$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa File: a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa (raw, json) Hash identifier: K1YOAbBvFJgFSxjDE3gtV/evu/auTQw/pkkUcGPLzhg= Subject key identifier: 99:A6:63:73:85:D4:1F:3B:6E:B2:2F:FF:EE:9F:CB:0F:F7:5A:DF:0C Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D2A74EB7F8E7FE12459A45B40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 63199 IP address blocks: 148.153.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:eb:7f:8e:7f:e1:24:59:a4:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=7dd282e9-5358-462a-983f-6e7a30eef1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7d:50:75:ea:a4:be:59:6b:a4:18:07:e5:a3: 50:fe:4b:54:90:d2:36:5f:4f:27:af:79:a7:a4:a8: 0e:60:7d:27:2a:fd:f1:38:a7:13:ab:a7:37:96:24: 3a:30:23:7e:1f:19:9d:30:69:a9:67:e8:7c:78:99: 6a:7f:b8:c6:6c:80:d5:43:70:2d:af:e3:7d:62:1f: 30:03:d0:99:15:e0:51:64:f7:0d:b2:50:60:29:9b: 47:e8:0d:b6:d2:8a:f0:e1:11:ed:58:91:43:2a:4c: 4f:65:1b:a0:8e:fc:6e:c2:94:a1:40:22:7c:f6:2f: d7:80:d3:c2:f9:02:48:da:a0:be:3c:ad:06:65:db: eb:6b:1a:11:dc:61:10:ee:49:cd:20:5c:26:f1:52: 46:fd:7c:74:5d:5b:9d:15:b7:53:64:99:c9:0d:5f: b5:f6:0c:be:d8:e5:a4:94:e0:ee:c7:b0:65:2a:12: e7:4d:20:1b:d5:c4:64:4e:9e:12:6f:d2:e6:8e:50: b0:6f:46:84:c1:0b:cc:96:71:8f:a1:cc:8e:74:50: 3f:86:ba:cb:73:c2:64:43:a9:df:b6:f5:8b:cc:38: f7:5a:39:d4:cb:84:e0:be:b6:11:9c:bf:e9:6c:c6: 52:eb:f1:4c:2f:16:60:79:6e:41:4a:7b:bc:d3:d7: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A6:63:73:85:D4:1F:3B:6E:B2:2F:FF:EE:9F:CB:0F:F7:5A:DF:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a7f856d2-41d6-36eb-960a-cc15fce9e2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:32:2e:30:10:14:ee:30:47:21:9e:b4:af:98:33:88:ba:0c: 50:63:0f:e2:c6:90:4a:fe:c3:72:8d:31:10:08:3d:0a:70:27: 04:8e:3b:9e:55:4a:e5:0b:d7:39:b2:78:79:58:cc:81:39:07: d9:c6:8f:f8:cb:2c:93:07:00:76:dc:25:aa:61:71:ab:9b:90: e6:7b:2f:28:1e:83:fd:a9:66:c7:90:4f:8d:fc:3b:2b:d5:89: 51:de:32:f8:36:e3:3f:07:c7:c3:b9:0f:97:90:c5:89:5a:b4: ed:fa:6f:11:2b:55:6e:15:44:e9:1e:6f:f3:e2:cf:7a:4f:b3: f2:10:21:6a:f2:e7:be:6e:53:9b:5a:99:0d:0a:51:bf:c3:62: 80:ed:86:77:b4:f0:8f:34:48:0f:75:84:49:b6:64:c3:36:a8: 3d:ff:26:94:9e:89:34:f9:11:02:e5:62:63:bd:63:f2:66:f3: 74:47:09:0a:4b:f1:c6:c3:15:53:0a:2e:ff:f8:4f:68:1b:18: a1:8f:7e:c7:a4:4c:e7:ef:a6:c9:5b:97:b5:20:84:bc:65:dd: d7:f3:7a:8e:1e:48:c7:ab:0c:77:74:c2:41:72:f2:cf:c2:e9: 46:13:0b:b1:a4:b8:9d:71:92:84:34:04:0b:bb:33:c1:16:42: 34:48:9b:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOt/jn/hJFmkW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk N2RkMjgyZTktNTM1OC00NjJhLTk4M2YtNmU3YTMwZWVmMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn1QdeqkvllrpBgH5aNQ/ktUkNI2X08nr3mn pKgOYH0nKv3xOKcTq6c3liQ6MCN+HxmdMGmpZ+h8eJlqf7jGbIDVQ3Atr+N9Yh8w A9CZFeBRZPcNslBgKZtH6A220orw4RHtWJFDKkxPZRugjvxuwpShQCJ89i/XgNPC +QJI2qC+PK0GZdvraxoR3GEQ7knNIFwm8VJG/Xx0XVudFbdTZJnJDV+19gy+2OWk lODux7BlKhLnTSAb1cRkTp4Sb9LmjlCwb0aEwQvMlnGPocyOdFA/hrrLc8JkQ6nf tvWLzDj3WjnUy4TgvrYRnL/pbMZS6/FMLxZgeW5BSnu809dLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmmY3OF1B87brIv/+6fyw/3Wt8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTdmODU2ZDItNDFkNi0z NmViLTk2MGEtY2MxNWZjZTllMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8yLjAQFO4wRyGetK+YM4i6DFBjD+LGkEr+w3KNMRAIPQpwJwSOO55V SuUL1zmyeHlYzIE5B9nGj/jLLJMHAHbcJaphcaubkOZ7Lygeg/2pZseQT438OyvV iVHeMvg24z8Hx8O5D5eQxYlatO36bxErVW4VROkeb/Piz3pPs/IQIWry575uU5ta mQ0KUb/DYoDthne08I80SA91hEm2ZMM2qD3/JpSeiTT5EQLlYmO9Y/Jm83RHCQpL 8cbDFVMKLv/4T2gbGKGPfsekTOfvpslbl7UghLxl3dfzeo4eSMerDHd0wkFy8s/C 6UYTC7GkuJ1xkoQ0BAu7M8EWQjRIm6Y= -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:27 2026 by rpki-client