$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa File: ca4000da-8aab-337b-9ec7-04cc1a336133.roa (raw, json) Hash identifier: BbKT7P0+1L69RfgBf4FbBbaKF9el5hk04Juz4pUCWGA= Subject key identifier: 9E:E8:D6:1C:27:41:22:07:9B:94:07:89:EF:66:4F:FC:E4:1D:BD:AF Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F82ADBC24DFB50AE798DDE300 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 63199 IP address blocks: 148.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:bc:24:df:b5:0a:e7:98:dd:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=5d70aff4-4d7b-463c-bd37-d5f39c085ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:d9:93:6d:9c:f1:eb:59:fe:15:3e:20:18: 7c:5b:47:e6:70:43:eb:ca:0c:0c:ee:39:65:20:81: 54:2c:39:2d:36:73:f4:cf:72:7a:d4:f6:b8:87:88: b9:e4:12:9d:23:c1:d0:46:85:a7:d3:9e:5f:af:96: b7:42:ee:30:98:b7:8d:4b:72:58:71:e7:bc:ca:c9: 2f:78:94:31:7d:f9:d2:e2:fd:da:58:6e:ef:bc:5f: 08:aa:cd:ad:30:bb:07:ab:8c:7d:66:56:b5:95:92: de:a8:2d:66:13:b9:02:19:db:62:ce:71:71:27:dc: ba:e9:94:89:40:26:34:a4:ac:7b:fa:b2:a1:63:9c: ec:04:2c:61:1e:07:0a:ca:c4:d8:c3:8a:94:b3:29: c6:1b:0c:a9:bb:9d:0b:67:75:65:95:27:80:1a:f7: ae:1a:a0:01:41:5d:c6:08:41:d2:0d:8b:05:12:e6: 22:44:bb:10:0f:7e:4a:5a:80:97:e2:26:c0:73:95: 08:26:57:94:51:52:9d:62:d8:72:ad:17:09:74:9c: 84:11:1e:89:a9:d4:f9:23:f0:b5:bd:8b:1a:07:97: ee:09:3e:1b:69:5d:91:2e:9a:c0:17:12:70:dd:46: a2:24:c7:d6:b8:85:91:f4:78:b8:0f:70:a3:4c:2e: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E8:D6:1C:27:41:22:07:9B:94:07:89:EF:66:4F:FC:E4:1D:BD:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ca4000da-8aab-337b-9ec7-04cc1a336133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e0:96:96:7d:65:91:17:6d:76:8c:0e:b1:ff:11:1c:b6:e1: 99:d2:ee:1d:06:de:1b:3b:c1:87:d5:b7:a5:7c:55:f5:ea:03: db:35:7e:d5:06:a1:b3:0b:38:8e:e9:66:ac:49:f0:f9:d5:a6: 31:e4:96:a2:c1:64:fb:72:71:a8:d7:de:ec:ef:7f:1d:d8:26: a7:99:3e:1d:ca:fb:fb:23:16:2e:d1:56:b6:17:18:41:2b:4b: 6c:df:26:7e:fa:2d:ce:b6:f4:53:8e:39:0a:09:18:ad:ae:d5: 9b:76:2d:3d:a4:ae:89:bb:b7:8e:0a:13:84:04:23:75:09:1d: ed:89:25:14:3f:3b:a9:30:48:2a:59:c8:27:e6:10:4e:91:bb: 98:f3:0e:e2:af:81:84:88:9a:b3:c9:20:f2:00:e0:16:ef:76: 02:c0:1d:94:96:d7:3e:ff:44:41:1a:7c:da:83:37:a5:9c:b4: b4:00:4d:65:c4:4b:2e:00:7d:ac:4a:38:6a:0b:47:f0:f5:62: 05:52:9b:a9:06:67:65:2c:0f:2f:79:df:85:f8:e7:5b:8e:f0: c8:7d:42:1e:a3:5c:aa:18:23:a9:7e:e3:07:db:00:37:4a:99: 9a:75:79:d8:b0:29:86:73:ab:92:f7:27:03:05:db:38:f0:52: 4c:01:02:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Crbwk37UK55jd4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk NWQ3MGFmZjQtNGQ3Yi00NjNjLWJkMzctZDVmMzljMDg1YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXPZk22c8etZ/hU+IBh8W0fmcEPrygwM7jll IIFULDktNnP0z3J61Pa4h4i55BKdI8HQRoWn055fr5a3Qu4wmLeNS3JYcee8yskv eJQxffnS4v3aWG7vvF8Iqs2tMLsHq4x9Zla1lZLeqC1mE7kCGdtiznFxJ9y66ZSJ QCY0pKx7+rKhY5zsBCxhHgcKysTYw4qUsynGGwypu50LZ3VllSeAGveuGqABQV3G CEHSDYsFEuYiRLsQD35KWoCX4ibAc5UIJleUUVKdYthyrRcJdJyEER6JqdT5I/C1 vYsaB5fuCT4baV2RLprAFxJw3UaiJMfWuIWR9Hi4D3CjTC6iaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7o1hwnQSIHm5QHie9mT/zkHb2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2E0MDAwZGEtOGFhYi0z MzdiLTllYzctMDRjYzFhMzM2MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTglpZ9ZZEXbXaMDrH/ERy24ZnS7h0G3hs7wYfVt6V8VfXqA9s1ftUG obMLOI7pZqxJ8PnVpjHklqLBZPtycajX3uzvfx3YJqeZPh3K+/sjFi7RVrYXGEEr S2zfJn76Lc629FOOOQoJGK2u1Zt2LT2krom7t44KE4QEI3UJHe2JJRQ/O6kwSCpZ yCfmEE6Ru5jzDuKvgYSImrPJIPIA4BbvdgLAHZSW1z7/REEafNqDN6WctLQATWXE Sy4AfaxKOGoLR/D1YgVSm6kGZ2UsDy9534X451uO8Mh9Qh6jXKoYI6l+4wfbADdK mZp1ediwKYZzq5L3JwMF2zjwUkwBArE= -----END CERTIFICATE-----Generated at Sun Oct 25 06:39:16 2026 by rpki-client