$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa File: cef491ba-6998-36c3-9897-80eae0b6f79b.roa (raw, json) Hash identifier: 3x5T/Z7QdzZsVE48OPvOUjuTwKaf/AgwTLERXrJ+vdA= Subject key identifier: DB:F1:60:02:60:5D:84:8D:88:08:C4:90:A3:52:C6:D1:B1:0D:2A:76 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EA8EC3DF776097C085DB2CE80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 63199 IP address blocks: 148.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:3d:f7:76:09:7c:08:5d:b2:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=97d73a47-d20a-44c1-8a22-fea11ffb0724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cc:a2:7c:45:7e:1b:c1:77:92:d8:8b:a4:ed: 86:a1:18:9c:b9:e4:5f:07:de:96:96:4f:65:22:d5: e0:ae:ce:ff:fa:a6:23:e6:47:a6:78:2e:20:03:84: 97:43:3b:f4:7c:ed:16:1f:6e:11:26:6b:f8:c9:02: 66:49:2a:93:d7:96:cc:6f:de:15:e0:f0:a4:bc:6f: 0d:a8:0b:e9:16:2b:4c:b7:59:3c:4f:38:2c:85:b5: 1d:d1:a0:1a:d1:a6:f8:ab:9c:69:f1:fd:5e:7a:65: 24:e4:ea:b3:48:68:46:87:60:ff:b3:0f:4d:f9:d8: 1d:ae:b6:16:29:a7:75:74:e6:55:86:58:2a:69:2b: 5b:b9:e8:b9:60:99:1a:75:99:02:ae:db:a3:47:24: 7d:29:9e:e4:cb:14:ab:d2:56:16:38:6b:ce:b8:e5: e8:41:d1:f4:99:28:fd:d6:f8:56:62:20:dd:90:cb: d2:f5:af:e4:60:ac:f7:85:da:d6:c2:27:55:cb:a0: b4:e3:67:e8:01:e3:78:d3:31:4c:3d:af:35:be:19: 7d:a3:6d:43:5c:99:87:a8:e6:27:12:e2:a9:ae:bd: 82:ff:71:a3:f8:54:a7:af:b0:35:05:c6:0a:d6:fa: 22:99:bc:4e:23:06:8a:e3:43:e0:9d:31:cd:92:09: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F1:60:02:60:5D:84:8D:88:08:C4:90:A3:52:C6:D1:B1:0D:2A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:45:ae:bf:66:8c:6c:88:25:15:ff:60:91:0b:37:20:67:66: a0:26:2e:a2:cd:71:f2:12:3c:29:6d:9f:15:47:27:38:c4:63: 13:b7:f3:69:64:a2:82:3a:ee:08:51:78:f9:84:f9:a1:b9:dd: 1a:9f:b6:50:18:cc:60:04:4d:4d:df:98:17:30:5a:84:a6:76: 6f:96:c7:bc:bf:b2:58:08:82:7a:9e:98:56:0a:10:d6:c7:59: 5f:18:f7:42:f2:97:35:70:cb:d1:e5:51:df:9d:73:1f:11:07: 1c:7a:ad:8c:3d:ed:66:eb:8f:22:d2:1e:fc:6d:f5:3a:64:26: 3f:c2:c4:19:30:9d:f4:f9:d0:49:6a:e1:0e:4f:af:9c:64:a8: 66:b3:a6:85:17:c6:0d:41:ab:e6:dc:aa:f5:30:00:1e:5b:75: 9e:9a:10:0e:ee:f3:4e:bb:94:be:8f:8b:57:8a:26:55:b0:9a: 89:7c:42:39:c4:b7:46:e6:2e:dd:46:16:bb:9a:e1:9f:e8:dc: b2:b0:8d:66:ee:65:01:b5:86:d8:67:95:77:d2:8a:92:e5:02: 2c:e4:c8:3e:a9:28:ec:82:62:f1:e9:96:68:d6:ef:43:f3:b8: 8e:06:f8:ac:9c:89:1d:59:c6:86:31:ff:98:f6:a0:2c:c8:68: 4a:a9:ef:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7D33dgl8CF2yzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk OTdkNzNhNDctZDIwYS00NGMxLThhMjItZmVhMTFmZmIwNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMyifEV+G8F3ktiLpO2GoRicueRfB96Wlk9l ItXgrs7/+qYj5kemeC4gA4SXQzv0fO0WH24RJmv4yQJmSSqT15bMb94V4PCkvG8N qAvpFitMt1k8TzgshbUd0aAa0ab4q5xp8f1eemUk5OqzSGhGh2D/sw9N+dgdrrYW Kad1dOZVhlgqaStbuei5YJkadZkCrtujRyR9KZ7kyxSr0lYWOGvOuOXoQdH0mSj9 1vhWYiDdkMvS9a/kYKz3hdrWwidVy6C042foAeN40zFMPa81vhl9o21DXJmHqOYn EuKprr2C/3Gj+FSnr7A1BcYK1voimbxOIwaK40PgnTHNkgntVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvxYAJgXYSNiAjEkKNSxtGxDSp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2VmNDkxYmEtNjk5OC0z NmMzLTk4OTctODBlYWUwYjZmNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhFrr9mjGyIJRX/YJELNyBnZqAmLqLNcfISPCltnxVHJzjEYxO382lk ooI67ghRePmE+aG53RqftlAYzGAETU3fmBcwWoSmdm+Wx7y/slgIgnqemFYKENbH WV8Y90LylzVwy9HlUd+dcx8RBxx6rYw97WbrjyLSHvxt9TpkJj/CxBkwnfT50Elq 4Q5Pr5xkqGazpoUXxg1Bq+bcqvUwAB5bdZ6aEA7u8067lL6Pi1eKJlWwmol8QjnE t0bmLt1GFrua4Z/o3LKwjWbuZQG1hthnlXfSipLlAizkyD6pKOyCYvHplmjW70Pz uI4G+KyciR1ZxoYx/5j2oCzIaEqp7yo= -----END CERTIFICATE-----Generated at Sat Sep 5 04:59:45 2026 by rpki-client