$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa File: ae88cc2d-895e-3615-9e9b-18670bde5eec.roa (raw, json) Hash identifier: Bd/vEHwBiwVPqjkjrehmnANYExn6Eb76I3tJ8EA/RCw= Subject key identifier: 32:F3:56:2E:31:CD:1B:08:4D:25:75:F9:DC:4B:59:B2:26:3B:B1:C8 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F14679B0AA099C42B7106E580 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 63199 IP address blocks: 148.153.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9b:0a:a0:99:c4:2b:71:06:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=bf875f2c-9b79-465d-927b-57e03eddfc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:2a:27:5a:33:95:06:cf:9b:c5:50:c9:5c: 2c:f1:f4:51:01:c5:12:bc:02:1a:bc:03:ad:c6:d0: be:a3:88:06:ef:89:64:78:3c:7d:ae:a9:fa:31:df: 06:fe:75:8f:0e:20:40:d3:9f:aa:63:0d:c7:8b:0c: 2d:8d:2e:28:1a:60:f0:55:8d:51:60:c3:de:36:76: eb:b2:03:ea:2c:e0:2d:f3:54:2a:1e:8b:6d:15:ba: bb:ab:0a:7c:62:12:b4:2e:39:0f:00:05:93:9c:42: 2e:53:39:69:8a:c2:0f:7a:be:2a:ac:7a:81:78:8d: 0b:30:cb:72:90:a7:57:34:19:8d:6c:8a:0a:e2:f9: b0:07:d6:f9:bd:c7:5c:20:d3:9a:7e:51:a2:b0:fd: a2:a8:77:a4:4d:28:97:a3:cb:c1:86:c5:6b:cc:2f: 28:72:1b:0c:9b:9c:13:cc:cf:38:49:ef:d8:96:4e: 48:2c:4f:7f:d4:0d:aa:97:47:29:c4:1e:d4:44:3f: 37:41:cf:c1:2d:c6:86:e9:35:b6:c0:90:ea:5b:8f: 51:c7:d3:35:86:a5:7a:10:05:d6:6b:6b:1c:05:4a: 9f:46:33:10:34:52:27:04:66:09:a2:63:91:59:1e: 4a:c3:27:99:62:46:c2:22:51:71:bd:db:ae:32:2d: 1a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F3:56:2E:31:CD:1B:08:4D:25:75:F9:DC:4B:59:B2:26:3B:B1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f9:c4:7e:a2:d7:87:ee:4e:46:de:af:5a:71:94:ad:df:8e: 48:50:e0:d9:bf:1f:63:fb:2f:80:14:b7:e8:d2:d3:8a:4c:09: eb:c6:72:8d:b1:71:c6:aa:ff:e8:51:fc:44:6a:43:0b:24:6b: b9:41:16:e1:7b:eb:19:63:15:f6:8e:58:dc:bc:ec:c1:83:49: ef:a4:f9:70:b2:d9:fe:3e:fe:32:8e:85:0c:ff:d3:19:43:dc: ff:72:c6:b8:67:4e:2d:a8:c1:1b:75:34:da:91:0a:cd:ee:9c: b7:5d:21:de:9f:43:72:e3:75:76:62:3e:c8:10:82:1e:8f:b3: 2c:93:95:6f:59:35:7e:14:a7:94:0f:8b:f2:f6:84:56:46:30: ea:d8:46:17:81:45:21:f4:56:c6:32:05:97:db:25:97:74:02: 0f:bc:e3:75:ab:60:32:05:84:6d:29:85:3b:1b:2a:9a:6d:b3: 3b:73:d8:86:ed:7c:73:67:d5:c7:ed:1a:ac:62:53:42:ef:37: f7:1e:37:6a:38:5b:f1:be:45:21:a0:c0:57:50:6f:62:72:1a: 9b:9b:b2:34:d6:d7:65:4b:9e:67:7c:0f:da:e2:7c:40:5b:35: 63:56:7d:27:8f:22:2b:cd:f8:58:bd:8d:ce:7b:1b:93:b3:cb: 7c:66:63:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5sKoJnEK3EG5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YmY4NzVmMmMtOWI3OS00NjVkLTkyN2ItNTdlMDNlZGRmYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy30qJ1ozlQbPm8VQyVws8fRRAcUSvAIavAOt xtC+o4gG74lkeDx9rqn6Md8G/nWPDiBA05+qYw3HiwwtjS4oGmDwVY1RYMPeNnbr sgPqLOAt81QqHottFbq7qwp8YhK0LjkPAAWTnEIuUzlpisIPer4qrHqBeI0LMMty kKdXNBmNbIoK4vmwB9b5vcdcINOaflGisP2iqHekTSiXo8vBhsVrzC8ochsMm5wT zM84Se/Ylk5ILE9/1A2ql0cpxB7URD83Qc/BLcaG6TW2wJDqW49Rx9M1hqV6EAXW a2scBUqfRjMQNFInBGYJomORWR5KwyeZYkbCIlFxvduuMi0a7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLzVi4xzRsITSV1+dxLWbImO7HIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWU4OGNjMmQtODk1ZS0z NjE1LTllOWItMTg2NzBiZGU1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT5xH6i14fuTkber1pxlK3fjkhQ4Nm/H2P7L4AUt+jS04pMCevGco2x ccaq/+hR/ERqQwska7lBFuF76xljFfaOWNy87MGDSe+k+XCy2f4+/jKOhQz/0xlD 3P9yxrhnTi2owRt1NNqRCs3unLddId6fQ3LjdXZiPsgQgh6PsyyTlW9ZNX4Up5QP i/L2hFZGMOrYRheBRSH0VsYyBZfbJZd0Ag+843WrYDIFhG0phTsbKpptsztz2Ibt fHNn1cftGqxiU0LvN/ceN2o4W/G+RSGgwFdQb2JyGpubsjTW12VLnmd8D9rifEBb NWNWfSePIivN+Fi9jc57G5Ozy3xmYzU= -----END CERTIFICATE-----Generated at Fri Sep 25 19:00:22 2026 by rpki-client