$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa File: cef491ba-6998-36c3-9897-80eae0b6f79b.roa (raw, json) Hash identifier: JiocuVjZUsL3fFjC8hoObock9w56Vv8HqXZS9zTFaqw= Subject key identifier: 26:D7:D5:D2:75:77:22:D2:8F:56:D0:48:5D:D1:89:E0:63:0D:DF:21 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F4C3D4894DC754E662E922370 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 63199 IP address blocks: 148.153.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:48:94:dc:75:4e:66:2e:92:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=eda4d7ea-199a-441b-981e-7f238041d1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d5:1e:83:eb:ab:e7:d9:5e:ba:7a:16:0d:c0: 96:14:f6:2e:8a:7d:da:a4:2a:0a:ca:34:20:1a:ac: 79:90:50:9d:55:70:d3:f5:43:12:2a:de:aa:b7:67: b9:68:3e:71:5c:79:dd:92:50:aa:5f:a5:2a:42:db: 59:e3:e4:cd:cc:7d:38:27:1e:3f:e1:b1:47:e4:85: 58:40:3c:61:39:90:69:23:59:79:1f:d7:3f:a2:46: e1:26:a9:2d:81:86:18:8d:1c:0f:5e:fe:26:09:a9: 2f:41:78:29:33:41:9c:e5:ae:92:be:80:a9:46:ee: f2:18:b7:0c:ef:71:f1:1d:29:b1:56:f6:09:a3:5c: 0d:88:b8:85:1f:b5:82:25:84:09:8d:59:36:7d:77: df:61:cd:ae:8e:db:84:36:66:96:57:02:34:05:89: 3e:06:7a:9f:3b:72:de:bc:ec:ca:f0:92:12:1d:5c: 81:07:7b:77:54:a6:df:1f:e8:7f:d2:51:c3:21:50: 25:25:a9:2d:1d:5c:fc:ce:fb:3e:73:10:7b:45:e2: c7:98:d0:6f:00:bb:10:20:ee:3e:07:f0:71:71:53: c4:b7:22:51:6a:b1:30:9c:04:a9:53:b8:16:cb:e8: ca:e1:c3:33:e8:cf:ab:01:21:4c:b9:9a:bd:1b:21: 79:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D7:D5:D2:75:77:22:D2:8F:56:D0:48:5D:D1:89:E0:63:0D:DF:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cef491ba-6998-36c3-9897-80eae0b6f79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:08:37:44:4b:7d:e9:ad:7f:a6:16:4c:ae:bd:b5:46:c6:e1: 25:e9:30:4b:25:3e:c4:79:f1:53:02:1d:a8:a1:1b:40:7e:65: 1e:bb:95:71:0f:26:e8:6c:31:e5:5e:41:57:0c:2f:c7:a9:ea: ba:bb:3c:45:ae:f8:31:3d:32:05:5e:8b:1f:ff:56:5f:3d:c2: 00:e6:68:6a:e9:50:53:59:43:11:25:1b:02:b3:2e:36:5e:93: 12:a6:26:53:e7:4e:85:15:14:c6:6f:1f:1b:f1:82:1b:17:f4: 70:45:23:b1:d9:91:b9:87:d5:dd:2f:55:0e:f5:14:3f:be:f7: 9a:67:5d:b3:42:97:10:56:08:03:44:be:1e:5d:41:ba:f6:4f: 3a:cd:4c:3a:ca:7b:b9:f4:df:98:86:f6:c8:98:35:2d:3d:4c: 78:0a:06:c2:53:cc:15:4d:ef:33:a6:8e:15:6e:c5:70:bf:92: 0f:27:78:68:95:6a:fa:82:31:1b:ac:1f:b6:04:15:fe:6d:5c: b8:85:8a:8a:54:18:d9:16:65:3f:fb:f2:30:14:b0:73:78:e8: 45:f0:c5:86:c8:c5:c4:ac:8b:46:1f:ff:99:d5:b8:68:8d:75: 7c:1f:6b:75:28:80:01:04:56:d8:49:f9:46:a7:fd:8a:2f:11: 81:61:5f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUiU3HVOZi6SI3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWRhNGQ3ZWEtMTk5YS00NDFiLTk4MWUtN2YyMzgwNDFkMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49Ueg+ur59leunoWDcCWFPYuin3apCoKyjQg Gqx5kFCdVXDT9UMSKt6qt2e5aD5xXHndklCqX6UqQttZ4+TNzH04Jx4/4bFH5IVY QDxhOZBpI1l5H9c/okbhJqktgYYYjRwPXv4mCakvQXgpM0Gc5a6SvoCpRu7yGLcM 73HxHSmxVvYJo1wNiLiFH7WCJYQJjVk2fXffYc2ujtuENmaWVwI0BYk+BnqfO3Le vOzK8JISHVyBB3t3VKbfH+h/0lHDIVAlJaktHVz8zvs+cxB7ReLHmNBvALsQIO4+ B/BxcVPEtyJRarEwnASpU7gWy+jK4cMz6M+rASFMuZq9GyF5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbX1dJ1dyLSj1bQSF3RieBjDd8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2VmNDkxYmEtNjk5OC0z NmMzLTk4OTctODBlYWUwYjZmNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYIN0RLfemtf6YWTK69tUbG4SXpMEslPsR58VMCHaihG0B+ZR67lXEP JuhsMeVeQVcML8ep6rq7PEWu+DE9MgVeix//Vl89wgDmaGrpUFNZQxElGwKzLjZe kxKmJlPnToUVFMZvHxvxghsX9HBFI7HZkbmH1d0vVQ71FD++95pnXbNClxBWCANE vh5dQbr2TzrNTDrKe7n035iG9siYNS09THgKBsJTzBVN7zOmjhVuxXC/kg8neGiV avqCMRusH7YEFf5tXLiFiopUGNkWZT/78jAUsHN46EXwxYbIxcSsi0Yf/5nVuGiN dXwfa3UogAEEVthJ+Uan/YovEYFhXxQ= -----END CERTIFICATE-----Generated at Tue Oct 6 03:22:52 2026 by rpki-client