$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa File: 02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa (raw, json) Hash identifier: 0WcFaTxDTXf+moQ9WbAMjSrPDh1e2M6UrOv67YhF8ZI= Subject key identifier: AC:70:51:07:7F:A2:0F:00:B9:5E:0B:22:9C:03:74:53:66:33:BE:C0 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584F4975D113471C0BAFCF58EB80 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63199 IP address blocks: 148.153.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:d1:13:47:1c:0b:af:cf:58:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bc2c3e4-22f4-440e-9add-716406cfe11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:91:98:6a:40:b7:78:78:6c:08:62:07:3e: 8b:d1:12:b4:64:37:49:91:90:dd:20:37:09:f0:d1: b3:74:63:f3:a7:e3:54:fa:02:d1:4c:52:76:db:d6: 7e:87:a6:ab:c1:43:c6:ee:71:0a:2e:cb:43:f4:9e: 5d:f2:aa:91:16:98:18:8b:a5:06:03:6a:ba:a5:ef: 8c:c7:1c:ee:02:5d:43:a4:67:c6:40:e1:f5:cb:aa: f4:b4:25:4f:23:cc:0e:f9:d9:cd:eb:f1:bd:ed:59: 43:0d:98:00:02:85:75:2c:a5:96:c6:84:0c:18:a2: 06:40:3e:be:15:1e:41:20:46:ac:3a:40:80:23:01: e2:3e:44:dc:c2:69:97:d3:6c:ec:15:b1:f8:9d:bd: de:08:e8:dc:b0:e1:a8:43:76:f5:69:44:03:50:de: 84:29:f7:17:3f:3d:23:ff:76:56:15:42:68:53:2e: 2c:ad:0e:fb:70:4f:b8:43:e3:01:35:a6:da:c4:df: d2:32:63:fb:a7:19:51:bf:a4:dd:bb:17:e4:e9:ed: 78:dc:bd:89:3f:c4:d9:e6:c3:8b:75:27:e4:23:03: 53:a5:a6:5d:3e:b2:a8:2e:ee:07:a0:5f:3b:7a:51: 7b:76:22:c9:f3:d2:92:e7:7b:21:c0:96:4c:44:c0: b8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:70:51:07:7F:A2:0F:00:B9:5E:0B:22:9C:03:74:53:66:33:BE:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/02ce23dd-2bc1-3a01-ab92-bb829e0d5e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:01:0a:f7:45:48:3c:76:0a:59:05:64:4d:4b:a4:f7:71:5e: ee:92:51:71:52:cd:54:b7:74:1d:1d:21:b9:c4:8b:9f:fd:de: 16:96:53:a8:78:fa:7d:c4:5f:eb:8a:21:dc:fc:86:c4:05:1d: 2b:cd:2b:dc:79:35:58:db:73:28:95:8e:84:ff:f1:e0:ec:d7: dd:86:bd:11:d1:e8:a1:0f:8a:56:38:8a:b1:3f:42:6a:41:74: 6a:99:fe:e5:c5:8d:47:1a:71:ed:da:e2:fb:04:72:4f:14:2c: 01:71:04:39:a3:70:41:a4:ce:c8:b2:ab:18:b3:a1:60:61:28: 78:30:0e:73:f8:19:b0:33:b5:41:6b:90:cf:9d:ce:9d:cb:1c: 90:db:4d:10:07:08:d7:53:22:7e:eb:9d:05:c2:54:60:eb:6d: 22:6f:e1:5c:3d:5a:61:00:30:94:b2:e2:6e:12:d2:e2:5e:fb: 71:81:2e:81:c6:53:c8:5d:27:fd:7b:93:9c:a5:4f:c9:7e:93: 37:34:5a:4d:ee:3f:7d:89:5f:90:cb:82:b2:df:83:11:0d:4e: 96:e1:bc:80:a3:55:d4:ba:6a:94:cd:61:e1:f5:c7:53:5e:2e: ed:ca:a9:93:8d:53:c8:26:21:5c:87:34:bd:f5:ed:e9:75:00: 86:bb:89:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JddETRxwLr89Y64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJjMmMzZTQtMjJmNC00NDBlLTlhZGQtNzE2NDA2Y2ZlMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZiRmGpAt3h4bAhiBz6L0RK0ZDdJkZDdIDcJ 8NGzdGPzp+NU+gLRTFJ229Z+h6arwUPG7nEKLstD9J5d8qqRFpgYi6UGA2q6pe+M xxzuAl1DpGfGQOH1y6r0tCVPI8wO+dnN6/G97VlDDZgAAoV1LKWWxoQMGKIGQD6+ FR5BIEasOkCAIwHiPkTcwmmX02zsFbH4nb3eCOjcsOGoQ3b1aUQDUN6EKfcXPz0j /3ZWFUJoUy4srQ77cE+4Q+MBNabaxN/SMmP7pxlRv6Tduxfk6e143L2JP8TZ5sOL dSfkIwNTpaZdPrKoLu4HoF87elF7diLJ89KS53shwJZMRMC4PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxwUQd/og8AuV4LIpwDdFNmM77AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMDJjZTIzZGQtMmJjMS0z YTAxLWFiOTItYmI4MjllMGQ1ZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4BCvdFSDx2ClkFZE1LpPdxXu6SUXFSzVS3dB0dIbnEi5/93haWU6h4 +n3EX+uKIdz8hsQFHSvNK9x5NVjbcyiVjoT/8eDs192GvRHR6KEPilY4irE/QmpB dGqZ/uXFjUcace3a4vsEck8ULAFxBDmjcEGkzsiyqxizoWBhKHgwDnP4GbAztUFr kM+dzp3LHJDbTRAHCNdTIn7rnQXCVGDrbSJv4Vw9WmEAMJSy4m4S0uJe+3GBLoHG U8hdJ/17k5ylT8l+kzc0Wk3uP32JX5DLgrLfgxENTpbhvICjVdS6apTNYeH1x1Ne Lu3KqZONU8gmIVyHNL317el1AIa7iQE= -----END CERTIFICATE-----Generated at Sat Sep 26 16:11:10 2026 by rpki-client