$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa File: c0d325d4-637f-36da-a8b1-3933c07dd546.roa (raw, json) Hash identifier: IeJ7MtjmGXpazzEEhbi5umFZIp1sH2+zTNtmH3hhgcs= Subject key identifier: 2F:D3:69:6C:85:93:00:C9:C8:52:0D:EF:8C:76:F5:A5:BF:49:30:68 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584DBD059187F825B91F3E58D080 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 63199 IP address blocks: 148.153.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:91:87:f8:25:b9:1f:3e:58:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=112e5c89-98b0-456f-976f-cdc0ecc70d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:f5:13:9e:2e:aa:88:db:fd:2b:d0:66:67: c8:f2:a7:ac:f6:c5:90:48:dd:78:34:ec:44:6d:b9: f6:f8:5a:7e:32:bd:8e:79:2d:c6:7d:7b:e0:02:cd: 69:d4:26:3d:44:ea:62:14:07:e1:5c:f0:54:01:3d: 60:4a:79:56:93:34:64:1f:a8:05:b7:78:b3:d9:0f: 6b:8e:74:13:61:4d:9a:10:60:6b:df:2b:19:b8:d3: 7f:45:a4:fa:30:be:4c:4b:9e:22:17:8a:95:1d:a5: 54:15:13:b9:4a:92:61:67:c9:d0:95:63:09:6b:25: ef:a2:d7:c6:a5:9a:c8:1f:32:7d:ad:0b:53:52:5f: c4:62:6c:8b:9d:b6:82:83:d3:d2:f2:16:58:4c:38: 65:bf:a4:be:55:63:5b:c0:c6:bc:f5:21:97:a3:50: 49:cd:b8:ca:0f:3e:42:71:d8:ee:9a:1a:c6:58:26: 82:10:cf:b8:cf:21:1f:82:9e:36:b9:a2:18:0a:2b: 62:a3:19:9c:24:63:f7:1e:9a:97:20:f8:6f:ef:ea: 6e:c1:ad:f2:2c:0f:95:3d:22:e9:bf:5d:c3:e5:7f: 0b:9f:f1:2d:ef:5d:5e:f8:dc:cd:1d:f8:b9:ef:19: e6:de:45:09:6d:fe:92:f2:ed:91:e4:c7:99:94:28: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D3:69:6C:85:93:00:C9:C8:52:0D:EF:8C:76:F5:A5:BF:49:30:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b1:e0:10:c7:43:59:39:89:0a:cd:f1:82:77:29:e3:1c:47: 81:50:b6:c0:b1:51:78:37:7d:d2:b2:c5:13:0f:e6:1d:89:bf: 8f:7b:1f:22:ce:9c:dd:83:d7:ea:dd:5f:ea:8a:78:7f:aa:4f: e9:9d:6a:fc:e9:3b:7a:26:18:2c:4f:cb:0e:bd:89:d9:68:36: e6:25:3e:af:36:b9:1a:20:29:cc:ba:f1:f5:16:e8:6e:9e:e4: 94:ea:11:26:60:79:86:fd:6c:10:a9:c3:66:6d:e8:8a:fd:25: 73:71:59:f6:03:a9:ef:1a:a1:d6:cb:68:2d:87:61:87:a7:31: 49:eb:96:ab:26:49:cf:12:81:d8:fb:db:08:42:ad:6b:3c:c0: 9f:03:0a:d9:a3:34:3e:74:d3:8a:f8:cc:c1:95:b3:82:17:8f: 97:ea:b2:d8:6b:ce:df:f0:cf:47:73:af:aa:f3:bc:16:eb:43: 24:78:51:2d:54:90:57:dd:a7:26:b5:7a:41:8c:0f:ce:e3:1f: a8:c1:fb:49:9d:b4:0e:bc:ab:14:b2:1d:df:fa:ad:db:ea:40: 1c:d2:78:5f:f9:f6:fa:f4:b9:67:e8:86:2d:d6:79:20:c5:75: 25:82:dc:c6:8f:a7:e2:6e:59:29:80:f0:32:56:67:52:fe:0d: 80:ab:d8:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BZGH+CW5Hz5Y0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk MTEyZTVjODktOThiMC00NTZmLTk3NmYtY2RjMGVjYzcwZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkL1E54uqojb/SvQZmfI8qes9sWQSN14NOxE bbn2+Fp+Mr2OeS3GfXvgAs1p1CY9ROpiFAfhXPBUAT1gSnlWkzRkH6gFt3iz2Q9r jnQTYU2aEGBr3ysZuNN/RaT6ML5MS54iF4qVHaVUFRO5SpJhZ8nQlWMJayXvotfG pZrIHzJ9rQtTUl/EYmyLnbaCg9PS8hZYTDhlv6S+VWNbwMa89SGXo1BJzbjKDz5C cdjumhrGWCaCEM+4zyEfgp42uaIYCitioxmcJGP3HpqXIPhv7+puwa3yLA+VPSLp v13D5X8Ln/Et711e+NzNHfi57xnm3kUJbf6S8u2R5MeZlCjcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/TaWyFkwDJyFIN74x29aW/STBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzBkMzI1ZDQtNjM3Zi0z NmRhLWE4YjEtMzkzM2MwN2RkNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+x4BDHQ1k5iQrN8YJ3KeMcR4FQtsCxUXg3fdKyxRMP5h2Jv497HyLO nN2D1+rdX+qKeH+qT+mdavzpO3omGCxPyw69idloNuYlPq82uRogKcy68fUW6G6e 5JTqESZgeYb9bBCpw2Zt6Ir9JXNxWfYDqe8aodbLaC2HYYenMUnrlqsmSc8Sgdj7 2whCrWs8wJ8DCtmjND5004r4zMGVs4IXj5fqsthrzt/wz0dzr6rzvBbrQyR4US1U kFfdpya1ekGMD87jH6jB+0mdtA68qxSyHd/6rdvqQBzSeF/59vr0uWfohi3WeSDF dSWC3MaPp+JuWSmA8DJWZ1L+DYCr2Es= -----END CERTIFICATE-----Generated at Wed May 13 12:34:59 2026 by rpki-client