$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa File: d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa (raw, json) Hash identifier: vRwmyAK+bDul2B42rPGG/lw6lgZgmxR4x+rzASHokv4= Subject key identifier: 9C:09:AD:96:EB:7F:29:D9:34:99:D6:7E:7D:F9:FA:55:76:B5:D1:BD Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EF71777B0CA62DAE8C87B0E40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 63199 IP address blocks: 148.153.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:77:b0:ca:62:da:e8:c8:7b:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=f8019620-ed54-4b96-b0e0-63c09b3309fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:95:22:d4:d4:3f:a1:22:64:55:99:9b:ed: e0:e0:a0:23:db:73:4d:9c:b4:ca:9e:ba:99:ad:59: 1e:b1:0a:ff:c7:92:0d:4c:76:2e:ed:07:46:93:59: 00:2b:35:f2:50:58:8f:61:ef:ee:55:bc:46:64:26: a1:67:a1:aa:ad:8c:a1:ba:3c:29:76:2e:fb:07:61: c5:ce:e4:12:68:e3:85:b3:1f:23:e8:78:ac:fb:97: 05:0a:2a:a5:23:bc:97:52:a1:b9:a9:39:a2:9d:92: 61:a7:0c:74:53:a9:36:f9:9e:de:b5:21:b8:c7:61: 22:83:e8:ad:32:d8:e4:dc:0a:3a:ba:5d:33:06:78: 1c:57:e0:82:56:5b:0e:3f:8d:b8:db:4c:c9:f4:88: cb:f9:de:a4:c1:3c:f1:ee:f3:39:da:03:9d:c3:ea: eb:65:b9:58:eb:9a:2e:0e:b1:d2:2d:ef:10:07:09: 70:5c:9e:15:db:c3:74:ba:89:dd:91:e4:b7:c0:73: 40:4d:6f:d2:4d:1b:de:dc:37:c7:cb:94:86:af:2f: d0:4e:70:96:1a:25:b3:5d:ea:d0:39:80:09:2d:9d: 40:ac:ac:54:fa:1c:ca:ae:f8:95:43:66:1c:64:8b: bc:73:9a:6a:99:b7:d7:cd:20:19:ba:44:c5:6a:67: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:09:AD:96:EB:7F:29:D9:34:99:D6:7E:7D:F9:FA:55:76:B5:D1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/d8c3b7c5-d62c-382c-a8e1-beef27b16475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0b:9a:86:34:74:ce:4d:fb:ff:0b:71:a0:ae:95:5d:5b:21: fa:ae:a8:a2:20:0a:0f:bb:3c:55:bd:f6:55:92:58:87:a0:5a: 95:52:ca:b9:79:91:8b:c5:97:58:2d:4a:89:c4:a1:59:43:e2: 5e:fa:3b:15:97:33:58:f8:64:c2:a6:7d:e9:06:f8:4a:23:b7: f9:51:48:39:b1:8e:d3:f4:aa:bb:8b:c7:38:87:eb:5b:18:eb: 5d:11:46:46:12:a2:f9:f2:40:2b:94:62:15:f6:ac:f6:c3:76: 67:c3:4d:b5:17:8f:19:53:a8:12:bf:b8:3d:49:58:aa:01:7b: bc:f3:91:fb:0f:51:cc:68:07:bb:83:8e:d6:82:ad:05:32:68: 6a:65:7f:ca:d9:c6:2b:57:3c:b5:c5:1b:0a:e9:09:54:24:06: d8:38:ec:3f:3e:d9:e1:58:1e:5d:7a:11:99:cf:73:67:a7:d8: d0:c2:4a:95:e6:75:d7:4a:8f:a9:a9:0b:a3:55:d5:de:95:ad: 0a:e5:b4:d1:4a:a1:17:af:fc:33:5b:3c:83:14:81:a5:76:53: 08:b9:f6:f5:78:9d:b1:5b:f8:3d:5a:ce:3c:3b:f5:e0:1a:fe: 01:c8:5b:03:69:ae:07:42:72:ae:28:8f:6c:2d:7a:4f:80:c2: 57:d6:0e:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3ewymLa6Mh7DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjgwMTk2MjAtZWQ1NC00Yjk2LWIwZTAtNjNjMDliMzMwOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY+VItTUP6EiZFWZm+3g4KAj23NNnLTKnrqZ rVkesQr/x5INTHYu7QdGk1kAKzXyUFiPYe/uVbxGZCahZ6GqrYyhujwpdi77B2HF zuQSaOOFsx8j6His+5cFCiqlI7yXUqG5qTminZJhpwx0U6k2+Z7etSG4x2Eig+it Mtjk3Ao6ul0zBngcV+CCVlsOP42420zJ9IjL+d6kwTzx7vM52gOdw+rrZblY65ou DrHSLe8QBwlwXJ4V28N0uondkeS3wHNATW/STRve3DfHy5SGry/QTnCWGiWzXerQ OYAJLZ1ArKxU+hzKrviVQ2YcZIu8c5pqmbfXzSAZukTFamepVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwJrZbrfynZNJnWfn35+lV2tdG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZDhjM2I3YzUtZDYyYy0z ODJjLWE4ZTEtYmVlZjI3YjE2NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMLmoY0dM5N+/8LcaCulV1bIfquqKIgCg+7PFW99lWSWIegWpVSyrl5 kYvFl1gtSonEoVlD4l76OxWXM1j4ZMKmfekG+Eojt/lRSDmxjtP0qruLxziH61sY 610RRkYSovnyQCuUYhX2rPbDdmfDTbUXjxlTqBK/uD1JWKoBe7zzkfsPUcxoB7uD jtaCrQUyaGplf8rZxitXPLXFGwrpCVQkBtg47D8+2eFYHl16EZnPc2en2NDCSpXm dddKj6mpC6NV1d6VrQrltNFKoRev/DNbPIMUgaV2Uwi59vV4nbFb+D1azjw79eAa /gHIWwNprgdCcq4oj2wtek+AwlfWDqI= -----END CERTIFICATE-----Generated at Sat Sep 5 06:28:51 2026 by rpki-client