$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa File: d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa (raw, json) Hash identifier: HFsjyysDnbfpNWwaw3e4HHQwbjs7ImIblKjJ4MoHRdk= Subject key identifier: 1F:BE:61:99:B2:01:86:C1:90:01:80:09:16:37:CF:48:47:FE:88:5F Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F9A687CD93E2C042FC31B9C00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 63199 IP address blocks: 148.153.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:7c:d9:3e:2c:04:2f:c3:1b:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=cd1f7666-c328-465d-9ed0-b5227aa89b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8d:72:f1:8a:5e:7a:54:f1:05:3f:78:67:07: 57:93:30:73:02:57:88:d7:97:42:d4:d9:51:a1:e8: ae:f5:46:01:0b:dc:0c:ba:8c:a3:fc:e8:39:f1:74: 16:d5:91:d9:7b:28:ab:00:95:51:d0:c7:c6:03:17: 7d:3b:6a:3b:bb:b7:1f:b0:6e:4d:fd:03:09:b0:19: 0e:27:e1:b2:d2:b3:1a:3f:9c:ea:77:2e:29:f7:05: 71:41:0a:94:46:ed:65:b0:28:f3:10:e0:da:4d:96: 28:07:71:f7:62:a6:79:97:5f:1a:94:ff:a7:fe:07: 9f:a6:8f:01:6a:26:87:e6:d5:4e:5b:56:45:51:ce: 4d:1f:5f:97:24:89:e3:2c:54:5e:77:db:37:46:aa: 6f:d4:d6:90:9f:32:fc:f1:bc:5c:85:43:dd:5e:62: 6f:d4:17:24:ed:d6:f4:f6:02:e0:1b:cf:fb:6c:38: 10:95:49:c9:30:17:69:6e:d9:a1:1c:01:7e:40:39: 50:ca:be:6b:09:ea:f3:c0:b9:58:fd:80:f0:29:57: f8:75:27:0e:48:17:b1:60:0a:02:b1:c9:4e:b7:27: ef:3b:c4:fc:1e:4e:7e:f0:18:57:40:ff:15:66:ac: 6c:34:93:cb:5f:20:20:42:39:3a:17:15:d9:3c:c7: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BE:61:99:B2:01:86:C1:90:01:80:09:16:37:CF:48:47:FE:88:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cc:30:a6:88:24:fc:a9:0f:05:73:fe:99:8e:ca:7c:f3:57: 34:80:8d:cd:51:c4:d9:25:6d:fb:8c:f2:3e:cb:1b:a8:bd:58: 23:f8:45:5f:aa:f0:bc:9b:38:47:dc:0c:4c:8c:04:09:48:56: 23:14:d1:84:1c:c4:68:6d:f9:25:68:4c:10:b9:80:a9:22:3a: d6:3d:d0:45:26:ce:be:11:73:43:c8:67:19:54:8d:23:19:4f: 71:42:91:9b:ad:8c:92:78:5a:76:e0:34:72:73:fb:21:c6:03: f8:22:a4:d0:94:9b:4b:c9:31:f1:43:ed:8e:d5:ed:d1:dc:9d: 94:d8:81:e7:04:79:08:5b:9e:19:1a:55:8c:3f:a4:0f:c8:02: f0:c1:d4:cd:57:1d:ad:ca:3c:1d:5b:1d:02:93:85:42:f4:15: e3:fb:6a:77:5a:c4:29:3a:fe:50:a9:77:ad:ca:03:1d:e9:c1: 16:3e:33:53:23:f3:42:3c:a0:fc:d7:c7:40:55:45:d6:27:16: c3:56:c0:19:84:44:53:85:72:cb:66:ac:e4:64:5f:7b:6d:b5: 76:e9:a9:f3:0b:d2:40:80:71:d6:5f:cf:52:00:7d:f7:76:8e: 5a:22:ed:25:44:8b:46:7d:ba:86:b8:5d:68:dc:1a:0b:86:ab: 86:a4:89:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHzZPiwEL8MbnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk Y2QxZjc2NjYtYzMyOC00NjVkLTllZDAtYjUyMjdhYTg5YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj41y8YpeelTxBT94ZwdXkzBzAleI15dC1NlR oeiu9UYBC9wMuoyj/Og58XQW1ZHZeyirAJVR0MfGAxd9O2o7u7cfsG5N/QMJsBkO J+Gy0rMaP5zqdy4p9wVxQQqURu1lsCjzEODaTZYoB3H3YqZ5l18alP+n/gefpo8B aiaH5tVOW1ZFUc5NH1+XJInjLFRed9s3Rqpv1NaQnzL88bxchUPdXmJv1Bck7db0 9gLgG8/7bDgQlUnJMBdpbtmhHAF+QDlQyr5rCerzwLlY/YDwKVf4dScOSBexYAoC sclOtyfvO8T8Hk5+8BhXQP8VZqxsNJPLXyAgQjk6FxXZPMf3FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB++YZmyAYbBkAGACRY3z0hH/ohfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZDhjM2I3YzUtZDYyYy0z ODJjLWE4ZTEtYmVlZjI3YjE2NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzMMKaIJPypDwVz/pmOynzzVzSAjc1RxNklbfuM8j7LG6i9WCP4RV+q 8LybOEfcDEyMBAlIViMU0YQcxGht+SVoTBC5gKkiOtY90EUmzr4Rc0PIZxlUjSMZ T3FCkZutjJJ4WnbgNHJz+yHGA/gipNCUm0vJMfFD7Y7V7dHcnZTYgecEeQhbnhka VYw/pA/IAvDB1M1XHa3KPB1bHQKThUL0FeP7andaxCk6/lCpd63KAx3pwRY+M1Mj 80I8oPzXx0BVRdYnFsNWwBmERFOFcstmrORkX3tttXbpqfML0kCAcdZfz1IAffd2 jloi7SVEi0Z9uoa4XWjcGguGq4akiYM= -----END CERTIFICATE-----Generated at Sat Oct 24 10:46:05 2026 by rpki-client