$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa File: 33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa (raw, json) Hash identifier: HErN1xHnX/m6H80DdAQflXlmJ4cGM+iNelk87rykPrw= Subject key identifier: A4:D4:51:E5:F6:97:2F:41:C6:59:0B:FA:1B:2C:D2:63:BB:67:E7:56 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584CC07CD95B173EEBAEF30A2980 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 63199 IP address blocks: 148.153.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:d9:5b:17:3e:eb:ae:f3:0a:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=e9ab583d-a1db-4687-9fa9-b71631154cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d2:de:9c:99:e1:5e:12:ff:8d:6b:ce:17:25: 1b:63:2e:18:5f:a3:5f:70:ce:31:f0:ed:04:5b:75: 08:3a:bb:94:ea:c8:a1:9e:51:7d:7a:b1:20:fc:b7: 7c:dd:75:3a:f5:f6:7e:43:91:56:b3:62:60:2c:20: d5:d6:5d:8f:c2:15:52:17:aa:70:22:92:26:34:06: 6d:e1:32:00:dc:d7:55:55:46:ab:53:e6:84:78:37: 84:f3:10:65:06:6a:67:e7:5b:2c:26:7b:cb:30:44: 76:7e:1d:86:e5:10:4d:37:a4:09:25:21:48:b9:4a: cf:e4:d3:3b:fc:bc:81:5c:49:cc:0b:d0:80:f9:c8: 8e:d7:aa:4d:ac:52:0a:0e:91:55:49:a3:a4:0b:40: 9c:1f:13:42:b8:e6:9c:84:4b:25:21:e1:85:4c:ab: 7e:a1:1f:40:eb:da:11:31:b2:a7:7c:73:bd:1f:43: 54:e3:d6:56:7b:c5:70:c3:03:15:41:a6:64:e9:8c: f8:3c:43:4e:85:27:d2:8b:75:2d:85:f2:e7:09:bd: 79:16:50:ae:82:67:df:38:eb:3f:73:38:f8:b6:01: a8:fe:49:6e:dc:e0:c6:55:c8:75:37:86:af:d7:ee: 73:72:0a:dd:69:81:4c:ba:dc:9b:38:a0:88:64:5d: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D4:51:E5:F6:97:2F:41:C6:59:0B:FA:1B:2C:D2:63:BB:67:E7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/33a616be-ce80-35c2-b7f7-ea9c00a2a583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:62:69:b5:c6:a9:a0:7e:b5:73:17:9a:16:f8:e1:bc:ab:41: 9d:37:d8:bd:d7:26:fe:05:78:83:3f:fc:5e:db:88:e2:c6:36: 3b:fc:f4:fb:58:06:60:b1:a1:ef:2e:10:87:39:b8:eb:43:51: 6d:9d:8a:98:b6:69:d4:0a:d5:7e:02:04:00:93:93:9f:1f:b9: 3c:a8:50:53:bc:ee:99:33:7c:f7:76:b8:ea:eb:c2:27:14:7f: 52:d3:c5:72:65:c5:69:1e:85:40:38:d3:ca:a5:0c:20:5c:b4: 8d:05:bb:74:15:7e:85:d4:27:81:de:9a:fd:ed:8b:f6:4f:e5: 79:6e:f8:1c:9c:ae:3f:9a:2f:fc:af:01:82:9a:51:cf:f1:85: a8:55:6a:7c:98:f2:04:f1:89:51:2b:8d:24:63:75:cc:1c:4a: 37:37:85:8e:07:d9:5f:3f:71:16:d2:1f:8a:27:ba:f2:fc:9d: 35:80:c3:a9:3a:bf:19:34:9c:5c:0f:5a:e0:c1:48:68:0a:1d: 0b:24:68:42:43:b3:e2:3d:c7:25:d3:70:32:ac:ee:32:62:c1: 56:d8:9e:39:6b:39:d4:d9:24:5a:6b:e7:9f:07:a8:7e:01:8f: e4:cd:62:c3:42:b6:74:44:e5:32:0e:e2:dc:14:55:ab:b7:b7: c6:0f:77:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzAfNlbFz7rrvMKKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk ZTlhYjU4M2QtYTFkYi00Njg3LTlmYTktYjcxNjMxMTU0Y2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdLenJnhXhL/jWvOFyUbYy4YX6NfcM4x8O0E W3UIOruU6sihnlF9erEg/Ld83XU69fZ+Q5FWs2JgLCDV1l2PwhVSF6pwIpImNAZt 4TIA3NdVVUarU+aEeDeE8xBlBmpn51ssJnvLMER2fh2G5RBNN6QJJSFIuUrP5NM7 /LyBXEnMC9CA+ciO16pNrFIKDpFVSaOkC0CcHxNCuOachEslIeGFTKt+oR9A69oR MbKnfHO9H0NU49ZWe8VwwwMVQaZk6Yz4PENOhSfSi3UthfLnCb15FlCugmffOOs/ czj4tgGo/klu3ODGVch1N4av1+5zcgrdaYFMutybOKCIZF3qiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTUUeX2ly9BxlkL+hss0mO7Z+dWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvMzNhNjE2YmUtY2U4MC0z NWMyLWI3ZjctZWE5YzAwYTJhNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtiabXGqaB+tXMXmhb44byrQZ032L3XJv4FeIM//F7biOLGNjv89PtY BmCxoe8uEIc5uOtDUW2dipi2adQK1X4CBACTk58fuTyoUFO87pkzfPd2uOrrwicU f1LTxXJlxWkehUA408qlDCBctI0Fu3QVfoXUJ4Hemv3ti/ZP5Xlu+Bycrj+aL/yv AYKaUc/xhahVanyY8gTxiVErjSRjdcwcSjc3hY4H2V8/cRbSH4onuvL8nTWAw6k6 vxk0nFwPWuDBSGgKHQskaEJDs+I9xyXTcDKs7jJiwVbYnjlrOdTZJFpr558HqH4B j+TNYsNCtnRE5TIO4twUVau3t8YPd6c= -----END CERTIFICATE-----Generated at Sun Mar 1 23:27:17 2026 by rpki-client