
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa
File: c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa (raw, json)
Hash identifier: d9pOaaK2ZjbwU6TIQqnkLkqHlnwNNV5g+xCyaceqOXs=
Subject key identifier: 6E:79:18:4E:86:25:62:5A:63:46:7E:57:EF:79:26:D5:DF:56:B7:EF
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F4328584DF0AB3DB7406B32799A826980
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa
Signing time: Sun 24 May 2026 13:00:30 +0000
ROA not before: Sun 24 May 2026 13:00:30 +0000
ROA not after: Sat 22 Aug 2026 13:00:30 +0000
asID: 63199
IP address blocks: 148.153.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f0:ab:3d:b7:40:6b:32:79:9a:82:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: May 24 13:00:30 2026 GMT
Not After : Aug 22 13:00:30 2026 GMT
Subject: CN=b209777b-f78a-44f0-bc77-5bba5ce49084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:38:93:ff:41:b0:04:06:17:83:8a:3a:28:
3c:80:c5:bf:89:e8:d4:93:3e:d5:22:a6:e7:7a:4f:
cf:dd:ab:d2:fe:20:19:90:bc:ad:92:7a:c8:7a:14:
20:92:be:fc:db:cd:d1:46:8a:42:fa:da:02:a2:b3:
92:81:bb:93:d0:45:5c:03:99:e2:90:56:83:44:75:
c1:90:f8:f5:fa:52:f2:be:41:ef:80:40:65:85:ce:
fc:e6:be:97:b2:a6:34:a0:f5:85:b1:f0:89:6f:d5:
56:05:d0:27:be:58:26:9e:3d:db:45:ba:82:3d:24:
c5:ee:f7:ce:a2:63:d0:05:7e:5a:74:ec:fd:1e:da:
61:a9:62:8f:76:92:ad:6f:69:9f:09:3b:c2:4d:1b:
ba:51:e6:56:3b:7c:f5:86:e1:18:44:94:21:1f:58:
fb:d0:c7:1e:b0:ae:59:83:7a:36:04:8e:ca:e8:7c:
a4:19:3f:68:9a:ba:dc:ac:09:4d:e0:1d:cd:85:90:
dd:b3:68:4c:2d:2e:6b:36:9f:19:95:50:d5:46:cf:
81:f0:c6:a0:06:2f:76:bb:07:4b:30:43:94:1d:94:
1e:40:2e:0c:2a:41:ee:4c:33:f4:e1:8d:c1:8e:57:
52:18:b0:14:e9:ea:cb:d7:26:92:95:ac:b1:8a:87:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:18:4E:86:25:62:5A:63:46:7E:57:EF:79:26:D5:DF:56:B7:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:20:6f:bb:f3:8d:82:70:03:a1:1f:67:d3:85:7f:b7:4b:b1:
77:b2:8e:e9:ad:1b:76:0c:ad:2c:82:cd:2d:eb:6f:3f:c0:33:
c4:a6:44:de:fd:05:58:18:6a:cc:10:3d:98:be:93:aa:66:c2:
27:ff:11:57:c2:5e:13:e7:85:64:d9:dd:5c:97:06:09:b3:ca:
93:d7:40:64:ff:4a:8a:98:97:11:ac:c6:76:ac:34:e3:99:14:
54:69:49:9d:bf:78:c5:d5:8f:39:62:de:9f:bb:cd:34:bf:b1:
35:0e:91:d7:16:78:ca:37:fb:5d:fb:8a:ff:d3:1b:e9:48:cf:
63:fd:d3:7a:3e:ad:10:90:5c:6e:f7:8e:f0:dc:6a:8b:85:9a:
8e:99:91:94:e6:2f:b4:95:85:80:61:0b:95:14:05:4c:08:7b:
0d:98:8a:1b:bb:f4:e3:0e:0e:03:7c:70:b6:2e:23:23:58:40:
0a:2f:1c:14:fe:5d:56:7e:f1:de:b5:72:c8:b1:d8:39:a4:ad:
4e:8b:63:e0:59:ff:44:28:2a:60:15:13:73:60:df:dc:9d:f7:
f0:35:22:17:c0:79:f0:1a:bf:0d:17:70:8e:df:e4:41:82:37:
b9:8e:46:2c:b3:2e:3e:b4:4d:dc:00:c1:52:25:80:06:b1:4c:
0e:6a:64:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wqz23QGsyeZqCaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk
YjIwOTc3N2ItZjc4YS00NGYwLWJjNzctNWJiYTVjZTQ5MDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFg4k/9BsAQGF4OKOig8gMW/iejUkz7VIqbn
ek/P3avS/iAZkLytknrIehQgkr78283RRopC+toCorOSgbuT0EVcA5nikFaDRHXB
kPj1+lLyvkHvgEBlhc785r6XsqY0oPWFsfCJb9VWBdAnvlgmnj3bRbqCPSTF7vfO
omPQBX5adOz9HtphqWKPdpKtb2mfCTvCTRu6UeZWO3z1huEYRJQhH1j70McesK5Z
g3o2BI7K6HykGT9omrrcrAlN4B3NhZDds2hMLS5rNp8ZlVDVRs+B8MagBi92uwdL
MEOUHZQeQC4MKkHuTDP04Y3BjldSGLAU6erL1yaSlayxiocA0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG55GE6GJWJaY0Z+V+95JtXfVrfvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzJhMmQzZmUtNWRlZC0z
ZGRiLWE3NDktOGMwMjFlMzY4OTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJllMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQgb7vzjYJwA6EfZ9OFf7dLsXeyjumtG3YMrSyCzS3rbz/AM8SmRN79
BVgYaswQPZi+k6pmwif/EVfCXhPnhWTZ3VyXBgmzypPXQGT/SoqYlxGsxnasNOOZ
FFRpSZ2/eMXVjzli3p+7zTS/sTUOkdcWeMo3+137iv/TG+lIz2P903o+rRCQXG73
jvDcaouFmo6ZkZTmL7SVhYBhC5UUBUwIew2Yihu79OMODgN8cLYuIyNYQAovHBT+
XVZ+8d61csix2DmkrU6LY+BZ/0QoKmAVE3Ng39yd9/A1IhfAefAavw0XcI7f5EGC
N7mORiyzLj60TdwAwVIlgAaxTA5qZLU=
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:04:09 2026 by rpki-client