$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa File: a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa (raw, json) Hash identifier: vilEYMSYpTQ6jTghy0g4m3T+IH9bNVOz+NDvr7t8m5A= Subject key identifier: 33:F1:12:BA:90:6C:BB:8C:D2:19:0F:71:45:99:F3:4B:10:84:AA:54 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F4F0817774F69B0B03BB973D4 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 63199 IP address blocks: 148.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:17:77:4f:69:b0:b0:3b:b9:73:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=3fc0e685-913d-4ce2-aa97-a15744152b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3b:50:34:18:59:e3:db:97:21:1a:09:c3:ef: 29:01:29:94:e6:ed:c6:a6:ea:98:40:c6:41:34:de: 8e:6b:3f:81:eb:e6:98:51:de:8f:d0:d0:14:5e:4f: 9f:7f:d4:84:e7:bb:97:b6:c6:61:13:0b:a9:b8:f1: b9:b1:78:c6:16:76:79:61:26:43:c0:7d:ca:cf:a1: 40:a7:1c:66:90:b7:ed:a7:c7:b2:bb:bd:63:4c:df: db:52:46:ab:07:db:b4:64:39:1d:61:45:4b:7c:bf: f5:b2:8d:83:90:fd:5b:7e:1d:a3:a3:8b:84:e1:3c: e8:43:6b:ee:64:24:83:2a:9c:a8:45:d2:fe:8f:d4: 56:6e:12:35:08:53:9f:55:32:89:bb:a1:9a:bf:b6: a8:62:c5:f8:a3:a0:a2:fe:47:89:3e:41:32:3d:3e: 26:ae:7b:58:e5:4c:ee:50:76:d2:be:79:99:3f:f3: 48:f8:fd:e3:a6:05:43:ef:56:81:43:b0:e5:f0:ba: 74:96:1b:72:9e:da:1c:83:8d:93:59:4b:a8:2e:9a: fc:ec:95:ef:16:e9:a9:97:30:8d:25:84:9d:66:f0: d7:e5:93:a4:bb:c2:05:94:76:c0:14:c2:6b:d6:ca: 7a:12:c2:5b:79:f0:5a:da:d4:b6:ae:ff:91:05:7f: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F1:12:BA:90:6C:BB:8C:D2:19:0F:71:45:99:F3:4B:10:84:AA:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1b:e3:20:84:96:d4:38:3c:84:6d:2a:05:73:10:9e:33:aa: fa:67:e0:fb:1f:94:a8:a0:3d:c1:3f:cb:09:ab:55:72:8e:17: 5a:7a:73:e7:82:34:a0:72:28:38:92:81:2d:17:38:5c:a5:b1: 91:7e:b7:e0:1e:c6:e7:22:e9:f9:3e:0e:a0:a6:31:37:fb:3f: c5:9f:c7:96:81:6f:ac:ff:08:b1:94:57:68:17:e1:d8:20:ae: 60:c9:cb:96:6c:52:78:e3:b7:ca:e1:22:39:6e:57:82:f8:70: a3:23:f0:99:1e:6d:5c:1b:3f:aa:da:fb:83:be:45:18:b1:a3: bf:36:7a:4d:b8:6b:da:73:c1:e7:73:f0:b7:10:79:75:1d:6d: ce:7c:5c:45:84:68:b5:c7:1d:dc:3a:13:b4:74:be:ae:33:2b: d0:4e:6f:60:cb:00:7c:e7:5b:67:e2:f4:f9:96:8c:01:2e:46: 01:a9:36:cb:7c:99:01:e1:43:3b:6b:c6:d9:e1:61:34:7b:7b: e1:15:cd:56:a5:c8:b4:55:7f:77:fe:a3:f0:98:09:b5:1a:6e: 6e:2f:cf:7d:4c:bc:1a:09:02:34:86:02:e3:e2:6b:4b:56:71: a9:23:d2:40:ba:1f:3d:c2:32:c5:b2:f0:fc:0f:af:bd:37:e1: 46:4e:1e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBd3T2mwsDu5c9QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk M2ZjMGU2ODUtOTEzZC00Y2UyLWFhOTctYTE1NzQ0MTUyYjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiztQNBhZ49uXIRoJw+8pASmU5u3GpuqYQMZB NN6Oaz+B6+aYUd6P0NAUXk+ff9SE57uXtsZhEwupuPG5sXjGFnZ5YSZDwH3Kz6FA pxxmkLftp8eyu71jTN/bUkarB9u0ZDkdYUVLfL/1so2DkP1bfh2jo4uE4TzoQ2vu ZCSDKpyoRdL+j9RWbhI1CFOfVTKJu6Gav7aoYsX4o6Ci/keJPkEyPT4mrntY5Uzu UHbSvnmZP/NI+P3jpgVD71aBQ7Dl8Lp0lhtyntocg42TWUuoLpr87JXvFumplzCN JYSdZvDX5ZOku8IFlHbAFMJr1sp6EsJbefBa2tS2rv+RBX8IdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPxErqQbLuM0hkPcUWZ80sQhKpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTdmODU2ZDItNDFkNi0z NmViLTk2MGEtY2MxNWZjZTllMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4b4yCEltQ4PIRtKgVzEJ4zqvpn4PsflKigPcE/ywmrVXKOF1p6c+eC NKByKDiSgS0XOFylsZF+t+Aexuci6fk+DqCmMTf7P8Wfx5aBb6z/CLGUV2gX4dgg rmDJy5ZsUnjjt8rhIjluV4L4cKMj8JkebVwbP6ra+4O+RRixo782ek24a9pzwedz 8LcQeXUdbc58XEWEaLXHHdw6E7R0vq4zK9BOb2DLAHznW2fi9PmWjAEuRgGpNst8 mQHhQztrxtnhYTR7e+EVzValyLRVf3f+o/CYCbUabm4vz31MvBoJAjSGAuPia0tW cakj0kC6Hz3CMsWy8PwPr7034UZOHiI= -----END CERTIFICATE-----Generated at Mon Sep 28 01:09:15 2026 by rpki-client