$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa File: 33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa (raw, json) Hash identifier: HrmDcEwQ9jV5Mcy+2tz/c84KMEvvcLhnkK5MEd5smiM= Subject key identifier: 98:E2:AA:2C:68:1A:0B:C8:B2:D8:F9:35:01:C8:34:A1:56:3F:10:6C Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584DA11AE955409EA3B1C6429C80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 63199 IP address blocks: 148.153.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:e9:55:40:9e:a3:b1:c6:42:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=4e4facc8-a20c-4132-b797-b30038219c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:25:48:38:bc:b0:2a:94:71:c9:d4:2f:9c: 6d:9b:28:de:9d:c7:f1:79:73:cf:65:ef:7e:8b:d4: 09:da:1c:ab:e4:c3:ea:e5:03:17:f6:db:25:77:ee: 9f:1d:38:45:0f:a1:60:b6:52:b0:e1:5d:c8:b2:72: 52:8b:18:ce:b9:14:b0:c9:bf:0a:d3:5c:e6:71:16: db:25:23:e0:3a:58:52:8c:66:48:a7:19:3d:f0:79: 16:9c:83:e2:a8:3b:14:67:76:8f:91:5a:b1:e8:95: 02:36:25:40:64:ec:6a:50:a2:05:3a:71:24:a8:74: 88:ee:37:cc:1d:ec:42:f7:99:6e:bb:fd:8a:31:68: a3:d4:86:91:86:3f:9b:53:95:e9:03:86:9d:dd:9a: a9:0b:f9:94:2b:65:79:32:1e:5c:9f:b8:a4:47:97: a8:a0:4b:ec:4a:7b:8f:c5:e1:3e:be:84:d2:d1:ec: 3c:83:54:eb:e6:cd:4b:6d:28:1e:34:58:f0:bc:82: 2d:e1:d2:af:5e:7b:99:c3:b4:64:6d:c2:dd:cd:11: 4c:6a:a1:b8:84:2c:47:ac:e5:9f:8c:ae:8e:f8:9d: 5a:f9:ba:0c:fd:e3:0c:ab:d0:6b:e5:b2:db:52:d9: 57:4f:69:77:4f:1c:54:50:b1:f8:c4:e7:d3:e1:58: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:AA:2C:68:1A:0B:C8:B2:D8:F9:35:01:C8:34:A1:56:3F:10:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ff:4d:31:16:89:5a:48:57:0d:3f:b4:89:3a:67:3a:0b:50: f2:e2:3f:c6:64:67:8e:26:3e:e8:da:1a:91:72:2f:51:00:45: 9e:f3:dd:cc:de:80:0f:58:de:c1:b4:d8:c0:5f:a3:e0:80:43: 95:46:af:1c:0d:e3:80:96:d3:4f:75:1b:82:6b:08:d3:fa:4f: f6:95:5c:00:ff:b8:f0:47:07:87:ea:18:53:dd:cc:7d:55:07: cb:b4:e9:8e:57:05:bd:d6:ab:b0:dd:b3:ce:99:a9:92:03:15: 5f:ba:89:8a:a0:b1:78:56:92:5c:98:10:20:29:bf:8e:91:34: 57:8e:50:8e:ea:a2:cc:bd:ac:d2:d6:23:4b:c8:fe:0f:85:92: 99:d3:0f:6f:e3:3e:55:c4:67:fb:b2:43:58:24:e3:70:86:99: 06:0f:48:19:b4:19:6c:41:3c:2e:75:8b:04:ea:bf:bd:77:91: 0d:aa:76:22:c2:a7:89:81:54:2d:c9:cf:a3:3d:14:6d:a2:55: ff:09:31:51:a8:d0:66:a2:c1:47:c5:8e:5e:3e:8e:f7:48:af: 41:ff:a9:a8:43:28:77:f8:d8:df:5f:5b:f7:3c:f2:73:f1:6e: c9:f0:36:ff:b1:61:cd:43:ad:5f:c1:f9:2a:1c:ca:a3:b6:e6: ec:ad:d5:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGulVQJ6jscZCnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk NGU0ZmFjYzgtYTIwYy00MTMyLWI3OTctYjMwMDM4MjE5YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13clSDi8sCqUccnUL5xtmyjencfxeXPPZe9+ i9QJ2hyr5MPq5QMX9tsld+6fHThFD6FgtlKw4V3IsnJSixjOuRSwyb8K01zmcRbb JSPgOlhSjGZIpxk98HkWnIPiqDsUZ3aPkVqx6JUCNiVAZOxqUKIFOnEkqHSI7jfM HexC95luu/2KMWij1IaRhj+bU5XpA4ad3ZqpC/mUK2V5Mh5cn7ikR5eooEvsSnuP xeE+voTS0ew8g1Tr5s1LbSgeNFjwvIIt4dKvXnuZw7RkbcLdzRFMaqG4hCxHrOWf jK6O+J1a+boM/eMMq9Br5bLbUtlXT2l3TxxUULH4xOfT4ViA+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjiqixoGgvIstj5NQHINKFWPxBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMzNhNjE2YmUtY2U4MC0z NWMyLWI3ZjctZWE5YzAwYTJhNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn/TTEWiVpIVw0/tIk6ZzoLUPLiP8ZkZ44mPujaGpFyL1EARZ7z3cze gA9Y3sG02MBfo+CAQ5VGrxwN44CW0091G4JrCNP6T/aVXAD/uPBHB4fqGFPdzH1V B8u06Y5XBb3Wq7Dds86ZqZIDFV+6iYqgsXhWklyYECApv46RNFeOUI7qosy9rNLW I0vI/g+FkpnTD2/jPlXEZ/uyQ1gk43CGmQYPSBm0GWxBPC51iwTqv713kQ2qdiLC p4mBVC3Jz6M9FG2iVf8JMVGo0GaiwUfFjl4+jvdIr0H/qahDKHf42N9fW/c88nPx bsnwNv+xYc1DrV/B+SocyqO25uyt1fo= -----END CERTIFICATE-----Generated at Wed May 13 03:49:35 2026 by rpki-client