$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa File: a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa (raw, json) Hash identifier: z+0ZKdY/uXvaWCFY2WS+RgWnM+jj9+WNYdk4+wBNKvU= Subject key identifier: D1:E5:4B:80:68:CE:16:27:B1:60:03:A4:CD:32:4E:37:5D:07:51:DD Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E0A6FF80F3B26400122682088 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 63199 IP address blocks: 148.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f8:0f:3b:26:40:01:22:68:20:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=bc6004d6-fab7-4f65-8604-19ca13b571e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:39:cf:94:78:32:31:7e:51:5c:d1:d4:11: 44:30:e2:3d:82:18:54:c1:dc:94:1b:85:27:a2:e1: 3e:78:0b:70:3a:c2:fc:b2:4b:fa:9f:59:ac:f2:24: dc:cb:52:ac:5d:ca:7b:bc:87:30:75:a6:7a:7a:f5: a5:5f:4f:f7:d2:44:c6:f2:fe:d3:3f:17:c3:bb:a4: 33:1b:a4:92:ea:cb:6f:eb:d9:40:eb:f7:ea:bb:a3: 57:7f:bb:0a:c2:6d:28:a2:e5:b2:62:38:b9:94:02: 55:ab:ce:a3:1e:19:21:e2:fa:f8:a5:8e:10:2d:e8: ca:9f:9a:aa:1f:d2:e0:7f:9b:85:28:21:dd:28:9a: 55:f8:81:bf:71:89:50:c6:eb:20:cf:d1:9f:6a:18: cb:0f:71:fe:8c:f0:f4:c6:43:e7:23:cb:94:f5:12: 7a:a0:d1:01:98:20:ca:42:29:86:b2:11:31:67:89: 37:61:f0:21:d9:af:e0:ac:b7:5d:5d:02:ae:a0:de: 2c:99:85:57:af:f4:82:38:fc:87:b6:37:ae:07:8c: 2d:c3:ce:95:da:19:28:26:18:2e:ee:7d:b3:29:15: f7:c5:90:e4:c0:7a:d3:1b:2e:7c:d0:20:bd:61:34: cd:bb:f4:c1:74:8b:23:e1:83:87:34:11:6f:a3:01: 45:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E5:4B:80:68:CE:16:27:B1:60:03:A4:CD:32:4E:37:5D:07:51:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:df:38:6b:82:36:01:b4:7f:3c:ad:fd:e8:46:0e:31:f1:2b: 68:ac:c3:d7:aa:60:9f:42:3e:15:41:cc:4b:b5:64:aa:65:62: 32:52:70:75:3b:37:d7:af:42:0c:1a:1e:7b:4e:6d:23:b4:e9: 56:e4:87:0e:7a:5f:dc:76:7c:e6:37:00:52:49:1e:f5:89:a2: 65:20:70:72:a4:6b:0d:82:ef:fa:f7:ef:87:c5:c6:8e:fe:fd: 2f:75:6b:a2:5c:13:e3:cf:64:ec:0d:dc:f9:1e:af:23:51:67: b7:59:a6:48:83:4e:c5:ae:35:cd:96:c6:23:3e:03:9d:94:06: 94:f7:31:09:b7:d0:29:b1:6c:50:46:45:00:ac:63:10:28:60: 51:b9:14:6b:5e:6e:28:7a:7a:a6:58:56:11:7a:cb:8a:1f:94: ab:28:87:e3:21:24:c2:26:6a:f7:ed:bb:87:26:81:37:fb:0a: 41:03:1c:50:9d:42:af:c1:fd:69:4e:e5:e6:01:9e:b7:75:b4: 4d:c7:1b:73:8e:d6:5b:0f:43:02:2c:32:5f:be:fb:b4:0e:91: cf:37:10:d5:e5:61:e7:33:d6:c5:00:a6:5a:3b:6d:63:bb:2e: ba:19:1c:70:21:90:af:bf:c4:52:66:28:ca:f6:b0:4a:7f:ef: 54:ef:56:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb/gPOyZAASJoIIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk YmM2MDA0ZDYtZmFiNy00ZjY1LTg2MDQtMTljYTEzYjU3MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQg5z5R4MjF+UVzR1BFEMOI9ghhUwdyUG4Un ouE+eAtwOsL8skv6n1ms8iTcy1KsXcp7vIcwdaZ6evWlX0/30kTG8v7TPxfDu6Qz G6SS6stv69lA6/fqu6NXf7sKwm0oouWyYji5lAJVq86jHhkh4vr4pY4QLejKn5qq H9Lgf5uFKCHdKJpV+IG/cYlQxusgz9GfahjLD3H+jPD0xkPnI8uU9RJ6oNEBmCDK QimGshExZ4k3YfAh2a/grLddXQKuoN4smYVXr/SCOPyHtjeuB4wtw86V2hkoJhgu 7n2zKRX3xZDkwHrTGy580CC9YTTNu/TBdIsj4YOHNBFvowFF/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHlS4BozhYnsWADpM0yTjddB1HdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTdmODU2ZDItNDFkNi0z NmViLTk2MGEtY2MxNWZjZTllMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPfOGuCNgG0fzyt/ehGDjHxK2isw9eqYJ9CPhVBzEu1ZKplYjJScHU7 N9evQgwaHntObSO06Vbkhw56X9x2fOY3AFJJHvWJomUgcHKkaw2C7/r374fFxo7+ /S91a6JcE+PPZOwN3PkeryNRZ7dZpkiDTsWuNc2WxiM+A52UBpT3MQm30CmxbFBG RQCsYxAoYFG5FGtebih6eqZYVhF6y4oflKsoh+MhJMImavftu4cmgTf7CkEDHFCd Qq/B/WlO5eYBnrd1tE3HG3OO1lsPQwIsMl+++7QOkc83ENXlYecz1sUAplo7bWO7 LroZHHAhkK+/xFJmKMr2sEp/71TvVkc= -----END CERTIFICATE-----Generated at Thu Jun 4 12:04:22 2026 by rpki-client