$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa File: 251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa (raw, json) Hash identifier: 1cm/b8kBv9L3tgPU7X91fgYZCxX3tbO3uHTtlloTAh4= Subject key identifier: 65:60:F1:B9:BE:B0:A4:C8:88:4C:D8:DC:8A:BC:30:DF:72:69:7F:FC Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F1467A26D74C38205D15E1300 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 63199 IP address blocks: 148.153.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a2:6d:74:c3:82:05:d1:5e:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=8bb7298d-8f3b-467f-843b-94a765846270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:93:00:8b:f1:43:97:2c:23:81:4d:c2:3c: 0c:eb:0e:b8:67:3b:3c:f1:9e:9f:1e:11:ac:ef:58: b1:28:d7:87:49:ed:46:79:3b:80:c7:32:6a:ea:dd: 38:30:03:fe:23:3a:85:f9:cf:ca:18:37:33:79:5c: 97:86:7c:74:6e:79:68:50:26:f0:2e:4f:2c:69:d8: 94:dd:b9:53:ea:73:c0:d2:35:2f:d5:e9:4e:14:11: 43:6e:cc:10:de:4a:d5:e4:6a:1d:16:3b:99:78:80: df:df:c6:fb:f7:b5:67:9c:a4:3a:bd:53:fd:c7:79: ff:6d:38:cb:fc:e2:35:ce:bc:86:a1:cd:90:12:c5: fd:fc:49:6d:19:39:8a:c6:39:0b:7b:2a:ef:9c:29: c8:2b:a5:6d:a3:a7:0a:04:a7:3c:7d:5b:2a:33:70: 5c:48:f0:36:bb:37:ff:80:ac:e7:a4:62:73:34:eb: a5:39:a3:ba:33:2f:14:e5:70:18:95:20:9d:f2:f0: 00:e5:31:d4:b0:cb:46:7f:c2:c3:71:86:9c:24:18: 36:d1:b7:f8:66:38:33:29:90:08:27:41:46:4f:b9: 05:8a:0f:55:b4:3c:2b:7c:13:fb:e7:a9:47:36:7b: 82:46:7a:16:d4:b3:8a:95:1e:50:f8:44:5e:6b:61: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:60:F1:B9:BE:B0:A4:C8:88:4C:D8:DC:8A:BC:30:DF:72:69:7F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/251aaa1d-496f-30ae-8aea-d75bf6020ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f0:cb:42:09:af:de:e8:c0:23:6b:a1:2c:c5:c0:3e:d3:1a: c2:a4:f3:ec:7d:f1:dd:00:e4:39:78:7c:3f:ad:13:bd:27:f6: db:bf:54:06:5e:5d:bf:b0:92:86:81:a4:90:c2:ab:a7:57:fa: cc:ec:05:99:ec:10:5e:c8:ce:64:ef:cc:97:46:74:bd:c4:4c: 59:8f:7d:6e:d4:4d:15:c4:7b:60:6e:9b:c6:49:bd:d1:32:b1: d4:a3:04:a5:41:43:0c:b8:eb:ba:c6:08:d6:6a:78:18:fe:9e: 97:db:be:3d:4c:98:38:c9:87:1c:69:cf:e2:1e:b8:80:5e:07: 46:a3:96:f0:8b:8a:9a:d8:08:f6:50:d0:ea:39:33:79:cf:b3: f9:76:df:61:c4:1d:4a:42:49:d7:58:5f:34:2b:e4:81:1c:bc: 76:47:31:6c:83:c4:7d:8a:32:82:6b:f8:ac:cb:3f:ed:49:99: 8a:a5:82:be:bd:d0:f1:6c:f9:75:c6:be:cb:27:0d:16:81:c9: ba:d4:0c:98:7e:c5:44:b2:d8:0e:fe:db:72:45:eb:3b:78:ee: 74:88:ae:be:6b:80:d1:ca:1a:fa:8c:ad:d2:d9:5a:b8:0c:d5: f5:bb:26:a0:0b:a1:27:ea:fe:89:cd:bb:d1:f5:4c:83:05:96: 6f:7f:b0:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6JtdMOCBdFeEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk OGJiNzI5OGQtOGYzYi00NjdmLTg0M2ItOTRhNzY1ODQ2MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOOTAIvxQ5csI4FNwjwM6w64Zzs88Z6fHhGs 71ixKNeHSe1GeTuAxzJq6t04MAP+IzqF+c/KGDczeVyXhnx0bnloUCbwLk8sadiU 3blT6nPA0jUv1elOFBFDbswQ3krV5GodFjuZeIDf38b797VnnKQ6vVP9x3n/bTjL /OI1zryGoc2QEsX9/EltGTmKxjkLeyrvnCnIK6Vto6cKBKc8fVsqM3BcSPA2uzf/ gKznpGJzNOulOaO6My8U5XAYlSCd8vAA5THUsMtGf8LDcYacJBg20bf4ZjgzKZAI J0FGT7kFig9VtDwrfBP756lHNnuCRnoW1LOKlR5Q+ERea2EXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVg8bm+sKTIiEzY3Iq8MN9yaX/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMjUxYWFhMWQtNDk2Zi0z MGFlLThhZWEtZDc1YmY2MDIwY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITwy0IJr97owCNroSzFwD7TGsKk8+x98d0A5Dl4fD+tE70n9tu/VAZe Xb+wkoaBpJDCq6dX+szsBZnsEF7IzmTvzJdGdL3ETFmPfW7UTRXEe2Bum8ZJvdEy sdSjBKVBQwy467rGCNZqeBj+npfbvj1MmDjJhxxpz+IeuIBeB0ajlvCLiprYCPZQ 0Oo5M3nPs/l232HEHUpCSddYXzQr5IEcvHZHMWyDxH2KMoJr+KzLP+1JmYqlgr69 0PFs+XXGvssnDRaBybrUDJh+xUSy2A7+23JF6zt47nSIrr5rgNHKGvqMrdLZWrgM 1fW7JqALoSfq/onNu9H1TIMFlm9/sFA= -----END CERTIFICATE-----Generated at Sun Sep 27 04:51:44 2026 by rpki-client