$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa File: ca4000da-8aab-337b-9ec7-04cc1a336133.roa (raw, json) Hash identifier: GBLpc6zpqWTEVKLXNZ/zc86Lyr0FNweMM+vX9N3kI4I= Subject key identifier: 71:CC:1F:6F:1F:1C:C8:2E:2D:B1:F9:29:17:A3:18:AF:DF:60:21:B0 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EE0C209A4EB136F474AE20C40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 63199 IP address blocks: 148.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:09:a4:eb:13:6f:47:4a:e2:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=4ea3efaa-d1de-442e-8fb9-70f89cba27f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6e:f5:67:a1:3e:3a:b1:1d:8b:5e:4d:ed:5f: df:ef:53:ac:06:5e:23:f6:4f:f9:6d:93:fd:09:0f: fe:48:81:06:fe:a5:95:72:1e:7d:f9:35:b1:5e:03: 0f:6f:92:31:d9:9e:b3:ab:4a:72:82:24:c9:af:b3: cf:21:ff:a4:10:1a:28:9b:94:9a:3f:e6:7a:b7:fb: 01:ad:00:13:bc:be:cf:de:13:67:b8:24:3d:81:ac: dc:37:b3:35:34:b7:a1:a0:2c:73:3f:52:eb:17:4b: 58:f9:a6:56:f0:98:95:c8:61:50:74:85:13:4c:c2: 1b:ef:b5:f2:a3:fc:4b:1d:ac:a9:ec:c5:a4:a2:bb: 1b:6f:c5:17:06:63:32:44:2d:37:90:83:17:4a:9e: cc:c9:e8:84:fb:4c:a2:20:a9:55:42:c5:a0:e4:bf: f8:ec:e3:bd:06:eb:1e:81:91:c5:52:21:9e:47:6e: 84:69:db:88:a7:72:d7:93:94:3c:bb:5c:29:9c:b0: 4d:74:ca:28:6a:7d:a0:1b:14:ea:85:b5:46:d3:24: 42:c1:83:aa:0f:02:97:0f:68:f0:eb:79:6c:78:40: 77:dc:43:e1:ed:c0:b1:70:c3:ca:33:90:48:ba:66: a4:eb:6e:fb:c6:ce:9b:82:8e:78:e7:af:1f:c6:62: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:1F:6F:1F:1C:C8:2E:2D:B1:F9:29:17:A3:18:AF:DF:60:21:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:81:e8:c2:ae:6c:60:ee:f4:83:03:f8:b0:d5:c8:3a:27:bd: f8:9e:18:4d:2b:b0:4f:84:01:d2:a8:04:f5:07:cd:32:3f:1f: 97:4f:64:cf:8a:75:6a:9d:d6:bd:dd:33:a6:e3:2c:41:79:1b: b3:98:c9:67:44:b4:a7:08:b8:fe:45:e6:af:2d:d2:c9:ad:7c: 21:dc:ef:2a:76:e5:68:df:d9:5a:c4:b7:3d:9d:ca:b5:cf:9c: c9:49:bd:f7:3a:66:0e:0b:dd:04:9c:e9:44:41:e5:ea:66:37: 7b:73:e9:23:0c:45:c7:3c:15:99:3b:1e:6d:96:1a:45:4b:70: 2a:08:ed:49:4f:20:c4:73:9e:d7:cd:1e:a5:90:9f:8d:f1:bd: 45:08:b2:e9:2c:84:68:f4:5c:34:cd:c8:84:f3:ae:f0:60:5a: 4d:e0:a9:0f:67:91:56:53:2c:26:6c:47:5e:ac:c9:ef:99:09: cb:9c:5e:b0:f6:f3:63:56:cf:95:7e:d9:65:0f:f6:c6:72:0d: ec:bc:b4:ab:20:08:26:36:94:04:da:40:e9:e2:69:6c:da:5f: 4f:62:86:94:7f:21:69:c9:5a:a9:56:9f:9a:6d:9b:8f:54:48: 02:c3:2a:34:e2:59:50:bc:84:22:06:e2:ab:1e:cc:d1:2c:4b: fd:9f:37:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgmk6xNvR0riDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NGVhM2VmYWEtZDFkZS00NDJlLThmYjktNzBmODljYmEyN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG71Z6E+OrEdi15N7V/f71OsBl4j9k/5bZP9 CQ/+SIEG/qWVch59+TWxXgMPb5Ix2Z6zq0pygiTJr7PPIf+kEBoom5SaP+Z6t/sB rQATvL7P3hNnuCQ9gazcN7M1NLehoCxzP1LrF0tY+aZW8JiVyGFQdIUTTMIb77Xy o/xLHayp7MWkorsbb8UXBmMyRC03kIMXSp7MyeiE+0yiIKlVQsWg5L/47OO9Buse gZHFUiGeR26EaduIp3LXk5Q8u1wpnLBNdMooan2gGxTqhbVG0yRCwYOqDwKXD2jw 63lseEB33EPh7cCxcMPKM5BIumak6277xs6bgo54568fxmLkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHMH28fHMguLbH5KRejGK/fYCGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2E0MDAwZGEtOGFhYi0z MzdiLTllYzctMDRjYzFhMzM2MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuB6MKubGDu9IMD+LDVyDonvfieGE0rsE+EAdKoBPUHzTI/H5dPZM+K dWqd1r3dM6bjLEF5G7OYyWdEtKcIuP5F5q8t0smtfCHc7yp25Wjf2VrEtz2dyrXP nMlJvfc6Zg4L3QSc6URB5epmN3tz6SMMRcc8FZk7Hm2WGkVLcCoI7UlPIMRzntfN HqWQn43xvUUIsukshGj0XDTNyITzrvBgWk3gqQ9nkVZTLCZsR16sye+ZCcucXrD2 82NWz5V+2WUP9sZyDey8tKsgCCY2lATaQOniaWzaX09ihpR/IWnJWqlWn5ptm49U SALDKjTiWVC8hCIG4qsezNEsS/2fN+s= -----END CERTIFICATE-----Generated at Sat Sep 5 04:58:58 2026 by rpki-client