$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa File: 40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa (raw, json) Hash identifier: h7Jd9DevpQZwvxddAW3lFq1QWHPkGGSo4S5JBc0PxBc= Subject key identifier: 4F:41:8A:78:44:C7:C6:64:E6:97:E3:CA:87:19:BD:3B:8B:FD:05:6B Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D2644B004F146213256CF1E40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 63199 IP address blocks: 148.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b0:04:f1:46:21:32:56:cf:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=9f8058a2-5624-4e86-b808-b7dd562f0fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:8b:e6:f3:20:74:71:fb:cd:2b:c2:76:83: d5:6c:43:eb:93:ed:00:79:a2:a0:d2:31:d0:1b:61: 57:32:dc:0a:83:1f:51:44:a7:54:4f:23:58:88:53: fd:c3:81:fa:8b:37:75:28:42:b8:c6:bb:e1:8b:b0: 9b:c4:36:4f:09:c3:7c:fd:96:e0:f1:16:b9:85:2c: 09:07:45:5b:16:77:78:ce:bb:41:fb:b7:dc:77:07: c4:7d:d3:a5:6b:cf:08:37:a7:56:7a:73:2e:df:a7: a8:7a:27:cf:34:50:0e:74:56:8f:05:80:15:a5:53: 8b:54:66:62:ec:14:10:80:57:ea:58:aa:a8:5c:17: 3a:65:00:3f:d0:89:92:e2:3a:ff:04:77:b9:6b:ee: 85:c1:ca:27:54:70:8e:86:c7:6c:64:4e:14:42:27: 9e:e6:80:89:4d:a0:80:e2:c2:eb:60:e7:0e:07:45: 84:d1:a7:1b:42:39:fa:4e:ea:fb:91:4e:89:4c:24: 3f:d5:cf:c7:1f:4a:c1:31:c8:cc:75:b0:40:9c:48: e9:7c:31:0c:bc:06:ed:75:d1:2b:6b:0f:04:8f:4d: d3:7e:06:c2:7e:03:86:a9:cc:48:58:41:77:98:b9: 8e:70:2f:39:f6:3f:43:35:6a:6c:1f:f9:d3:0b:2c: 00:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:41:8A:78:44:C7:C6:64:E6:97:E3:CA:87:19:BD:3B:8B:FD:05:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/40b9c982-05d1-3e4a-8841-f2d7dbdb1312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:17:12:9d:9e:98:b4:51:76:31:c2:f7:7f:e2:a2:b0:8a:16: b0:7d:d4:31:02:65:8a:4c:f9:04:b8:95:f0:e4:89:47:01:90: f6:69:3a:45:5f:83:5b:22:d9:00:09:eb:65:cb:5d:b8:b4:b1: 2d:6f:75:e9:84:58:e8:2d:de:57:b1:ef:0e:6c:ff:70:f4:5f: fe:a8:cd:e5:af:d2:9e:d9:e2:63:b7:8e:cb:f6:3a:2b:72:01: 68:56:0e:fa:51:df:50:6e:e6:d2:18:86:7b:8b:fc:07:e0:ae: 41:49:97:eb:06:2e:59:e4:2e:45:52:f5:17:5b:8f:e0:01:05: 5c:30:3d:22:0f:c7:75:5f:80:1f:a9:ee:85:d9:14:87:e4:6e: 78:3e:a8:1a:0f:0e:1b:17:8c:c4:d1:0c:09:2c:ab:05:dd:c8: 7e:b5:1e:6c:47:b6:af:ae:1e:a1:3d:22:f6:21:30:fe:0a:c3: f5:0f:2c:ff:a5:23:cf:0a:8b:70:21:03:51:42:3c:50:8c:b3: 06:41:91:e6:bc:df:bd:63:e4:a0:6b:09:bd:52:49:8e:0a:c9: 6a:27:9b:bb:07:0a:34:13:1e:68:33:44:0b:14:c6:74:87:55: 34:89:ae:9e:2f:bd:49:4f:7b:2c:e0:56:78:c3:90:74:ca:8b: 02:54:e3:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLAE8UYhMlbPHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk OWY4MDU4YTItNTYyNC00ZTg2LWI4MDgtYjdkZDU2MmYwZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOOL5vMgdHH7zSvCdoPVbEPrk+0AeaKg0jHQ G2FXMtwKgx9RRKdUTyNYiFP9w4H6izd1KEK4xrvhi7CbxDZPCcN8/Zbg8Ra5hSwJ B0VbFnd4zrtB+7fcdwfEfdOla88IN6dWenMu36eoeifPNFAOdFaPBYAVpVOLVGZi 7BQQgFfqWKqoXBc6ZQA/0ImS4jr/BHe5a+6FwconVHCOhsdsZE4UQiee5oCJTaCA 4sLrYOcOB0WE0acbQjn6Tur7kU6JTCQ/1c/HH0rBMcjMdbBAnEjpfDEMvAbtddEr aw8Ej03TfgbCfgOGqcxIWEF3mLmOcC859j9DNWpsH/nTCywAMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9BinhEx8Zk5pfjyocZvTuL/QVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDBiOWM5ODItMDVkMS0z ZTRhLTg4NDEtZjJkN2RiZGIxMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4XEp2emLRRdjHC93/iorCKFrB91DECZYpM+QS4lfDkiUcBkPZpOkVf g1si2QAJ62XLXbi0sS1vdemEWOgt3lex7w5s/3D0X/6ozeWv0p7Z4mO3jsv2Oity AWhWDvpR31Bu5tIYhnuL/AfgrkFJl+sGLlnkLkVS9Rdbj+ABBVwwPSIPx3VfgB+p 7oXZFIfkbng+qBoPDhsXjMTRDAksqwXdyH61HmxHtq+uHqE9IvYhMP4Kw/UPLP+l I88Ki3AhA1FCPFCMswZBkea8371j5KBrCb1SSY4KyWonm7sHCjQTHmgzRAsUxnSH VTSJrp4vvUlPeyzgVnjDkHTKiwJU43s= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:13 2026 by rpki-client