$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa File: 854f0b13-0526-3986-a284-6ca1d255b066.roa (raw, json) Hash identifier: /x6SStSc4kuoXn9/J4mbIInsS7o2u5UeEygiISIbm/Y= Subject key identifier: 06:B9:99:4C:E6:32:01:41:4C:AB:98:17:8D:C7:04:BD:72:F3:F9:B9 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D75D5419BC9D158FAACCC2F94 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 63199 IP address blocks: 148.153.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:41:9b:c9:d1:58:fa:ac:cc:2f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=16401eef-dcb9-4230-ba41-81580a0399a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:8c:ab:b7:1e:f0:e2:cf:74:3e:77:09:a4: 1d:b7:64:b6:37:f2:6b:82:06:d9:74:70:f5:84:56: ec:4b:82:6c:46:c7:2d:1e:cd:13:27:0c:0c:f6:0a: 2b:ad:16:a7:19:0d:03:2e:98:7e:c4:85:6f:9a:a1: be:61:90:39:a0:b8:7f:68:64:d9:b4:0e:d0:c8:2c: a0:8a:c0:41:be:24:41:cc:f1:93:2c:4a:fb:85:37: 92:69:76:de:0f:aa:eb:f6:02:25:7a:38:59:38:5c: 0d:aa:65:5c:24:14:c6:be:48:c8:4a:cc:02:b8:cc: b4:2c:31:31:ae:9b:02:b2:cd:a4:66:79:f7:fe:0d: 62:64:97:1d:26:d0:a9:2a:12:dc:19:45:08:45:c9: 25:ed:8c:78:ed:c0:86:55:86:e6:cf:09:0b:9f:c8: 96:f0:0f:4e:9a:55:96:b9:8d:d2:c1:fc:51:9e:14: 08:a8:29:97:ad:af:d8:a3:36:1b:61:57:55:4e:84: 93:71:15:47:a4:b0:e6:c9:7d:c8:ec:6e:f2:5d:c8: 5c:b1:b1:5c:ca:e1:0c:f2:91:f2:9b:05:65:62:8e: e3:d8:5f:e4:2e:2d:fb:cc:27:d4:b5:ca:21:6a:61: 89:7c:eb:4c:fb:0c:fe:9e:0f:15:53:ee:dd:9e:a8: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B9:99:4C:E6:32:01:41:4C:AB:98:17:8D:C7:04:BD:72:F3:F9:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/854f0b13-0526-3986-a284-6ca1d255b066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:27:6e:79:9f:a7:ac:3f:24:1e:b4:65:6f:3f:c2:32:d7:5f: 7e:55:78:de:2e:48:8f:eb:dc:84:c0:8c:a9:35:86:fb:b3:5c: 07:1e:8c:f8:d9:57:27:06:67:39:ce:0e:a6:02:d1:45:99:ee: 62:00:7c:14:f6:dd:f2:f0:bb:95:5c:bb:76:8e:ed:92:7d:fa: 2b:15:cc:56:c4:88:35:6f:fd:f7:a3:b6:ba:bd:c4:9b:39:22: c4:88:5d:33:17:96:dc:b0:98:91:8e:b5:3e:58:7e:5d:15:52: 85:db:e5:0e:b2:60:97:d1:d6:01:b4:b7:a5:db:0f:e6:86:5c: 64:0e:c4:84:fc:63:94:44:4e:9d:08:57:17:45:06:6a:36:31: 94:e6:34:90:6e:bb:37:a0:bc:f1:35:2d:aa:dd:f5:85:95:28: 98:18:2e:94:a5:33:96:d8:eb:09:8d:ec:7b:fb:2c:43:3e:d0: d8:02:71:80:69:ee:40:ba:d0:b1:84:f5:15:30:ec:f4:57:8e: 11:63:0e:e4:38:fc:c9:6b:c5:60:da:25:0b:ec:e8:d9:aa:d3: 99:82:56:56:c1:ed:62:65:7b:92:35:3f:e4:bd:d7:7a:f3:40: 0b:e4:f6:d8:b8:cb:e5:bd:86:0b:26:45:c2:3f:2b:6a:e1:68: c3:4d:a8:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UGbydFY+qzML5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk MTY0MDFlZWYtZGNiOS00MjMwLWJhNDEtODE1ODBhMDM5OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjmMq7ce8OLPdD53CaQdt2S2N/JrggbZdHD1 hFbsS4JsRsctHs0TJwwM9gorrRanGQ0DLph+xIVvmqG+YZA5oLh/aGTZtA7QyCyg isBBviRBzPGTLEr7hTeSaXbeD6rr9gIlejhZOFwNqmVcJBTGvkjISswCuMy0LDEx rpsCss2kZnn3/g1iZJcdJtCpKhLcGUUIRckl7Yx47cCGVYbmzwkLn8iW8A9OmlWW uY3SwfxRnhQIqCmXra/YozYbYVdVToSTcRVHpLDmyX3I7G7yXchcsbFcyuEM8pHy mwVlYo7j2F/kLi37zCfUtcohamGJfOtM+wz+ng8VU+7dnqj5uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa5mUzmMgFBTKuYF43HBL1y8/m5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvODU0ZjBiMTMtMDUyNi0z OTg2LWEyODQtNmNhMWQyNTViMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwnbnmfp6w/JB60ZW8/wjLXX35VeN4uSI/r3ITAjKk1hvuzXAcejPjZ VycGZznODqYC0UWZ7mIAfBT23fLwu5Vcu3aO7ZJ9+isVzFbEiDVv/fejtrq9xJs5 IsSIXTMXltywmJGOtT5Yfl0VUoXb5Q6yYJfR1gG0t6XbD+aGXGQOxIT8Y5RETp0I VxdFBmo2MZTmNJBuuzegvPE1Lard9YWVKJgYLpSlM5bY6wmN7Hv7LEM+0NgCcYBp 7kC60LGE9RUw7PRXjhFjDuQ4/MlrxWDaJQvs6Nmq05mCVlbB7WJle5I1P+S913rz QAvk9ti4y+W9hgsmRcI/K2rhaMNNqCo= -----END CERTIFICATE-----Generated at Sat Apr 18 00:07:10 2026 by rpki-client