$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa File: 2abfa112-93c3-3da0-856a-28fad7798068.roa (raw, json) Hash identifier: t6MUjhpkvs36Z1WYTS36DoPWObOQWUHQldeDMwMcW/8= Subject key identifier: 25:93:25:70:9D:82:2A:62:BC:A4:D2:90:8D:55:43:4C:5E:DD:CA:AB Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D2644B5044C19B89683A792C0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 63199 IP address blocks: 148.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b5:04:4c:19:b8:96:83:a7:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=9f790b0f-bc46-4e87-ab5c-cc36b15010ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:91:04:b2:ab:7b:bb:a7:99:2e:8c:a7:49: 74:16:f2:59:69:fe:42:f0:4c:4b:86:2f:78:49:f9: 50:e6:70:79:fe:66:cd:64:ed:0a:12:fa:e0:be:c1: d0:0a:30:47:64:cd:3a:8d:62:74:a2:b2:eb:13:15: 95:09:ed:62:9c:91:f8:b4:f9:2b:9d:15:bd:e6:ca: 74:db:0f:51:78:03:ab:12:6c:4a:3c:10:cf:01:87: cf:f0:7f:ce:33:c4:70:c1:21:cf:bf:07:05:26:9f: 7e:89:7c:65:5d:f3:4c:db:45:dd:a3:b0:76:c9:bb: 33:f2:e9:03:01:3b:d2:cc:07:33:fc:20:b1:78:58: 8e:43:2b:98:fb:0c:a4:d7:55:10:6f:21:60:a5:54: 04:0c:ae:0f:c2:18:8f:43:c5:8e:cb:70:eb:b6:d8: 7a:f9:53:d5:ee:e7:ce:e0:d2:64:45:40:8f:94:a3: 79:17:69:66:50:aa:4e:1e:f5:e6:7d:c6:1d:c4:8c: e5:77:d2:50:50:8e:de:93:4e:5e:8d:d9:4d:45:9e: 1e:d8:f4:f2:45:6f:0c:9b:20:75:18:8d:1c:a3:00: a9:3d:ed:29:f0:02:fa:c9:cd:3b:fa:45:c3:22:51: 78:56:9b:bf:af:8f:1f:4e:b9:34:5e:5c:3f:ac:4d: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:25:70:9D:82:2A:62:BC:A4:D2:90:8D:55:43:4C:5E:DD:CA:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2abfa112-93c3-3da0-856a-28fad7798068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4f:57:ad:46:35:df:db:03:fc:87:e4:2f:d0:95:ed:9b:7c: cb:62:41:96:78:4e:13:dc:f3:e4:28:5e:3a:40:4c:36:01:2b: ca:dc:79:d3:c0:e4:27:f3:a8:94:db:99:9b:39:33:db:66:45: 40:1c:5f:fb:93:5f:0b:54:0f:b0:70:36:f0:e8:75:37:e9:22: 34:70:70:e1:f0:1d:ae:d1:fa:29:43:1a:05:5d:3f:1a:0d:c8: 55:84:50:65:a5:8a:3a:e4:99:11:5e:30:18:e4:44:79:d8:0b: ac:03:77:a9:ae:25:07:dc:a4:b9:a2:83:8a:71:ca:d5:11:70: 33:da:81:e0:e8:2e:5a:42:f3:8f:3b:c6:cb:e8:15:5f:82:5a: a0:4e:16:e2:11:b3:77:ec:20:de:8a:a2:2b:e4:0b:89:8c:a2: 32:af:6d:97:94:64:60:f6:fd:87:03:0c:39:78:38:90:a8:1d: fe:75:9c:f8:d4:23:8d:0b:04:15:11:9f:d5:b3:92:36:30:ce: fc:3d:53:5c:b6:cd:33:16:d1:83:14:f6:8b:56:de:0c:ba:ce: 6c:32:0c:e7:52:1e:ac:f5:44:48:ec:66:d5:f7:90:89:7f:e8: 42:8e:a3:57:a4:49:62:4e:4b:e6:66:bc:38:fa:58:40:5a:9b: 29:63:86:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLUETBm4loOnksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk OWY3OTBiMGYtYmM0Ni00ZTg3LWFiNWMtY2MzNmIxNTAxMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtviRBLKre7unmS6Mp0l0FvJZaf5C8ExLhi94 SflQ5nB5/mbNZO0KEvrgvsHQCjBHZM06jWJ0orLrExWVCe1inJH4tPkrnRW95sp0 2w9ReAOrEmxKPBDPAYfP8H/OM8RwwSHPvwcFJp9+iXxlXfNM20Xdo7B2ybsz8ukD ATvSzAcz/CCxeFiOQyuY+wyk11UQbyFgpVQEDK4PwhiPQ8WOy3Drtth6+VPV7ufO 4NJkRUCPlKN5F2lmUKpOHvXmfcYdxIzld9JQUI7ek05ejdlNRZ4e2PTyRW8MmyB1 GI0cowCpPe0p8AL6yc07+kXDIlF4Vpu/r48fTrk0Xlw/rE3LAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWTJXCdgipivKTSkI1VQ0xe3cqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmFiZmExMTItOTNjMy0z ZGEwLTg1NmEtMjhmYWQ3Nzk4MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhPV61GNd/bA/yH5C/Qle2bfMtiQZZ4ThPc8+QoXjpATDYBK8rcedPA 5CfzqJTbmZs5M9tmRUAcX/uTXwtUD7BwNvDodTfpIjRwcOHwHa7R+ilDGgVdPxoN yFWEUGWlijrkmRFeMBjkRHnYC6wDd6muJQfcpLmig4pxytURcDPageDoLlpC8487 xsvoFV+CWqBOFuIRs3fsIN6KoivkC4mMojKvbZeUZGD2/YcDDDl4OJCoHf51nPjU I40LBBURn9WzkjYwzvw9U1y2zTMW0YMU9otW3gy6zmwyDOdSHqz1REjsZtX3kIl/ 6EKOo1ekSWJOS+ZmvDj6WEBamyljhnE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:04:01 2026 by rpki-client