$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa File: 04adc8be-6949-381f-85ec-0ef42f2d5286.roa (raw, json) Hash identifier: okCM6DHWozwhjmhgYTVmdN7PAKSvki/y+BiZOob0X1o= Subject key identifier: 1B:C3:69:66:55:58:95:99:E9:D3:38:7E:7D:4B:FE:92:88:87:3C:5E Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D40CA5BE7DBB4A063CFE2CEC0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 63199 IP address blocks: 148.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5b:e7:db:b4:a0:63:cf:e2:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=b8f042a5-d1b8-4868-9b30-424b044b8f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:9d:64:c2:13:d5:9b:6a:40:19:07:bd:dd: 77:e7:a8:1a:32:9a:40:ee:47:58:c7:99:b7:78:3a: 37:26:68:a1:b7:71:95:8c:26:72:cf:a4:8c:ef:ba: 64:15:e4:6e:a9:41:d5:3f:8c:52:5c:cc:1d:af:92: 85:dc:4c:9c:c9:96:b5:09:b5:67:d9:a0:34:48:aa: 53:25:92:f4:a5:f9:ba:e2:61:aa:ab:fb:4e:f9:6a: 18:28:03:79:c0:34:ba:7a:1c:45:b6:cd:e0:af:53: d2:f9:f2:2e:b0:fc:fa:3f:26:00:1e:77:99:aa:0d: 41:05:c9:89:1e:1a:63:53:56:09:eb:fb:80:bd:9c: 3b:c1:e0:11:36:24:85:fe:b9:e9:ea:da:a5:a5:12: c2:29:56:95:6e:a7:0c:c3:da:a8:89:2f:ed:1b:f1: 64:b6:87:d9:cf:03:7c:8c:c9:ca:ad:f4:a0:75:84: 5e:ae:9c:fd:5e:e0:c6:fb:e0:07:2b:a2:53:e7:5c: 01:71:cd:b6:a0:c2:2e:d9:e7:3c:a7:17:9e:93:48: 30:00:02:f2:7e:f1:cf:03:a0:32:26:78:37:5d:ee: bb:2f:33:82:00:0a:c0:73:ec:9a:62:9a:5e:2a:b1: 1b:ab:f1:a4:e4:e2:45:74:d9:06:bd:9a:a0:51:7d: 11:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:69:66:55:58:95:99:E9:D3:38:7E:7D:4B:FE:92:88:87:3C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/04adc8be-6949-381f-85ec-0ef42f2d5286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9e:1f:00:9f:7c:66:0c:60:dc:f8:77:91:54:5f:99:f6:2b: b8:6e:5e:23:c1:ad:6a:31:67:b3:09:91:9d:7c:5b:4b:dd:fe: 1a:56:b3:74:34:f6:d2:97:5f:c2:02:85:df:8d:f1:c1:dc:f3: 09:d7:39:d7:fd:3a:32:4a:14:43:1c:6b:6a:f8:52:a2:02:06: a4:a0:6b:32:7b:28:6e:c4:1f:52:fe:50:ee:f8:c2:dd:65:a6: 00:20:8c:eb:77:b0:f3:80:b3:f7:f2:8c:30:d2:58:81:fd:d0: a1:31:7d:99:57:02:b6:15:c1:4f:6d:f7:a3:57:37:5b:4a:28: d0:dd:fb:3a:bf:86:64:4a:9f:5f:e1:6c:9c:a0:60:6a:9a:82: 96:b0:8a:74:b1:9b:32:af:ef:e4:b7:f6:dc:86:5a:92:f2:ae: d2:11:fa:cc:2e:66:82:59:24:14:89:a5:08:76:8a:d8:a0:71: a5:6b:53:be:ad:3d:6e:97:39:ac:91:5d:d5:55:eb:7b:09:29: d6:71:2e:eb:d2:cb:f2:dd:09:bf:00:9b:41:44:64:ac:c3:91: 0f:ea:1e:6e:bb:bf:d1:1d:57:54:73:3c:66:85:75:87:97:30: 8f:22:b5:a8:87:6a:60:d0:e5:51:12:34:93:37:14:29:c9:d4: 74:09:86:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aylvn27SgY8/izsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YjhmMDQyYTUtZDFiOC00ODY4LTliMzAtNDI0YjA0NGI4ZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e+dZMIT1ZtqQBkHvd1356gaMppA7kdYx5m3 eDo3Jmiht3GVjCZyz6SM77pkFeRuqUHVP4xSXMwdr5KF3EycyZa1CbVn2aA0SKpT JZL0pfm64mGqq/tO+WoYKAN5wDS6ehxFts3gr1PS+fIusPz6PyYAHneZqg1BBcmJ HhpjU1YJ6/uAvZw7weARNiSF/rnp6tqlpRLCKVaVbqcMw9qoiS/tG/FktofZzwN8 jMnKrfSgdYRerpz9XuDG++AHK6JT51wBcc22oMIu2ec8pxeek0gwAALyfvHPA6Ay Jng3Xe67LzOCAArAc+yaYppeKrEbq/Gk5OJFdNkGvZqgUX0RaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvDaWZVWJWZ6dM4fn1L/pKIhzxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDRhZGM4YmUtNjk0OS0z ODFmLTg1ZWMtMGVmNDJmMmQ1Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWeHwCffGYMYNz4d5FUX5n2K7huXiPBrWoxZ7MJkZ18W0vd/hpWs3Q0 9tKXX8IChd+N8cHc8wnXOdf9OjJKFEMca2r4UqICBqSgazJ7KG7EH1L+UO74wt1l pgAgjOt3sPOAs/fyjDDSWIH90KExfZlXArYVwU9t96NXN1tKKNDd+zq/hmRKn1/h bJygYGqagpawinSxmzKv7+S39tyGWpLyrtIR+swuZoJZJBSJpQh2itigcaVrU76t PW6XOayRXdVV63sJKdZxLuvSy/LdCb8Am0FEZKzDkQ/qHm67v9EdV1RzPGaFdYeX MI8itaiHamDQ5VESNJM3FCnJ1HQJhn4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:41 2026 by rpki-client