$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa File: aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa (raw, json) Hash identifier: FP2ZeR3Gx6rehIVocF3Rp3yoNgRtNbyfox58sVJpnBQ= Subject key identifier: 92:33:2F:9D:6B:89:FC:99:5F:5F:BD:D1:1A:5E:5C:66:9F:73:B6:4B Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F3FAD32E2D965158E5BED5700 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 63199 IP address blocks: 148.153.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:32:e2:d9:65:15:8e:5b:ed:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=9e9766a4-cd8e-4364-83cf-fcec63a1a9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:81:c8:b2:39:fe:0b:ca:00:02:78:82:53: 59:d3:83:85:20:6e:53:29:46:31:4b:f8:70:10:c9: f3:2a:98:ce:65:cd:f2:32:1a:4e:15:1a:60:71:19: a7:40:fe:bf:c8:81:17:80:38:b1:d6:3c:ed:48:3b: 92:8c:52:73:b4:3b:5b:98:42:c1:02:50:7b:1c:c3: 15:f0:31:13:d1:e0:80:8a:f9:33:46:ec:67:c2:a6: e0:0a:16:b0:9f:b2:65:21:f2:01:3a:d7:43:74:b9: 69:fb:4d:b9:5e:2d:1a:b2:f6:54:3e:22:aa:33:0f: 3d:4c:0d:d4:56:d1:cb:06:80:ba:08:7d:b0:be:7a: bf:a7:99:f9:b8:6f:db:bc:31:87:4f:28:be:66:02: 58:13:84:d3:8c:8c:ca:1f:f6:d2:e8:e9:bb:bc:9e: 28:20:ac:4a:3c:5a:10:04:e4:1b:07:2e:1d:a5:fc: e0:19:00:40:99:be:5b:40:fc:18:ce:f9:2b:34:2e: b8:fe:db:cf:61:a6:f3:8b:d1:ec:43:ae:70:10:f6: 33:49:bb:6f:4c:a2:b4:de:90:4a:b8:05:09:d1:16: b6:f5:b7:ff:b0:cd:12:f2:14:67:5f:c2:ad:7d:db: 97:16:57:e9:8c:85:a2:85:de:53:39:ad:c8:2b:b3: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:33:2F:9D:6B:89:FC:99:5F:5F:BD:D1:1A:5E:5C:66:9F:73:B6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:bc:67:7c:8d:92:34:43:7b:ae:b5:4a:f9:9e:82:6d:20:f2: 3a:6e:cb:ec:15:35:cd:34:b9:51:aa:95:d0:ee:b5:30:16:b2: cc:c5:ca:eb:08:e4:f6:5f:9c:cf:f2:35:bf:ab:f5:f3:90:f6: 6e:be:5b:7a:a8:75:e0:83:6f:0d:1b:27:10:30:14:8e:48:15: 6b:8e:28:ee:c7:da:69:76:b0:c8:68:15:fb:5f:cc:57:dc:4b: 89:43:27:31:f3:7a:44:51:bc:f8:45:b6:c2:60:3e:b7:0d:e3: 8f:3f:4a:24:4f:b4:4a:46:a6:b6:f1:3e:45:5b:c0:e3:ea:bd: ed:4a:eb:55:a5:a6:95:62:50:49:2c:75:20:e2:1b:73:6b:56: be:f9:40:d1:a4:10:fe:67:37:04:51:94:43:5b:75:39:8a:46: 09:d8:6c:87:38:41:13:b8:99:4c:ff:f7:9d:ba:7d:9c:df:01: d3:fd:3a:1b:59:d0:e3:c0:30:8d:da:fc:3f:15:77:b7:dd:b5: 75:d1:55:4c:ad:30:30:18:81:8d:6b:dd:e0:ed:50:d8:ad:e7: 24:2a:fa:9d:7d:3c:2f:ea:1c:01:90:0c:81:01:4c:d8:75:6e: 1b:55:0c:be:b6:ab:ff:5c:c1:41:a5:c6:f6:c7:80:5f:61:f6: 53:16:93:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTLi2WUVjlvtVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OWU5NzY2YTQtY2Q4ZS00MzY0LTgzY2YtZmNlYzYzYTFhOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtmByLI5/gvKAAJ4glNZ04OFIG5TKUYxS/hw EMnzKpjOZc3yMhpOFRpgcRmnQP6/yIEXgDix1jztSDuSjFJztDtbmELBAlB7HMMV 8DET0eCAivkzRuxnwqbgChawn7JlIfIBOtdDdLlp+025Xi0asvZUPiKqMw89TA3U VtHLBoC6CH2wvnq/p5n5uG/bvDGHTyi+ZgJYE4TTjIzKH/bS6Om7vJ4oIKxKPFoQ BOQbBy4dpfzgGQBAmb5bQPwYzvkrNC64/tvPYabzi9HsQ65wEPYzSbtvTKK03pBK uAUJ0Ra29bf/sM0S8hRnX8KtfduXFlfpjIWihd5TOa3IK7Mx/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIzL51rifyZX1+90RpeXGafc7ZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWFmNDk3NWQtN2RkMC0z NTVhLThkYmYtY2IwZTM0NmU2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH68Z3yNkjRDe661Svmegm0g8jpuy+wVNc00uVGqldDutTAWsszFyusI 5PZfnM/yNb+r9fOQ9m6+W3qodeCDbw0bJxAwFI5IFWuOKO7H2ml2sMhoFftfzFfc S4lDJzHzekRRvPhFtsJgPrcN448/SiRPtEpGprbxPkVbwOPqve1K61WlppViUEks dSDiG3NrVr75QNGkEP5nNwRRlENbdTmKRgnYbIc4QRO4mUz/9526fZzfAdP9OhtZ 0OPAMI3a/D8Vd7fdtXXRVUytMDAYgY1r3eDtUNit5yQq+p19PC/qHAGQDIEBTNh1 bhtVDL62q/9cwUGlxvbHgF9h9lMWkzQ= -----END CERTIFICATE-----Generated at Tue Sep 29 17:40:04 2026 by rpki-client