$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa File: 16c03017-bbc8-3176-81e9-84ec549cc974.roa (raw, json) Hash identifier: YigWDREl+ZG01fDpK369WthMAYPbyPeaKgNDHkNFWXk= Subject key identifier: 89:39:44:FC:78:34:00:4E:C5:7A:44:88:84:B7:66:C7:7A:FF:87:6D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F497752DBCFAED51FE92BCB80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63199 IP address blocks: 148.153.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:52:db:cf:ae:d5:1f:e9:2b:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6fd247a3-234f-48a4-b10f-7fce19172b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:61:0e:eb:ff:52:9e:4b:68:29:50:21:f9: cf:f2:3f:3a:0a:78:98:67:fa:53:60:8c:cd:40:d4: 45:86:ee:19:c4:4a:3a:53:b1:79:da:e7:01:12:f1: f2:4e:58:1b:53:2f:aa:cc:87:a1:de:86:d5:52:fd: 65:b1:65:80:b5:e0:22:46:15:ef:bb:54:ab:9c:d1: 77:b3:7e:36:98:67:45:cd:26:de:b5:44:b5:a6:fe: a6:b2:f4:86:9e:f0:90:f5:50:47:25:73:5e:e8:38: e5:bc:b7:1c:d3:bb:e8:05:cf:ec:f8:51:52:6d:48: d2:5e:c3:16:1a:05:28:96:fa:e1:bc:ef:a0:08:a0: 4e:d1:2a:b8:27:48:b6:5c:93:9b:1c:d8:e2:fb:62: 9c:37:f1:89:8d:3d:49:eb:f0:d8:ff:89:1f:ca:ef: 1f:71:70:59:11:4a:3d:7c:c4:63:27:0b:3d:db:53: a9:40:17:89:c9:f0:a1:fc:e7:6f:43:51:af:d9:98: 3f:aa:ad:f5:e6:91:e5:0a:eb:aa:a2:71:47:a5:d0: 3b:19:05:21:e4:9e:f0:f3:be:4a:e6:e3:e6:1e:68: cd:5b:9e:02:75:5e:f6:a3:58:b1:05:2d:70:ed:92: 55:cf:bb:e8:63:ee:53:24:89:eb:2f:1b:32:5e:1d: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:39:44:FC:78:34:00:4E:C5:7A:44:88:84:B7:66:C7:7A:FF:87:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/16c03017-bbc8-3176-81e9-84ec549cc974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9e:71:40:7d:db:ec:ce:d9:59:10:86:bd:ef:61:0e:1e:11: 35:9a:a1:b9:6b:a6:a2:fe:54:dc:cd:41:1e:6b:e3:39:d7:f2: 99:27:9a:90:e4:b9:95:55:fe:26:e6:b9:02:e4:bd:d5:d7:1e: c2:aa:f7:8c:bc:7c:28:b8:c1:f6:4c:76:76:09:68:ef:ce:1d: 6a:28:a8:c8:d5:29:a9:10:25:27:cf:c9:e8:90:b8:5c:23:06: 4e:12:19:10:1c:d8:7a:e9:97:80:e1:11:71:63:a8:ae:f3:ed: a8:31:c3:1f:17:a2:c4:f7:1a:6e:0b:7e:04:7d:64:1d:e4:2e: d4:87:33:9a:6b:38:05:21:fb:dc:71:6e:90:b5:56:5e:5c:76: 4c:c5:52:ea:b7:70:c0:50:b5:59:61:51:77:a8:da:b1:cb:0c: b7:11:de:84:66:11:31:1a:78:a3:b5:b3:b3:0a:34:01:62:b5: be:6a:ae:67:01:72:db:dc:ad:6d:c3:af:3d:44:1a:f8:ea:d2: df:a0:a9:6f:ed:cf:aa:83:42:0f:ec:49:ff:70:d0:cd:15:50: f8:a7:f8:6c:92:6a:8e:12:72:e5:c2:f8:00:81:10:16:63:b6: 2d:48:ba:7c:7b:5a:81:af:5e:ad:e1:5c:81:b9:d4:e9:06:0b: f1:28:f6:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1Lbz67VH+kry4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmZkMjQ3YTMtMjM0Zi00OGE0LWIxMGYtN2ZjZTE5MTcyYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8JhDuv/Up5LaClQIfnP8j86CniYZ/pTYIzN QNRFhu4ZxEo6U7F52ucBEvHyTlgbUy+qzIeh3obVUv1lsWWAteAiRhXvu1SrnNF3 s342mGdFzSbetUS1pv6msvSGnvCQ9VBHJXNe6DjlvLcc07voBc/s+FFSbUjSXsMW GgUolvrhvO+gCKBO0Sq4J0i2XJObHNji+2KcN/GJjT1J6/DY/4kfyu8fcXBZEUo9 fMRjJws921OpQBeJyfCh/OdvQ1Gv2Zg/qq315pHlCuuqonFHpdA7GQUh5J7w875K 5uPmHmjNW54CdV72o1ixBS1w7ZJVz7voY+5TJInrLxsyXh1g1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk5RPx4NABOxXpEiIS3Zsd6/4dtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMTZjMDMwMTctYmJjOC0z MTc2LTgxZTktODRlYzU0OWNjOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyecUB92+zO2VkQhr3vYQ4eETWaoblrpqL+VNzNQR5r4znX8pknmpDk uZVV/ibmuQLkvdXXHsKq94y8fCi4wfZMdnYJaO/OHWooqMjVKakQJSfPyeiQuFwj Bk4SGRAc2Hrpl4DhEXFjqK7z7agxwx8XosT3Gm4LfgR9ZB3kLtSHM5prOAUh+9xx bpC1Vl5cdkzFUuq3cMBQtVlhUXeo2rHLDLcR3oRmETEaeKO1s7MKNAFitb5qrmcB ctvcrW3Drz1EGvjq0t+gqW/tz6qDQg/sSf9w0M0VUPin+GySao4ScuXC+ACBEBZj ti1Iunx7WoGvXq3hXIG51OkGC/Eo9kQ= -----END CERTIFICATE-----Generated at Sat Oct 3 17:44:18 2026 by rpki-client