$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa File: cef491ba-6998-36c3-9897-80eae0b6f79b.roa (raw, json) Hash identifier: AEKUlNf0Mf6PvA6zyJyGXxpz6HUPN7tfkJEKdEpWXcg= Subject key identifier: 49:0B:6A:02:5B:EA:43:F3:3F:7F:7B:C4:6C:9D:8E:43:B6:B2:26:D5 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D2644B62CDB45642ED55DC480 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 63199 IP address blocks: 148.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b6:2c:db:45:64:2e:d5:5d:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=9c037e1f-f687-4ccb-95d0-db48135c3ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d7:42:b4:32:51:26:23:60:08:fe:5c:30:f3: ce:bf:db:b4:b1:56:a0:b6:4d:f2:96:a0:75:24:16: 4e:d9:c9:65:9c:76:d3:cc:34:2d:23:7f:5a:1c:02: c5:a3:3c:48:eb:69:1f:27:14:36:21:d6:b2:02:59: 15:7f:dc:9c:f9:2e:cd:00:3b:be:84:a5:42:6c:2b: 59:90:8b:f7:43:80:8f:7c:51:bf:c7:1c:42:01:f6: 46:94:ee:3b:f9:0c:de:20:01:7d:6c:52:65:2b:d1: 4b:d9:94:24:29:83:b9:94:51:c5:41:4e:47:08:cb: 6d:99:0c:28:58:d9:6d:ca:30:12:78:1f:d3:71:7d: a1:1f:a0:7e:7c:ea:0b:ae:71:5c:65:d5:14:df:4d: 32:71:8d:6b:58:2b:47:4a:c5:7e:bf:08:e4:b9:57: 4b:bb:86:ca:47:2c:0b:58:c2:dc:b6:7e:04:3a:82: f5:2b:1f:21:05:4a:d7:93:10:6c:7a:53:3b:8b:e2: b3:bb:6d:86:93:49:09:25:08:6e:e2:4d:7f:1e:c3: b9:c2:58:af:94:e1:98:c5:42:20:6a:a2:20:06:ce: 57:65:4e:8d:5b:24:39:09:0b:03:e6:61:be:9a:f4: 82:08:34:eb:52:8e:69:0d:b2:7c:06:5e:52:ee:e8: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0B:6A:02:5B:EA:43:F3:3F:7F:7B:C4:6C:9D:8E:43:B6:B2:26:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a2:e3:e0:0e:5b:41:08:64:63:2e:0f:07:2e:5e:3b:e5:ee: ca:36:0f:06:fb:4b:9c:f3:fd:aa:92:fc:42:53:e0:bd:bb:2f: b9:c5:00:7f:23:58:b8:66:0e:f4:c2:37:b3:b8:fc:d7:d3:b0: 59:b1:90:dc:b9:73:09:23:d4:ba:f4:7c:6e:90:16:2a:80:9d: e7:93:37:5f:67:37:85:e6:9b:33:d0:2e:90:83:be:4f:28:6d: 70:15:a8:e2:ab:3a:e6:f8:43:6b:51:dc:28:bd:7f:ff:f6:0d: 75:c7:b9:fe:83:78:2d:ea:b0:11:29:44:35:9a:48:00:2d:0b: cc:c9:3e:c0:1d:2c:b1:3b:6b:0a:aa:ce:68:78:0a:ad:8a:8d: c0:09:4d:00:73:79:51:55:88:16:47:aa:d5:d2:5a:bb:95:b3: f6:0f:33:78:b9:40:c9:87:56:eb:55:43:69:f7:97:18:09:8b: 5c:29:a9:d9:20:77:46:09:7a:88:85:66:9f:1b:95:c0:5e:e8: ba:ad:34:d2:5e:9c:4c:3f:f2:e3:4a:d0:97:e0:75:c5:3a:24: 30:95:f7:2e:c1:fc:b0:9a:56:3d:19:6e:da:e1:b3:76:e4:df: ba:fd:4c:59:10:57:f5:e3:35:1b:2e:7a:db:a5:1c:1f:5b:fd: ce:fd:68:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLYs20VkLtVdxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk OWMwMzdlMWYtZjY4Ny00Y2NiLTk1ZDAtZGI0ODEzNWMzZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9dCtDJRJiNgCP5cMPPOv9u0sVagtk3ylqB1 JBZO2cllnHbTzDQtI39aHALFozxI62kfJxQ2IdayAlkVf9yc+S7NADu+hKVCbCtZ kIv3Q4CPfFG/xxxCAfZGlO47+QzeIAF9bFJlK9FL2ZQkKYO5lFHFQU5HCMttmQwo WNltyjASeB/TcX2hH6B+fOoLrnFcZdUU300ycY1rWCtHSsV+vwjkuVdLu4bKRywL WMLctn4EOoL1Kx8hBUrXkxBselM7i+Kzu22Gk0kJJQhu4k1/HsO5wlivlOGYxUIg aqIgBs5XZU6NWyQ5CQsD5mG+mvSCCDTrUo5pDbJ8Bl5S7ug8xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkLagJb6kPzP397xGydjkO2sibVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2VmNDkxYmEtNjk5OC0z NmMzLTk4OTctODBlYWUwYjZmNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmi4+AOW0EIZGMuDwcuXjvl7so2Dwb7S5zz/aqS/EJT4L27L7nFAH8j WLhmDvTCN7O4/NfTsFmxkNy5cwkj1Lr0fG6QFiqAneeTN19nN4XmmzPQLpCDvk8o bXAVqOKrOub4Q2tR3Ci9f//2DXXHuf6DeC3qsBEpRDWaSAAtC8zJPsAdLLE7awqq zmh4Cq2KjcAJTQBzeVFViBZHqtXSWruVs/YPM3i5QMmHVutVQ2n3lxgJi1wpqdkg d0YJeoiFZp8blcBe6LqtNNJenEw/8uNK0JfgdcU6JDCV9y7B/LCaVj0Zbtrhs3bk 37r9TFkQV/XjNRsuetulHB9b/c79aDA= -----END CERTIFICATE-----Generated at Thu Mar 26 02:40:56 2026 by rpki-client