$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa File: 40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa (raw, json) Hash identifier: UabK/DO5Ba0PDc3OAyXVgfsibciAFCzagYsExJ9+FYI= Subject key identifier: 24:F0:70:A9:C3:0B:CA:18:F3:F3:C8:A3:45:0A:0F:23:07:A4:E6:42 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F4C3D442EEFFB9F19DA3A8780 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 63199 IP address blocks: 148.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:44:2e:ef:fb:9f:19:da:3a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=333dc641-c41b-403f-9e7d-7f1b00d7244d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:ff:02:4c:05:3a:ab:58:da:86:77:38:32: 7a:2b:71:c2:08:5e:34:7c:bb:de:ed:63:0a:d9:f3: 08:a9:33:cd:3e:20:54:71:11:81:13:89:47:39:ca: 2b:81:e1:a1:0d:9f:9d:90:ef:9b:04:34:8a:a5:18: 62:fb:ad:e7:65:3e:6d:99:2d:31:ff:ae:63:b1:a9: 73:2e:0b:63:23:39:2c:c1:30:21:1e:0a:b8:4e:3e: 29:da:8c:78:e6:35:57:f6:5e:f4:7d:98:7a:df:0b: 53:e4:6b:b0:40:f7:32:ce:b5:6c:43:4d:87:fb:7c: c7:cf:89:68:98:ea:70:9d:0f:9e:2e:ac:b1:a1:a6: 93:e3:49:d7:d7:5a:e6:c5:ef:f9:34:49:06:ed:34: 19:74:a3:c4:2e:c3:ce:37:ec:bf:16:d8:fe:bf:39: ae:a4:cc:99:8e:73:17:3c:34:db:59:4a:fc:be:cc: e8:d2:51:95:74:43:a5:61:10:39:9d:b1:3a:31:fa: ae:89:2d:f4:46:66:31:15:bb:d6:0d:7d:42:6f:bb: 08:96:4c:46:b1:98:c9:db:d5:f3:42:06:5e:62:45: 2e:f2:8b:71:98:d9:df:fa:3b:9a:24:2f:06:ca:fb: f5:e5:81:36:4b:da:38:22:5f:0c:87:05:b9:ed:21: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F0:70:A9:C3:0B:CA:18:F3:F3:C8:A3:45:0A:0F:23:07:A4:E6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:84:c6:03:93:d7:da:85:61:62:c3:1c:9b:90:66:41:d0:de: b5:21:51:e8:c2:28:2f:d8:7b:d3:d8:fc:19:e7:7c:4d:27:63: a4:1f:69:20:d3:52:c3:6d:c5:30:2a:2f:93:a2:fd:2b:ac:32: 0f:e7:4c:88:f6:6d:2f:30:98:87:7e:bd:b7:81:43:89:0f:3a: 7f:85:be:67:4e:39:7e:95:1f:3f:ae:20:6a:b7:4b:3a:8f:e9: 0d:8a:8f:f4:6c:16:59:f2:ad:0e:10:34:10:96:48:be:c0:c0: f5:1a:03:5e:c9:78:70:ac:3f:51:00:1e:44:0b:b9:b9:7f:b3: ad:c7:eb:a7:16:23:36:c6:b6:96:ea:75:7d:65:88:d8:38:8d: 3d:95:a8:de:de:63:36:24:34:dc:47:a1:f4:fc:da:33:4d:67: 36:3c:91:a6:df:64:81:28:ff:89:9b:ef:cf:ea:50:20:e7:13: 61:de:27:4f:38:d6:c8:34:4c:0e:47:82:b4:5e:d0:3d:40:13: 71:b0:d6:2a:ce:ff:5b:e6:59:1a:c6:55:65:f5:f7:9f:d9:d7: e3:a7:b5:d1:ff:7b:a8:ee:0b:18:47:77:45:f1:75:a9:09:de: 43:2c:b7:ec:75:10:fe:35:85:dd:09:30:ef:92:f2:a2:69:ed: 14:77:e1:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUQu7/ufGdo6h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzMzZGM2NDEtYzQxYi00MDNmLTllN2QtN2YxYjAwZDcyNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gD/AkwFOqtY2oZ3ODJ6K3HCCF40fLve7WMK 2fMIqTPNPiBUcRGBE4lHOcorgeGhDZ+dkO+bBDSKpRhi+63nZT5tmS0x/65jsalz LgtjIzkswTAhHgq4Tj4p2ox45jVX9l70fZh63wtT5GuwQPcyzrVsQ02H+3zHz4lo mOpwnQ+eLqyxoaaT40nX11rmxe/5NEkG7TQZdKPELsPON+y/Ftj+vzmupMyZjnMX PDTbWUr8vszo0lGVdEOlYRA5nbE6MfquiS30RmYxFbvWDX1Cb7sIlkxGsZjJ29Xz QgZeYkUu8otxmNnf+juaJC8Gyvv15YE2S9o4Il8MhwW57SF/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTwcKnDC8oY8/PIo0UKDyMHpOZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDBiOWM5ODItMDVkMS0z ZTRhLTg4NDEtZjJkN2RiZGIxMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKExgOT19qFYWLDHJuQZkHQ3rUhUejCKC/Ye9PY/BnnfE0nY6QfaSDT UsNtxTAqL5Oi/SusMg/nTIj2bS8wmId+vbeBQ4kPOn+FvmdOOX6VHz+uIGq3SzqP 6Q2Kj/RsFlnyrQ4QNBCWSL7AwPUaA17JeHCsP1EAHkQLubl/s63H66cWIzbGtpbq dX1liNg4jT2VqN7eYzYkNNxHofT82jNNZzY8kabfZIEo/4mb78/qUCDnE2HeJ084 1sg0TA5HgrRe0D1AE3Gw1irO/1vmWRrGVWX195/Z1+OntdH/e6juCxhHd0XxdakJ 3kMst+x1EP41hd0JMO+S8qJp7RR34Rg= -----END CERTIFICATE-----Generated at Fri Oct 9 08:10:48 2026 by rpki-client