$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa File: 020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa (raw, json) Hash identifier: Xw5rfTqn7ivT9tkB/tBHohBFON+dGgLOLkHIUme0wSU= Subject key identifier: F2:AD:8B:2C:1A:63:34:42:84:30:F2:7A:55:8D:D7:E6:D6:87:A3:E4 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F497752AB8B2155C605EF2000 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63199 IP address blocks: 148.153.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:52:ab:8b:21:55:c6:05:ef:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2c02ee91-26bd-4ecf-82a2-74917d1a1062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:79:ee:b5:81:2a:66:db:6f:2f:7b:d9:8b: fa:e2:98:b4:96:b3:04:e7:52:7c:3b:bd:08:58:72: a4:03:25:12:f0:74:c4:e3:f6:56:ce:f5:61:35:28: 7b:b7:2b:de:69:39:2e:fe:d2:25:36:7e:d0:9a:14: e4:cb:51:23:bb:68:f5:bc:72:d9:56:c6:55:6b:6d: ff:d8:97:b7:75:3e:4a:e3:6c:69:6b:b1:bd:77:4f: 8d:6a:38:73:1c:fa:c2:7d:cb:f7:95:ee:b7:3c:99: 41:16:48:d7:ec:4a:7e:73:c7:60:37:e0:14:e9:f3: 29:86:19:9a:52:f9:a3:a1:22:0a:09:a2:0b:59:95: ba:06:b3:e5:20:e2:14:bf:f1:84:dc:76:c7:8c:2a: 65:53:e5:83:61:94:9a:c7:36:d8:8f:67:97:61:b9: 3d:f9:f7:b0:9d:d9:66:75:da:ec:94:c7:13:da:4d: 00:c2:92:8a:86:c2:08:54:ed:d1:af:d3:d7:a5:7f: da:7c:f2:a5:b0:e4:3e:77:7e:5d:44:eb:c8:75:1c: d2:60:4e:72:27:15:36:8d:67:f1:29:c8:b0:c3:ee: ac:23:6c:a8:11:e6:51:27:15:ec:ae:8c:62:f6:34: f1:97:8c:5b:40:6c:5b:6d:88:ce:8f:54:8e:af:7d: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AD:8B:2C:1A:63:34:42:84:30:F2:7A:55:8D:D7:E6:D6:87:A3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/020b59a2-a9aa-38cb-bc2b-d37c527b4283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:71:58:93:30:a0:ef:6a:98:6a:ec:6b:d2:35:06:3d:07:f6: 07:2e:4a:d4:6f:25:34:b2:a3:b7:2c:fc:7e:2d:d7:c2:7e:8a: d4:e6:38:9b:ab:e3:c4:26:fe:9b:e3:dc:26:a5:0d:90:74:aa: 5f:6c:d7:a4:b8:62:03:07:2d:45:9b:c4:e5:31:3c:b2:d7:9e: b7:2a:29:5e:45:d8:df:c9:fb:94:4f:bf:c0:1c:4d:43:71:f8: 80:20:c3:61:4f:48:b4:9c:43:1f:7b:d2:c4:da:c5:89:1f:cb: dc:a7:0f:f3:d8:51:af:93:a2:63:99:22:0c:42:4a:0b:57:7c: 90:3a:b5:39:ce:7b:e9:2f:1f:68:f1:ec:04:d5:74:af:bc:ec: 01:5f:04:fc:b3:25:bf:5b:03:00:c4:3b:cf:c2:fc:17:f2:bf: f7:6a:73:c9:82:20:4b:e4:26:e0:9d:70:76:de:d5:e0:4b:a9: 52:dd:a4:df:d0:20:eb:03:7b:02:23:3e:9d:b1:e2:5e:9a:f0: 46:eb:93:8b:4b:98:0f:14:9f:50:bd:83:cd:23:05:09:65:ce: d4:35:41:fd:1b:eb:04:1b:92:07:fb:53:27:18:f9:a9:f4:66: 60:d8:d3:d4:36:c4:7a:b0:84:9e:d5:78:25:17:80:ab:da:38: 16:ea:f6:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1KriyFVxgXvIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmMwMmVlOTEtMjZiZC00ZWNmLTgyYTItNzQ5MTdkMWExMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaB57rWBKmbbby972Yv64pi0lrME51J8O70I WHKkAyUS8HTE4/ZWzvVhNSh7tyveaTku/tIlNn7QmhTky1Eju2j1vHLZVsZVa23/ 2Je3dT5K42xpa7G9d0+NajhzHPrCfcv3le63PJlBFkjX7Ep+c8dgN+AU6fMphhma UvmjoSIKCaILWZW6BrPlIOIUv/GE3HbHjCplU+WDYZSaxzbYj2eXYbk9+fewndlm ddrslMcT2k0AwpKKhsIIVO3Rr9PXpX/afPKlsOQ+d35dROvIdRzSYE5yJxU2jWfx Kciww+6sI2yoEeZRJxXsroxi9jTxl4xbQGxbbYjOj1SOr30EbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKtiywaYzRChDDyelWN1+bWh6PkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDIwYjU5YTItYTlhYS0z OGNiLWJjMmItZDM3YzUyN2I0MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJxWJMwoO9qmGrsa9I1Bj0H9gcuStRvJTSyo7cs/H4t18J+itTmOJur 48Qm/pvj3CalDZB0ql9s16S4YgMHLUWbxOUxPLLXnrcqKV5F2N/J+5RPv8AcTUNx +IAgw2FPSLScQx970sTaxYkfy9ynD/PYUa+TomOZIgxCSgtXfJA6tTnOe+kvH2jx 7ATVdK+87AFfBPyzJb9bAwDEO8/C/Bfyv/dqc8mCIEvkJuCdcHbe1eBLqVLdpN/Q IOsDewIjPp2x4l6a8Ebrk4tLmA8Un1C9g80jBQllztQ1Qf0b6wQbkgf7UycY+an0 ZmDY09Q2xHqwhJ7VeCUXgKvaOBbq9rA= -----END CERTIFICATE-----Generated at Sat Sep 26 09:12:26 2026 by rpki-client