$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa File: 2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa (raw, json) Hash identifier: tW9tCQ86Qd8RCV4tPh/GP1q6lMMRc2pVgUuIg5QFM6w= Subject key identifier: E4:A2:62:FF:48:98:05:E5:0C:CA:35:AD:BB:AD:C7:BE:BF:A1:3A:7D Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D5E1A6A21ABDD68F4AF57F1E0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 63199 IP address blocks: 148.153.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6a:21:ab:dd:68:f4:af:57:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=b114fe2f-a5be-40b6-ac77-b13b6b735425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:dc:3d:c7:2a:12:22:1e:16:b0:65:f4:e1: db:69:20:98:5b:e1:2c:6b:4b:2c:95:d0:28:7e:9f: c7:02:4d:fc:38:26:42:2a:1a:0f:ef:53:9b:f0:bf: 96:e3:dc:92:6b:66:bc:a8:48:93:9b:0b:28:0b:85: 50:75:de:50:64:af:32:73:ec:ac:f3:34:48:ca:ef: 55:fa:16:90:d3:aa:93:d0:9f:20:0f:56:da:14:73: 68:70:12:d6:cd:d7:67:e8:5d:84:7e:5c:3e:80:96: 6d:3c:30:dd:fd:9f:3a:75:e6:47:4e:c5:9e:59:7f: b5:82:be:c9:2d:f1:3c:ee:0e:bb:50:8c:a4:a3:1a: 97:29:7a:a8:b1:e3:92:79:3f:55:d6:67:a0:07:5f: 04:62:85:51:b2:16:70:4a:a7:47:57:f7:f8:d1:c0: 6b:c1:c4:f1:9b:91:58:99:98:27:73:f5:f5:bd:53: 28:ed:c1:17:5e:bc:40:e9:b7:7a:df:15:9b:a8:cf: 01:e9:10:c3:a0:0f:15:04:05:ac:bf:ee:d4:5a:07: 76:08:c4:72:19:a5:cc:46:df:3a:b9:a0:db:38:0d: 7b:7d:52:dc:1d:3e:6b:80:50:ca:60:27:99:10:ac: 5f:d4:df:2a:3f:f2:51:35:b0:cd:f4:ec:ba:bb:0e: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A2:62:FF:48:98:05:E5:0C:CA:35:AD:BB:AD:C7:BE:BF:A1:3A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2c20d21b-8a0e-3df4-9113-c866f5b9811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c3:16:36:02:4d:0d:f8:7d:fb:7d:97:b8:2b:3d:44:4a:e6: 61:e2:b1:5f:b2:b9:1e:a9:73:fe:05:2d:8a:61:4e:f8:22:6c: 8a:8d:f9:88:fc:81:b4:4a:8f:bf:69:6f:35:97:63:71:c3:ca: fd:fc:1e:64:f9:c3:65:ab:82:4c:dc:dd:02:7f:8e:5e:e4:1a: f1:4b:b1:42:c8:cf:d8:b3:6c:51:9d:55:4f:06:f3:3c:6e:83: 59:52:ee:30:b7:23:80:ed:69:85:3a:00:cb:a2:2c:d3:1a:db: 6a:6e:32:d0:71:8e:c7:28:35:bf:39:af:b9:13:45:ef:b6:e1: 33:f9:f4:17:29:89:d7:99:91:f7:60:9e:6d:f7:46:51:7a:7a: ed:18:85:4b:43:32:f4:78:3d:29:70:2e:18:dc:10:5e:50:f8: 57:e0:0f:95:70:d6:90:b0:e6:46:32:d5:89:cb:e8:86:ec:0f: b1:e8:c0:ce:0b:80:b4:b5:cc:ba:4d:4c:10:c4:33:9b:dc:11: f0:ee:df:7c:92:aa:10:71:3e:3b:88:34:cd:4d:58:4f:9e:93: 51:6d:8d:58:0f:64:b3:c9:8b:6c:31:c8:e8:ba:5d:a6:46:7b: aa:27:9f:d9:af:ab:55:af:e3:7c:a6:97:cf:84:1f:4c:fc:56: f6:0f:44:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmohq91o9K9X8eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YjExNGZlMmYtYTViZS00MGI2LWFjNzctYjEzYjZiNzM1NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcvcPccqEiIeFrBl9OHbaSCYW+Esa0ssldAo fp/HAk38OCZCKhoP71Ob8L+W49ySa2a8qEiTmwsoC4VQdd5QZK8yc+ys8zRIyu9V +haQ06qT0J8gD1baFHNocBLWzddn6F2Eflw+gJZtPDDd/Z86deZHTsWeWX+1gr7J LfE87g67UIykoxqXKXqoseOSeT9V1megB18EYoVRshZwSqdHV/f40cBrwcTxm5FY mZgnc/X1vVMo7cEXXrxA6bd63xWbqM8B6RDDoA8VBAWsv+7UWgd2CMRyGaXMRt86 uaDbOA17fVLcHT5rgFDKYCeZEKxf1N8qP/JRNbDN9Oy6uw7xkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSiYv9ImAXlDMo1rbutx76/oTp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmMyMGQyMWItOGEwZS0z ZGY0LTkxMTMtYzg2NmY1Yjk4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJm5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzDFjYCTQ34fft9l7grPURK5mHisV+yuR6pc/4FLYphTvgibIqN+Yj8 gbRKj79pbzWXY3HDyv38HmT5w2Wrgkzc3QJ/jl7kGvFLsULIz9izbFGdVU8G8zxu g1lS7jC3I4DtaYU6AMuiLNMa22puMtBxjscoNb85r7kTRe+24TP59BcpideZkfdg nm33RlF6eu0YhUtDMvR4PSlwLhjcEF5Q+FfgD5Vw1pCw5kYy1YnL6IbsD7HowM4L gLS1zLpNTBDEM5vcEfDu33ySqhBxPjuINM1NWE+ek1FtjVgPZLPJi2wxyOi6XaZG e6onn9mvq1Wv43yml8+EH0z8VvYPRC0= -----END CERTIFICATE-----Generated at Fri Apr 17 13:41:24 2026 by rpki-client