$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa File: 7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa (raw, json) Hash identifier: qGQaOC0IK6WWo2Y2r5GQQdooQN2hVbJQS3acZYxbYV8= Subject key identifier: 57:3A:B8:33:44:88:70:D3:04:42:E6:9E:E2:B4:BA:27:3B:50:7F:EB Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D40CA5BF8B26040C0E32EA600 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 63199 IP address blocks: 148.153.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5b:f8:b2:60:40:c0:e3:2e:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=61b0b894-2a09-4069-896c-8af163680a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d2:65:2e:20:f2:c6:91:64:3c:c4:b1:2e:99: 26:e3:52:61:d8:68:4a:4b:22:96:a6:3c:e3:30:6f: 96:e6:48:c5:f7:91:ad:9c:08:24:63:30:36:98:c1: f7:fa:e1:e2:92:34:e1:9c:2c:e1:b1:13:8d:3f:ac: 14:9d:48:ec:83:51:48:8c:15:58:80:92:a6:34:c9: 97:2e:64:7f:00:5e:a2:26:fb:ed:6a:4b:63:44:13: ea:68:05:58:15:62:76:06:f4:ba:38:de:62:89:a8: 75:13:1a:79:c4:e8:64:a8:ea:9c:60:d1:5c:de:de: 40:d4:bc:e6:8e:78:f2:3f:9e:3b:bf:46:6a:d2:e6: ce:b1:d8:e5:67:45:85:59:d3:83:ac:8b:8d:b4:7a: 3e:8c:cf:14:b5:f0:3c:a3:ee:2f:f8:d8:95:0f:30: 1d:f1:c6:2f:bc:52:6c:2d:70:83:c4:d7:0f:32:c0: d1:95:34:32:47:ec:02:0e:ba:af:93:8b:de:ed:ef: 68:93:57:19:66:05:d0:eb:06:fc:bf:46:32:e6:00: 41:9e:04:11:67:c4:18:24:05:93:04:d4:4e:0b:9f: ad:79:4c:92:28:5d:41:05:64:9e:7e:77:65:99:b3: 8c:e0:a5:e7:d5:a1:7c:bd:b2:2b:e1:0b:a6:44:75: ca:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3A:B8:33:44:88:70:D3:04:42:E6:9E:E2:B4:BA:27:3B:50:7F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/7153a2b6-3fb9-3d07-a872-d9ce392fa687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:76:22:91:f9:35:5f:7b:08:5d:f1:50:07:3f:a3:46:5b:a8: c9:ec:6f:f0:90:0e:c4:4d:d2:23:19:e8:2f:0a:50:42:6c:d0: 34:98:a3:0e:cc:26:fb:78:38:b0:11:34:b3:40:cd:1c:1d:66: db:35:7e:1d:9c:ed:be:c1:4b:25:e2:67:f4:eb:72:36:32:97: 32:93:c7:f0:bb:e9:21:39:9b:06:42:51:6c:72:98:31:c0:02: 21:fd:f4:4e:f6:80:20:1b:28:fa:7d:25:39:94:69:01:31:3e: 3f:0a:3c:ff:e0:e4:58:55:92:bc:a8:03:0b:70:2f:35:f2:1c: 24:ba:7d:7b:a7:35:b9:54:10:a9:d7:3d:33:71:62:7c:3f:22: aa:38:f6:f0:a9:77:fe:3b:f0:f2:1f:9f:ce:70:9b:13:51:f6: 17:a3:7e:7e:93:30:11:5d:a6:0c:68:e0:92:9a:2e:ee:cb:26: d0:1e:a3:4f:1d:00:70:35:9f:73:bd:f5:f0:66:73:90:bf:eb: 22:63:e2:8e:86:21:89:15:3b:32:af:4c:10:1f:8d:9a:a5:87: ba:1a:03:63:68:5f:c8:36:87:11:07:8b:46:2c:61:a2:27:e3: 60:61:42:92:16:29:df:43:ef:10:e3:bf:12:64:f4:80:a8:7b: d1:a5:8f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aylv4smBAwOMupgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NjFiMGI4OTQtMmEwOS00MDY5LTg5NmMtOGFmMTYzNjgwYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89JlLiDyxpFkPMSxLpkm41Jh2GhKSyKWpjzj MG+W5kjF95GtnAgkYzA2mMH3+uHikjThnCzhsRONP6wUnUjsg1FIjBVYgJKmNMmX LmR/AF6iJvvtaktjRBPqaAVYFWJ2BvS6ON5iiah1Exp5xOhkqOqcYNFc3t5A1Lzm jnjyP547v0Zq0ubOsdjlZ0WFWdODrIuNtHo+jM8UtfA8o+4v+NiVDzAd8cYvvFJs LXCDxNcPMsDRlTQyR+wCDrqvk4ve7e9ok1cZZgXQ6wb8v0Yy5gBBngQRZ8QYJAWT BNROC5+teUySKF1BBWSefndlmbOM4KXn1aF8vbIr4QumRHXK+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFc6uDNEiHDTBELmnuK0uic7UH/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNzE1M2EyYjYtM2ZiOS0z ZDA3LWE4NzItZDljZTM5MmZhNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZ2IpH5NV97CF3xUAc/o0ZbqMnsb/CQDsRN0iMZ6C8KUEJs0DSYow7M Jvt4OLARNLNAzRwdZts1fh2c7b7BSyXiZ/TrcjYylzKTx/C76SE5mwZCUWxymDHA AiH99E72gCAbKPp9JTmUaQExPj8KPP/g5FhVkryoAwtwLzXyHCS6fXunNblUEKnX PTNxYnw/Iqo49vCpd/478PIfn85wmxNR9hejfn6TMBFdpgxo4JKaLu7LJtAeo08d AHA1n3O99fBmc5C/6yJj4o6GIYkVOzKvTBAfjZqlh7oaA2NoX8g2hxEHi0YsYaIn 42BhQpIWKd9D7xDjvxJk9ICoe9GljzE= -----END CERTIFICATE-----Generated at Thu Mar 26 02:41:33 2026 by rpki-client