$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa File: 243aaf43-c9df-3a08-b963-f0e358be1f43.roa (raw, json) Hash identifier: N8Nl1N+kdeGgCHPXL94WLStG1W5kHHPYMJMQfSL7Hzg= Subject key identifier: 9F:44:0B:9D:6B:19:60:1E:C7:A8:2E:27:8D:27:50:F6:E8:CE:F3:A7 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F1467A278CF5415AFEAF598A0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 63199 IP address blocks: 148.153.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a2:78:cf:54:15:af:ea:f5:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=04f73cd5-6062-4ca7-be50-e0b16f27894e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:98:17:3f:a8:d1:f9:d2:05:43:33:01:03: 66:10:51:39:e2:6e:58:08:d1:ce:9d:74:7f:3d:1a: e2:1d:a9:b3:03:3f:5f:c0:b4:a6:49:0f:82:e4:43: 2b:86:3d:b0:3b:4a:76:c4:4d:0c:31:eb:09:af:d5: d7:f0:31:2d:a2:15:39:57:d6:6d:d8:18:c7:d2:e5: 05:99:e4:3c:29:22:bb:29:f5:e8:31:c8:81:86:3e: b9:d9:4c:99:2c:2b:9f:ff:5b:61:83:6a:68:36:c7: 41:be:0b:ae:fe:8c:41:50:8f:90:0f:95:bb:2d:33: 2a:3b:93:af:04:46:29:b7:cb:bc:38:62:f9:55:d7: fb:51:e9:d7:2f:ab:9d:57:47:f7:e4:9c:28:bd:95: 2f:26:67:05:e4:70:17:75:d0:d6:64:49:ea:28:e4: 7a:cf:3d:7e:9b:83:7d:35:d6:98:5e:6d:ad:a3:65: 30:25:58:ef:3e:2e:a5:91:16:cb:ed:d5:85:48:b0: 20:7b:4d:fe:ce:3f:c3:1a:0c:8c:b5:8c:45:ec:31: d2:dd:fc:31:f4:b9:1c:a8:ce:b9:89:ac:6a:19:a2: f7:bf:9b:b2:68:66:f4:d5:42:ea:29:e3:09:d8:ac: 97:95:a4:0c:81:d3:f4:f4:45:03:4d:9e:03:25:9f: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:44:0B:9D:6B:19:60:1E:C7:A8:2E:27:8D:27:50:F6:E8:CE:F3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/243aaf43-c9df-3a08-b963-f0e358be1f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3f:ce:c5:0c:c5:ae:69:ea:21:1e:fd:52:22:df:b8:e2:8b: 0e:3d:9a:b0:ff:eb:87:00:fb:eb:0b:f1:fc:30:b5:5c:1c:74: bf:03:3a:5a:99:b5:92:f3:a6:3f:89:90:9f:25:b2:06:8a:54: 07:e1:ad:7f:ca:d0:2a:f5:8b:80:21:ae:9b:d9:0c:ab:11:e8: 36:39:85:a8:1c:3d:38:4d:33:bb:07:1b:a7:04:f4:50:3b:00: 52:9c:5c:3c:4a:ef:63:c6:c0:ff:98:a8:f9:c6:95:95:5c:63: e9:f0:5e:9d:8c:d6:3d:08:83:d1:f1:15:81:49:cf:81:ee:56: 41:5f:42:6b:a9:cd:89:84:0e:c4:d5:cb:e4:88:13:11:87:0d: 44:03:3e:42:a5:ce:58:d8:da:3d:5d:f4:55:8b:2e:9d:b3:e3: 50:8f:ff:8a:10:e0:35:9b:fd:fc:1b:96:29:66:99:1e:51:6b: e8:4a:f1:19:1e:c7:e1:ba:36:9b:49:2c:bb:e5:8e:c0:9d:47: 10:c2:34:14:f1:12:73:97:36:5f:00:6a:c0:ad:63:95:4b:97: 07:85:d0:49:0b:30:b0:d0:f2:6f:00:bd:33:ce:b6:78:d6:81: 6d:13:d3:4a:b8:88:35:38:9e:23:83:6f:92:04:4d:b6:9e:99: 97:72:d5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6J4z1QVr+r1mKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MDRmNzNjZDUtNjA2Mi00Y2E3LWJlNTAtZTBiMTZmMjc4OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMGYFz+o0fnSBUMzAQNmEFE54m5YCNHOnXR/ PRriHamzAz9fwLSmSQ+C5EMrhj2wO0p2xE0MMesJr9XX8DEtohU5V9Zt2BjH0uUF meQ8KSK7KfXoMciBhj652UyZLCuf/1thg2poNsdBvguu/oxBUI+QD5W7LTMqO5Ov BEYpt8u8OGL5Vdf7UenXL6udV0f35JwovZUvJmcF5HAXddDWZEnqKOR6zz1+m4N9 NdaYXm2to2UwJVjvPi6lkRbL7dWFSLAge03+zj/DGgyMtYxF7DHS3fwx9LkcqM65 iaxqGaL3v5uyaGb01ULqKeMJ2KyXlaQMgdP09EUDTZ4DJZ8xwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9EC51rGWAex6guJ40nUPbozvOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjQzYWFmNDMtYzlkZi0z YTA4LWI5NjMtZjBlMzU4YmUxZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA/zsUMxa5p6iEe/VIi37jiiw49mrD/64cA++sL8fwwtVwcdL8DOlqZ tZLzpj+JkJ8lsgaKVAfhrX/K0Cr1i4AhrpvZDKsR6DY5hagcPThNM7sHG6cE9FA7 AFKcXDxK72PGwP+YqPnGlZVcY+nwXp2M1j0Ig9HxFYFJz4HuVkFfQmupzYmEDsTV y+SIExGHDUQDPkKlzljY2j1d9FWLLp2z41CP/4oQ4DWb/fwblilmmR5Ra+hK8Rke x+G6NptJLLvljsCdRxDCNBTxEnOXNl8AasCtY5VLlweF0EkLMLDQ8m8AvTPOtnjW gW0T00q4iDU4niODb5IETbaemZdy1Vg= -----END CERTIFICATE-----Generated at Sun Sep 27 02:46:16 2026 by rpki-client