$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa File: acdfc857-b60f-31a5-a03d-714b58be33d7.roa (raw, json) Hash identifier: uegmxGTpFrBlmIh9VwFU4o65JM8q22o4qSJ4bsF1FAo= Subject key identifier: D5:CE:2C:B3:B5:9F:2F:65:31:A1:90:55:19:EE:0B:E8:36:81:02:C5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D316F6D904E2C67E07F5EBF00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 63199 IP address blocks: 148.153.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6d:90:4e:2c:67:e0:7f:5e:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=204733f9-99ac-4daf-b652-55cce1fb79b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2a:f9:83:51:2c:aa:6f:9c:d1:e6:6e:6b:61: 6f:3a:59:4e:6d:8b:d7:5d:26:0d:e7:1e:70:aa:15: 25:53:02:f3:87:80:ed:b2:68:01:84:7a:21:e5:05: 3f:8a:06:af:57:7e:a9:d9:a3:e5:87:1e:86:8f:0f: 4e:fd:b6:d4:4f:f0:27:3c:ca:b4:72:55:4b:86:bf: d8:78:9f:b9:46:2f:4f:d7:24:5f:5e:d6:f9:36:59: 71:1c:a6:3f:c2:c6:4f:3e:8e:d9:64:af:29:ea:77: 01:68:e7:18:fd:56:ac:6e:e9:3e:1f:76:82:b4:1e: 25:0b:60:e2:fb:26:f5:27:c6:d4:1a:ba:03:6c:11: e1:95:dd:44:d2:7f:dd:63:65:0e:26:9e:43:08:9b: 9e:2c:0e:35:08:89:64:b0:f9:82:65:90:95:72:9d: df:f6:24:1b:24:8f:15:2f:9b:6c:41:1e:79:22:d9: 71:ab:a6:05:8c:e6:eb:8d:b2:84:0f:06:c8:3c:2a: e1:88:88:8e:57:4d:4d:55:ad:93:c5:7b:ec:a9:12: 74:f3:02:05:06:2c:79:84:39:d0:e4:db:d0:12:89: 23:d1:ee:a8:e1:bf:d4:89:1e:2a:c1:23:af:42:a7: c7:f7:bc:ac:c9:b2:d0:54:fe:c8:76:68:0b:a1:6d: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CE:2C:B3:B5:9F:2F:65:31:A1:90:55:19:EE:0B:E8:36:81:02:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/acdfc857-b60f-31a5-a03d-714b58be33d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:92:11:92:87:18:e2:74:df:33:79:f8:4b:13:90:5a:6c:9b: b3:f4:af:d5:0b:a1:94:0f:3e:d9:0c:59:5a:f3:3c:f5:be:45: 89:31:2a:ba:49:68:7a:54:48:d4:2c:c3:12:31:42:7f:61:9e: 7c:50:a9:e3:5c:27:54:b5:bd:a4:87:f9:a2:b1:13:c2:76:70: 20:03:84:3e:44:9c:a9:ae:b8:5e:d3:80:84:1f:50:8b:68:4c: 15:a9:8d:30:32:4a:ce:9d:2e:87:c6:a9:60:75:e7:09:51:9b: 9c:83:a2:dc:f6:ce:c5:82:87:20:93:b0:01:75:7e:9e:c4:9b: a2:bf:ce:73:7e:27:5c:27:bf:1a:9f:97:b4:6a:ba:ed:41:f1: e7:e8:94:8a:5a:e8:c3:12:64:3c:3c:99:a6:e8:6b:df:31:48: 11:5c:f0:86:93:84:a6:9c:85:0a:0e:ba:2d:12:83:0d:03:71: 30:37:94:bf:e2:cd:86:25:44:bb:12:8d:1c:40:8f:a6:54:58: 82:cb:f2:1f:46:2e:2f:a5:11:66:b8:91:7f:75:ed:1b:7f:f5: 75:1d:fe:2c:f2:85:cb:05:c6:f5:43:5c:94:3a:26:3d:8e:c2: 1d:b5:a0:85:33:46:86:f1:c9:2e:60:5e:15:ed:93:ad:23:6c: 0a:4c:c0:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb22QTixn4H9evwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MjA0NzMzZjktOTlhYy00ZGFmLWI2NTItNTVjY2UxZmI3OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ir5g1Esqm+c0eZua2FvOllObYvXXSYN5x5w qhUlUwLzh4DtsmgBhHoh5QU/igavV36p2aPlhx6Gjw9O/bbUT/AnPMq0clVLhr/Y eJ+5Ri9P1yRfXtb5NllxHKY/wsZPPo7ZZK8p6ncBaOcY/Vasbuk+H3aCtB4lC2Di +yb1J8bUGroDbBHhld1E0n/dY2UOJp5DCJueLA41CIlksPmCZZCVcp3f9iQbJI8V L5tsQR55Itlxq6YFjObrjbKEDwbIPCrhiIiOV01NVa2TxXvsqRJ08wIFBix5hDnQ 5NvQEokj0e6o4b/UiR4qwSOvQqfH97ysybLQVP7IdmgLoW3lawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXOLLO1ny9lMaGQVRnuC+g2gQLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWNkZmM4NTctYjYwZi0z MWE1LWEwM2QtNzE0YjU4YmUzM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOSEZKHGOJ03zN5+EsTkFpsm7P0r9ULoZQPPtkMWVrzPPW+RYkxKrpJ aHpUSNQswxIxQn9hnnxQqeNcJ1S1vaSH+aKxE8J2cCADhD5EnKmuuF7TgIQfUIto TBWpjTAySs6dLofGqWB15wlRm5yDotz2zsWChyCTsAF1fp7Em6K/znN+J1wnvxqf l7Rquu1B8efolIpa6MMSZDw8maboa98xSBFc8IaThKachQoOui0Sgw0DcTA3lL/i zYYlRLsSjRxAj6ZUWILL8h9GLi+lEWa4kX917Rt/9XUd/izyhcsFxvVDXJQ6Jj2O wh21oIUzRobxyS5gXhXtk60jbApMwPo= -----END CERTIFICATE-----Generated at Thu Mar 26 06:24:11 2026 by rpki-client