$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa File: cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa (raw, json) Hash identifier: W+j8xrGag5189/stfbUPf0t35knnJCTRetkUkaPNU8Q= Subject key identifier: 08:AA:D2:D9:E8:A1:38:86:68:F2:ED:F6:FD:6C:CD:1B:1B:B5:34:2F Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584DE6E5CF21E8F6A7C9D90D2E00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa Signing time: Thu 21 May 2026 01:00:25 +0000 ROA not before: Thu 21 May 2026 01:00:25 +0000 ROA not after: Wed 19 Aug 2026 01:00:25 +0000 asID: 63199 IP address blocks: 148.153.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:e5:cf:21:e8:f6:a7:c9:d9:0d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 21 01:00:25 2026 GMT Not After : Aug 19 01:00:25 2026 GMT Subject: CN=3f7b1bf4-981a-4e23-bd30-59afb569511a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:55:7f:ee:12:1b:49:eb:9f:6e:62:30:3f: a0:00:f7:30:67:7b:a9:64:20:0a:ba:58:14:e4:22: 17:ee:81:37:b6:9d:21:2c:6e:5e:f5:71:e1:7a:b8: c7:31:8e:29:9d:f3:ee:c6:69:80:38:f7:b9:ac:92: 42:bb:0b:b3:91:a2:72:c9:ef:6b:4a:11:be:46:9d: c5:25:7a:f1:f6:df:17:e9:c9:aa:bb:16:33:9f:8c: 4a:9e:23:3f:9f:5c:09:ca:f0:d8:09:41:56:2b:3c: 54:b2:18:1c:25:16:03:e6:d3:b6:dd:85:91:28:8b: f4:e4:2a:5d:8e:72:38:ca:b7:af:fc:e6:f3:11:2a: 65:f3:d7:ce:2b:ab:2e:8e:6c:ae:c9:27:d2:67:fc: 70:15:dc:15:2c:cf:6c:5f:39:80:5d:8a:78:38:9b: 9e:0b:a7:08:88:98:b1:58:06:2c:1e:c0:57:03:11: 70:68:de:61:b8:c8:a8:da:9d:4b:05:3d:61:6c:03: d9:0d:59:e8:bc:de:64:34:45:ed:2d:8a:2a:b6:fd: 7d:f7:84:1f:1b:5f:e3:09:62:03:23:52:1a:9d:67: 72:1a:ff:06:15:bb:e3:6f:28:a2:69:5b:37:16:1e: df:52:29:46:52:6f:5e:5e:17:00:bc:d9:76:cd:ce: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AA:D2:D9:E8:A1:38:86:68:F2:ED:F6:FD:6C:CD:1B:1B:B5:34:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:37:38:25:29:cf:a8:c4:56:97:a8:ea:c3:88:aa:fe:f6:c5: da:ee:2d:b0:12:48:8a:e3:41:1f:82:5c:04:5e:41:2d:0b:70: f6:3a:36:46:d1:d6:55:a2:04:6c:6d:b5:4e:cc:50:05:2e:fd: 84:01:84:3b:5e:65:f7:af:8d:25:6b:28:21:8c:8b:1f:d8:4a: 92:ed:25:58:d1:6e:e1:f3:e9:54:46:eb:4f:8c:41:6f:76:e9: c0:79:f3:8f:e5:c3:17:bb:ef:e4:43:95:27:3b:54:a9:88:f4: 35:25:65:f9:6b:d5:cc:75:46:2d:de:28:a7:a2:37:41:ee:ea: ab:8c:89:34:6a:25:2a:9c:be:83:59:f6:6f:8f:e2:87:18:8b: d2:43:be:97:3d:05:a9:0c:47:30:a1:7d:bd:7a:25:5b:56:6d: 55:43:26:0e:08:dd:06:e5:0e:e1:ce:fc:13:aa:18:76:40:3a: 8c:a8:d4:45:ac:05:0e:a2:79:1d:6c:a8:88:5c:8c:90:4e:41: 9d:87:0e:fb:0d:8a:30:4b:a1:62:14:25:22:18:ed:d6:e8:2c: 77:93:b7:a5:cf:bd:21:44:4d:f8:9d:48:63:56:f5:13:5d:fb: 58:5a:b7:c8:ca:dd:d6:3e:4a:c3:f3:e2:33:ca:41:14:bb:52: 6a:f5:b4:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3m5c8h6PanydkNLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDUyMTAxMDAyNVoXDTI2MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk M2Y3YjFiZjQtOTgxYS00ZTIzLWJkMzAtNTlhZmI1Njk1MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnClVf+4SG0nrn25iMD+gAPcwZ3upZCAKulgU 5CIX7oE3tp0hLG5e9XHherjHMY4pnfPuxmmAOPe5rJJCuwuzkaJyye9rShG+Rp3F JXrx9t8X6cmquxYzn4xKniM/n1wJyvDYCUFWKzxUshgcJRYD5tO23YWRKIv05Cpd jnI4yrev/ObzESpl89fOK6sujmyuySfSZ/xwFdwVLM9sXzmAXYp4OJueC6cIiJix WAYsHsBXAxFwaN5huMio2p1LBT1hbAPZDVnovN5kNEXtLYoqtv1994QfG1/jCWID I1IanWdyGv8GFbvjbyiiaVs3Fh7fUilGUm9eXhcAvNl2zc5krwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiq0tnooTiGaPLt9v1szRsbtTQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2RmMGRiZTMtYjRkYi0z OTliLWI2ZDItMmEyMjk4OThmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo3OCUpz6jEVpeo6sOIqv72xdruLbASSIrjQR+CXAReQS0LcPY6NkbR 1lWiBGxttU7MUAUu/YQBhDteZfevjSVrKCGMix/YSpLtJVjRbuHz6VRG60+MQW92 6cB584/lwxe77+RDlSc7VKmI9DUlZflr1cx1Ri3eKKeiN0Hu6quMiTRqJSqcvoNZ 9m+P4ocYi9JDvpc9BakMRzChfb16JVtWbVVDJg4I3QblDuHO/BOqGHZAOoyo1EWs BQ6ieR1sqIhcjJBOQZ2HDvsNijBLoWIUJSIY7dboLHeTt6XPvSFETfidSGNW9RNd +1hat8jK3dY+SsPz4jPKQRS7Umr1tII= -----END CERTIFICATE-----Generated at Thu Jun 4 12:04:22 2026 by rpki-client