$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa File: ae88cc2d-895e-3615-9e9b-18670bde5eec.roa (raw, json) Hash identifier: E+UHb8AmTsCYuvJ3GueeU1XaeHB5eczbwIw6QJ/v6P0= Subject key identifier: B8:A3:40:0D:33:EB:C3:D7:AF:37:BE:06:08:DB:20:EB:DE:9D:07:2E Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D91C021B5FE27E6010F58AB40 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 63199 IP address blocks: 148.153.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:21:b5:fe:27:e6:01:0f:58:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=2beb106d-aedb-4b46-afed-3c14c44a9b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:7d:12:48:fa:2b:4d:fc:7d:f6:71:18:45: 2e:25:fa:5c:85:c0:e3:52:c4:bf:b2:af:b4:69:40: b4:73:1f:cf:02:bd:2f:9f:dc:6e:f0:61:30:17:9d: a4:08:5b:55:a0:73:7b:f8:1d:1d:23:df:26:d9:f9: 2a:0b:13:26:ae:14:a6:e1:fe:65:99:7a:53:31:77: 25:f6:f3:1a:f4:b8:01:05:a8:5d:54:63:b3:6c:9d: fb:e3:b6:92:c3:4c:e2:ef:f8:71:a7:a2:7b:b7:41: d4:95:a3:54:35:25:d8:f8:6d:b7:9b:ea:25:ef:05: 76:b5:1d:8f:df:3b:0f:1f:30:45:ca:0f:30:6d:0e: 3c:f9:8e:27:ce:a6:b3:74:76:a3:0b:aa:fc:2e:39: 2c:02:3a:b4:e6:0d:11:9c:e9:c2:0c:d0:38:02:74: ce:f7:be:bc:63:2b:44:a3:fc:22:b8:09:55:c1:a2: 47:03:e4:c5:de:83:3e:78:37:5c:b3:2e:fd:55:84: 23:a5:6c:d0:1d:ec:8f:22:9f:01:df:d5:cc:fb:38: 89:66:a8:45:44:a8:78:55:8e:05:41:af:9e:a0:94: 22:45:5c:6f:1c:ee:3f:a1:c0:5f:ec:41:cf:81:eb: 0b:b2:8e:f5:93:91:60:47:76:e3:47:53:fb:1c:bb: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A3:40:0D:33:EB:C3:D7:AF:37:BE:06:08:DB:20:EB:DE:9D:07:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:1c:70:4f:e6:36:75:e3:59:d1:5d:bc:49:6a:cc:c6:9a:d1: 25:06:ed:f9:03:73:7a:df:20:e6:b9:70:b7:26:1f:9f:68:cf: d6:91:8a:35:cc:76:fc:a3:8b:15:d7:c9:7b:4c:9d:38:41:ee: e4:69:21:7b:d2:f0:71:81:3f:cd:bf:43:3f:26:3b:de:c1:72: 88:20:34:eb:65:46:4f:7b:b9:59:05:80:86:6c:4c:97:36:8c: 23:60:4e:92:38:5f:10:c1:f2:6a:f4:cb:ee:92:ea:25:b1:b5: 7b:cc:d5:b2:84:83:48:23:0d:db:cc:25:87:66:e9:ad:0f:7d: e9:39:c5:7e:c8:31:e4:d6:72:f5:eb:95:01:2e:36:c1:7b:0e: df:e3:c5:16:2a:20:ca:f4:48:d5:79:57:d7:b5:6a:f7:79:58: 41:5c:61:38:0d:00:20:dc:79:a0:cc:af:4a:66:3b:d1:1c:f4: f8:7f:e8:f3:f0:c1:26:0f:ec:8f:92:af:50:9e:c3:2c:86:fc: 62:be:b4:aa:00:40:97:40:24:45:3a:45:36:5f:b1:11:83:95: b0:8a:07:3e:ab:8d:3a:77:9e:0e:c2:60:b1:4e:f8:19:1e:e7: 9e:43:13:9f:29:25:1c:82:97:fa:38:e3:0c:82:c8:69:68:3e: b9:a5:1e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwCG1/ifmAQ9Yq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MmJlYjEwNmQtYWVkYi00YjQ2LWFmZWQtM2MxNGM0NGE5Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVd9Ekj6K038ffZxGEUuJfpchcDjUsS/sq+0 aUC0cx/PAr0vn9xu8GEwF52kCFtVoHN7+B0dI98m2fkqCxMmrhSm4f5lmXpTMXcl 9vMa9LgBBahdVGOzbJ3747aSw0zi7/hxp6J7t0HUlaNUNSXY+G23m+ol7wV2tR2P 3zsPHzBFyg8wbQ48+Y4nzqazdHajC6r8LjksAjq05g0RnOnCDNA4AnTO9768YytE o/wiuAlVwaJHA+TF3oM+eDdcsy79VYQjpWzQHeyPIp8B39XM+ziJZqhFRKh4VY4F Qa+eoJQiRVxvHO4/ocBf7EHPgesLso71k5FgR3bjR1P7HLtV9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLijQA0z68PXrze+BgjbIOvenQcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWU4OGNjMmQtODk1ZS0z NjE1LTllOWItMTg2NzBiZGU1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQccE/mNnXjWdFdvElqzMaa0SUG7fkDc3rfIOa5cLcmH59oz9aRijXM dvyjixXXyXtMnThB7uRpIXvS8HGBP82/Qz8mO97BcoggNOtlRk97uVkFgIZsTJc2 jCNgTpI4XxDB8mr0y+6S6iWxtXvM1bKEg0gjDdvMJYdm6a0Pfek5xX7IMeTWcvXr lQEuNsF7Dt/jxRYqIMr0SNV5V9e1avd5WEFcYTgNACDceaDMr0pmO9Ec9Ph/6PPw wSYP7I+Sr1CewyyG/GK+tKoAQJdAJEU6RTZfsRGDlbCKBz6rjTp3ng7CYLFO+Bke 555DE58pJRyCl/o44wyCyGloPrmlHsM= -----END CERTIFICATE-----Generated at Wed May 13 09:32:58 2026 by rpki-client