$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa File: cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa (raw, json) Hash identifier: zf7Rr1ppSn4IfPSuBGPocTwGueqNUKCY5OmpDqfkHd0= Subject key identifier: D4:16:87:E4:3E:EB:E9:01:AC:03:79:4F:12:25:B8:A6:E2:35:79:46 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EA79182445ECD723093D3B880 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63199 IP address blocks: 148.153.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:82:44:5e:cd:72:30:93:d3:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5e87b794-b417-429a-9caa-eb879b6007d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:76:2b:21:4a:f4:42:6d:35:c6:fa:38:8b:e8: d3:0d:cf:de:c7:4d:0e:47:0d:4f:62:0a:93:e4:14: 40:56:b4:92:3f:c5:60:d3:df:a0:ce:3e:2c:e5:da: 70:61:27:fa:58:b9:86:0f:bb:5f:c6:e5:8a:81:cb: 43:cf:30:2e:11:e2:f2:6a:47:80:3e:e0:ac:5f:13: 20:d1:f5:48:02:af:23:82:aa:60:68:78:6c:7a:92: 60:47:0f:91:cf:87:7f:f4:21:0f:fb:42:37:63:c7: db:cc:37:33:41:93:c1:a9:c6:5c:f0:c8:0f:e2:55: 0a:b2:47:d3:84:af:8f:0b:f4:27:05:8f:d6:5c:93: 23:b8:6a:e8:80:c4:97:92:b3:80:db:3d:f7:20:1a: 05:96:1a:ea:d4:3d:f0:4e:ab:96:6a:06:ad:78:40: 8f:f6:81:a4:cb:36:b3:8b:34:0c:71:08:8a:2b:80: 5e:b6:4c:ed:75:95:26:f9:96:a6:34:e7:ad:b3:13: 4b:de:8e:6f:32:55:d5:fc:68:21:1a:f1:32:37:44: 9c:59:1e:28:92:0f:db:40:d9:19:3d:0b:21:ed:18: bd:61:dd:ae:e9:11:e5:6f:29:cc:a3:7c:e9:31:e0: 0a:ed:bc:1c:45:cf:21:a1:35:4e:fb:08:68:b1:6f: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:16:87:E4:3E:EB:E9:01:AC:03:79:4F:12:25:B8:A6:E2:35:79:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:75:b5:67:cc:07:f5:c9:3d:ca:97:47:ea:8c:52:a2:53:7c: 16:26:b6:22:41:ab:50:1c:24:b4:b6:f6:ad:3c:74:32:5d:fa: 40:30:28:e0:5a:2c:bf:ee:9f:c2:a9:4b:c9:e6:cd:27:15:c1: 46:23:58:8b:66:1d:8a:b5:9c:70:ea:c9:7b:70:7b:6a:17:5e: fa:ad:45:46:3e:2f:62:f9:28:42:10:37:ca:e5:63:b4:84:68: 1a:57:f7:8d:4e:13:8d:ca:fd:b4:90:7e:12:8f:e0:bd:d5:82: 99:fc:9c:01:b9:70:17:c2:ac:a5:25:fa:11:21:42:72:e3:5a: bc:99:7c:a7:39:d9:b8:07:ea:3c:26:39:b6:29:0c:ea:6a:78: 40:b6:a7:51:32:e8:09:5c:27:25:c9:82:53:cc:fb:b6:e2:22: 2f:1b:35:f9:24:ab:f1:82:8d:78:0a:fe:d1:33:8e:70:19:f7: d5:df:d5:89:d1:35:c1:fe:12:8a:e7:18:57:d9:1a:22:b0:32: fd:d1:d0:46:6d:57:f4:00:b8:f2:74:a9:8c:32:a1:bd:ee:64: e0:de:62:b2:c1:df:7b:79:2d:da:31:35:00:b6:97:1f:78:bc: 03:e4:98:5a:83:40:e1:65:92:0f:8f:a3:8a:bb:f2:1e:cf:12: dc:97:61:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkYJEXs1yMJPTuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWU4N2I3OTQtYjQxNy00MjlhLTljYWEtZWI4NzliNjAwN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nYrIUr0Qm01xvo4i+jTDc/ex00ORw1PYgqT 5BRAVrSSP8Vg09+gzj4s5dpwYSf6WLmGD7tfxuWKgctDzzAuEeLyakeAPuCsXxMg 0fVIAq8jgqpgaHhsepJgRw+Rz4d/9CEP+0I3Y8fbzDczQZPBqcZc8MgP4lUKskfT hK+PC/QnBY/WXJMjuGrogMSXkrOA2z33IBoFlhrq1D3wTquWagateECP9oGkyzaz izQMcQiKK4BetkztdZUm+ZamNOetsxNL3o5vMlXV/GghGvEyN0ScWR4okg/bQNkZ PQsh7Ri9Yd2u6RHlbynMo3zpMeAK7bwcRc8hoTVO+whosW+h5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQWh+Q+6+kBrAN5TxIluKbiNXlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2RmMGRiZTMtYjRkYi0z OTliLWI2ZDItMmEyMjk4OThmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ1tWfMB/XJPcqXR+qMUqJTfBYmtiJBq1AcJLS29q08dDJd+kAwKOBa LL/un8KpS8nmzScVwUYjWItmHYq1nHDqyXtwe2oXXvqtRUY+L2L5KEIQN8rlY7SE aBpX941OE43K/bSQfhKP4L3Vgpn8nAG5cBfCrKUl+hEhQnLjWryZfKc52bgH6jwm ObYpDOpqeEC2p1Ey6AlcJyXJglPM+7biIi8bNfkkq/GCjXgK/tEzjnAZ99Xf1YnR NcH+EornGFfZGiKwMv3R0EZtV/QAuPJ0qYwyob3uZODeYrLB33t5LdoxNQC2lx94 vAPkmFqDQOFlkg+Po4q78h7PEtyXYfA= -----END CERTIFICATE-----Generated at Sat Sep 5 04:58:10 2026 by rpki-client