:c2:6a:38:ef:6b: 0f:94:90:c9:f8:63:c2:e7:78:74:5a:ca:3e:a0:0e: ee:bd:9b:b7:5b:36:57:df:d9:93:0e:b4:c6:2d:08: 24:33:ac:6a:4b:a3:fd:76:22:78:ba:94:28:11:b1: 57:8f:13:9a:22:01:75:b4:5d:d0:0c:3b:c3:d4:16: 58:e6:a0:e6:0f:aa:e3:8b:ca:82:5a:b9:b1:50:a5: c4:c3:89:db:10:38:95:60:47:ec:bb:f3:78:3e:18: 17:66:b0:1d:5b:20:0c:b0:37:48:5e:44:d8:b2:f7: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1B:D5:4C:F0:4C:D2:F5:57:C6:FF:01:D8:70:6D:17:D1:A0:38:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:98:aa:1e:fe:0b:ac:49:40:36:a8:9f:ce:0f:c5:32:38:8e: 7d:14:c3:40:24:4d:e4:f2:c0:74:55:7b:13:29:ad:3c:f3:84: 06:1a:89:80:3a:74:94:cf:2e:db:ac:86:73:07:0a:9a:8a:c2: 66:f7:35:27:93:c0:9a:5f:fd:f3:8d:30:1e:24:5f:56:78:4d: 01:b2:4e:ce:5e:1a:6c:49:56:16:a4:75:3b:4e:2a:c6:e3:bd: 91:4d:88:47:24:8c:2b:c8:f1:69:84:5d:3c:19:f6:44:f8:23: 68:71:f1:c6:29:78:c6:9c:31:5d:02:46:b3:35:c6:e1:d7:45: de:49:10:4f:73:c9:8f:65:61:8b:78:94:71:12:69:60:c4:5c: 22:62:40:45:3f:83:63:37:54:db:d0:69:00:d6:99:e3:0e:bb: 58:c8:cb:26:48:9c:91:63:04:17:85:b6:23:25:73:8b:d1:81: d8:29:08:c6:a9:30:88:ec:88:80:ab:ae:37:56:a1:e7:01:3d: 64:96:45:fe:2f:69:a6:41:52:d3:1d:14:95:ae:0c:41:ec:17: ad:b8:6a:bf:c2:25:ed:ee:e9:4f:72:f3:b2:b3:e9:ad:0f:c3: f4:99:28:77:c9:3a:d4:ab:63:a9:54:db:4b:07:72:cd:39:d9: 77:37:36:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENgomOjoeZ5i76AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZjczMzhlNWUtZWM3Zi00NDUwLTliNGQtZTU4Mjk3NmFiYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk7G75sqAqnGeQYEjyjf4/8dV34XsG6EDUjr HBFgT5bpoDLEWDoZ+UoUuqQy70fQ/uM4eYgwTFhKI/kGGykaKQgwb+2FC5ecvDPl rWd3pvGT1MFneYRl3XAhbs3dN4SkoSO5oZYupg/BmbZsLlh1s5zpcrI7jTujg12U e7+yUWNnxj+n+6xSJlbkjMaXjuRVwmo472sPlJDJ+GPC53h0Wso+oA7uvZu3WzZX 39mTDrTGLQgkM6xqS6P9diJ4upQoEbFXjxOaIgF1tF3QDDvD1BZY5qDmD6rji8qC WrmxUKXEw4nbEDiVYEfsu/N4PhgXZrAdWyAMsDdIXkTYsvcdMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8b1UzwTNL1V8b/AdhwbRfRoDjHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTVmYWRlNmUtMjc1Yy0z ZWQyLWEwYmUtYjIxZGRlZjYxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaYqh7+C6xJQDaon84PxTI4jn0Uw0AkTeTywHRVexMprTzzhAYaiYA6 dJTPLtushnMHCpqKwmb3NSeTwJpf/fONMB4kX1Z4TQGyTs5eGmxJVhakdTtOKsbj vZFNiEckjCvI8WmEXTwZ9kT4I2hx8cYpeMacMV0CRrM1xuHXRd5JEE9zyY9lYYt4 lHESaWDEXCJiQEU/g2M3VNvQaQDWmeMOu1jIyyZInJFjBBeFtiMlc4vRgdgpCMap MIjsiICrrjdWoecBPWSWRf4vaaZBUtMdFJWuDEHsF624ar/CJe3u6U9y87Kz6a0P w/SZKHfJOtSrY6lU20sHcs052Xc3Nu0= -----END CERTIFICATE-----Generated at Thu Jun 4 12:05:09 2026 by rpki-client