$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa File: 2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa (raw, json) Hash identifier: vPsNbHTiSrP4opqIzT14c7EjjYDPjzerIceGMHLg7kw= Subject key identifier: B5:CF:40:84:89:65:D9:42:EC:FD:51:59:D8:60:41:35:7B:0D:01:52 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D80FFED4A8C8A48D9B999D780 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 63199 IP address blocks: 148.153.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:ed:4a:8c:8a:48:d9:b9:99:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=6976eb63-4fe9-4809-b82b-06655f3de67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:f0:a8:9f:b0:d2:6b:4a:14:c0:d4:27:93: 73:47:cc:48:15:0b:80:85:10:00:b4:0c:cc:4d:7b: 59:12:3d:11:7a:2d:97:67:6a:95:83:99:5b:0b:29: 62:10:5a:ba:28:6d:68:b4:bc:fe:c0:be:be:ed:41: b0:40:b0:47:4a:1d:25:86:cc:66:34:bf:8d:25:7c: ff:5e:90:20:95:55:b8:20:57:6f:b6:4c:a0:06:8b: 43:eb:91:34:28:f5:d1:e6:25:f9:80:c4:d6:3d:75: c2:27:cc:3b:65:87:ca:b2:e8:47:1a:0d:23:af:a7: ec:d3:16:44:25:61:3d:5d:39:c8:57:d8:89:86:96: ad:68:4a:70:18:ac:a8:9b:8b:22:f3:10:2d:a7:96: 70:ca:9e:b6:01:be:f8:69:be:21:35:bd:97:97:5d: cf:ac:88:e0:8c:c2:bf:6c:0c:6b:6f:12:5d:7e:8e: 77:ed:7f:39:c2:8f:28:0b:8d:86:dc:b0:af:8e:17: 00:5b:eb:93:8b:20:d1:f5:4d:4c:c7:98:b4:6e:bb: 5f:40:be:2d:57:5a:1e:61:2c:a7:14:f8:cc:e6:1a: d2:63:78:b5:46:fd:fc:00:3e:79:29:3e:8d:dc:ba: f1:50:56:92:d9:6b:49:6c:07:d1:c8:f6:67:ce:d7: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CF:40:84:89:65:D9:42:EC:FD:51:59:D8:60:41:35:7B:0D:01:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/2fd30b6d-62a6-3476-98cc-f15a50bd5306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ce:cd:6c:14:37:a0:13:e3:e4:00:81:3b:a6:c9:26:ac:13: 30:08:10:ec:0a:a8:c8:c0:2b:8e:76:e1:32:91:e3:22:a0:c2: 23:4f:31:f3:71:f7:35:35:6a:28:9e:41:c0:db:8a:fd:cf:41: fa:1f:49:3e:02:af:f8:52:e8:c9:db:43:b7:c9:59:de:ed:cb: 0c:ed:3e:98:f0:ef:95:ae:bc:d9:09:21:aa:3c:ed:d2:7b:7b: 71:cb:8d:db:e8:5d:4a:51:df:75:50:ad:fd:6d:db:5a:cd:af: e2:cc:e0:5c:56:26:dc:f0:9d:c5:78:72:8b:d5:52:1c:e9:02: 91:87:65:a7:25:81:ec:12:9c:04:ff:1b:bf:66:88:c0:1a:a3: db:bf:fc:8c:c3:34:d4:04:b0:f8:7c:95:f6:11:ed:94:4f:42: d5:35:36:fc:9f:16:95:66:b9:a0:19:1f:1d:be:ec:94:d4:dc: a6:65:51:8d:c6:94:d9:19:da:92:4f:7b:d8:83:a2:fa:ca:00: 9a:a3:54:f2:71:ef:a7:ac:3b:7f:f4:e6:f1:b6:ac:31:28:93: f1:9d:d0:13:32:32:62:b1:89:7b:35:80:6d:ca:28:8e:af:97: 5e:24:72:ba:4d:ed:69:c0:b4:99:e3:fd:7e:0e:2e:11:ad:27: 94:c6:a5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+1KjIpI2bmZ14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk Njk3NmViNjMtNGZlOS00ODA5LWI4MmItMDY2NTVmM2RlNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8LwqJ+w0mtKFMDUJ5NzR8xIFQuAhRAAtAzM TXtZEj0Rei2XZ2qVg5lbCyliEFq6KG1otLz+wL6+7UGwQLBHSh0lhsxmNL+NJXz/ XpAglVW4IFdvtkygBotD65E0KPXR5iX5gMTWPXXCJ8w7ZYfKsuhHGg0jr6fs0xZE JWE9XTnIV9iJhpataEpwGKyom4si8xAtp5Zwyp62Ab74ab4hNb2Xl13PrIjgjMK/ bAxrbxJdfo537X85wo8oC42G3LCvjhcAW+uTiyDR9U1Mx5i0brtfQL4tV1oeYSyn FPjM5hrSY3i1Rv38AD55KT6N3LrxUFaS2WtJbAfRyPZnztdUsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXPQISJZdlC7P1RWdhgQTV7DQFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMmZkMzBiNmQtNjJhNi0z NDc2LTk4Y2MtZjE1YTUwYmQ1MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJkLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnOzWwUN6AT4+QAgTumySasEzAIEOwKqMjAK4524TKR4yKgwiNPMfNx 9zU1aiieQcDbiv3PQfofST4Cr/hS6MnbQ7fJWd7tywztPpjw75WuvNkJIao87dJ7 e3HLjdvoXUpR33VQrf1t21rNr+LM4FxWJtzwncV4covVUhzpApGHZaclgewSnAT/ G79miMAao9u//IzDNNQEsPh8lfYR7ZRPQtU1NvyfFpVmuaAZHx2+7JTU3KZlUY3G lNkZ2pJPe9iDovrKAJqjVPJx76esO3/05vG2rDEok/Gd0BMyMmKxiXs1gG3KKI6v l14kcrpN7WnAtJnj/X4OLhGtJ5TGpaQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:35:22 2026 by rpki-client