$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa File: c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa (raw, json) Hash identifier: fR+aJEo1q+nXHPnvo99EYh15nsXM7otCsL2QNdex2CM= Subject key identifier: 54:58:D6:DC:32:60:C0:3C:1D:31:1B:EB:6B:A3:70:79:C9:8D:4F:00 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D100CF8F27B2F74A4B8E2AC00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 63199 IP address blocks: 148.153.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f8:f2:7b:2f:74:a4:b8:e2:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=032efea9-663e-4b34-a7fe-2f97d92b981f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:93:35:c6:a4:37:4e:b4:99:1e:0a:b4:71: 2a:78:dd:dd:62:ff:6d:b8:4b:09:0f:98:d7:89:61: 80:5f:0a:13:37:46:28:9e:61:cb:04:9e:8a:2a:8f: 32:93:97:4c:21:6a:3a:94:e0:68:09:10:ce:35:33: 16:7f:5b:96:c8:e0:68:9e:42:e4:87:b9:45:b6:9f: 29:fa:42:d5:d5:88:28:e5:88:20:49:28:8a:da:38: 22:29:a6:ef:80:5d:a5:40:8e:b2:41:ba:96:0c:48: d8:32:44:91:b4:ee:2f:97:5a:8b:a0:15:c7:13:34: 94:94:c2:37:be:cc:69:06:fd:a9:61:91:11:2a:7a: 1f:8d:4a:dc:ef:4d:b2:79:61:56:56:a0:8d:56:20: 20:40:65:05:2e:d6:d6:8c:ce:b6:c6:5d:42:44:54: 5b:15:1a:4f:46:b3:20:ee:d5:4f:aa:bd:98:38:b5: 03:9a:9c:90:60:0f:02:c8:be:32:80:63:ce:4d:e3: 1f:b1:3d:aa:1f:22:eb:8e:c1:ba:b9:d3:f2:65:e3: fb:80:18:62:2b:42:09:c6:e4:45:39:dd:d6:0e:c6: 2b:ff:5b:8e:f5:15:b5:85:0a:1e:c3:2a:fd:b7:bc: 22:46:5d:d0:a4:f7:68:8a:d0:68:17:86:0f:1d:15: 10:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:58:D6:DC:32:60:C0:3C:1D:31:1B:EB:6B:A3:70:79:C9:8D:4F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c2a2d3fe-5ded-3ddb-a749-8c021e36896d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:83:20:4f:60:7a:b5:af:3a:29:85:73:19:64:8f:a3:d3:d1: ac:86:21:88:01:0d:5e:fd:07:37:b3:49:02:45:1a:92:78:07: 75:ae:1a:e1:12:54:e7:35:97:a9:49:9c:9c:0e:f6:48:9d:0a: b9:23:5f:32:4d:20:68:77:f1:3a:b0:31:ec:bd:e9:f3:56:b1: 1c:e6:dd:43:ce:38:55:ec:2c:34:ce:44:39:65:fd:90:cd:c5: b3:f7:d4:b0:ae:70:ab:3f:5f:86:17:1d:be:3d:bb:16:b3:73: db:c2:89:08:72:e7:fd:d4:19:33:48:7c:dd:ac:b3:da:24:fc: 9c:74:0f:33:5b:fe:c0:6b:f4:fd:7a:f5:4c:de:2b:8c:f3:fa: 07:f0:78:35:33:fd:30:aa:91:f8:94:62:df:af:23:db:d9:85: b6:dd:6c:74:05:18:9e:b7:ac:d2:e0:27:6e:e5:f1:95:fe:93: da:23:c7:60:ce:64:e8:cc:34:35:ca:ae:4a:d7:47:c6:03:88: 98:9d:76:c4:63:08:4b:dc:69:f3:f4:dd:e2:44:70:40:3b:12: 54:6c:bb:94:f2:dc:89:69:f5:6c:ae:d7:3b:d2:a5:ab:07:3c: 06:fb:c1:e7:fb:5a:72:91:22:35:02:e9:0f:c4:38:50:1e:94: c5:38:bc:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDPjyey90pLjirAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk MDMyZWZlYTktNjYzZS00YjM0LWE3ZmUtMmY5N2Q5MmI5ODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVmTNcakN060mR4KtHEqeN3dYv9tuEsJD5jX iWGAXwoTN0YonmHLBJ6KKo8yk5dMIWo6lOBoCRDONTMWf1uWyOBonkLkh7lFtp8p +kLV1Ygo5YggSSiK2jgiKabvgF2lQI6yQbqWDEjYMkSRtO4vl1qLoBXHEzSUlMI3 vsxpBv2pYZERKnofjUrc702yeWFWVqCNViAgQGUFLtbWjM62xl1CRFRbFRpPRrMg 7tVPqr2YOLUDmpyQYA8CyL4ygGPOTeMfsT2qHyLrjsG6udPyZeP7gBhiK0IJxuRF Od3WDsYr/1uO9RW1hQoewyr9t7wiRl3QpPdoitBoF4YPHRUQUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRY1twyYMA8HTEb62ujcHnJjU8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzJhMmQzZmUtNWRlZC0z ZGRiLWE3NDktOGMwMjFlMzY4OTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJllMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmDIE9gerWvOimFcxlkj6PT0ayGIYgBDV79BzezSQJFGpJ4B3WuGuES VOc1l6lJnJwO9kidCrkjXzJNIGh38TqwMey96fNWsRzm3UPOOFXsLDTORDll/ZDN xbP31LCucKs/X4YXHb49uxazc9vCiQhy5/3UGTNIfN2ss9ok/Jx0DzNb/sBr9P16 9UzeK4zz+gfweDUz/TCqkfiUYt+vI9vZhbbdbHQFGJ63rNLgJ27l8ZX+k9ojx2DO ZOjMNDXKrkrXR8YDiJiddsRjCEvcafP03eJEcEA7ElRsu5Ty3Ilp9Wyu1zvSpasH PAb7wef7WnKRIjUC6Q/EOFAelMU4vBQ= -----END CERTIFICATE-----Generated at Thu Mar 5 20:45:14 2026 by rpki-client