$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa File: a5fade6e-275c-3ed2-a0be-b21ddef61294.roa (raw, json) Hash identifier: +fbRhfiRrfWNjJiBcJ59ar38uoBpStQRYQ67ntMQQz4= Subject key identifier: 22:56:A4:DC:5B:F4:38:C7:53:E9:7A:6E:F8:08:A0:1B:AE:B5:55:ED Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584EA79C5012B89F84545AD47980 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63199 IP address blocks: 148.153.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:50:12:b8:9f:84:54:5a:d4:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a3e43e32-0cab-4727-a7e8-4dbbbd683fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:e1:de:50:98:6d:b2:b1:4b:b0:0b:97:3b: 5d:22:7f:8a:c9:23:59:af:be:69:db:c4:0b:33:49: be:19:21:e0:bc:62:04:82:ef:fe:fa:83:2c:00:d7: 3c:ee:e9:bf:95:83:73:e3:47:cc:af:da:eb:0b:46: 55:76:ed:f4:f8:30:a3:d1:59:71:c5:3d:84:b8:9f: a9:e0:5a:72:9d:74:10:cd:95:6d:b7:c5:be:3f:ee: d6:71:b7:e8:33:27:b0:2e:6a:c0:5a:7f:c7:66:49: f1:13:64:78:5c:f3:20:5e:23:a3:5b:90:5a:37:97: 9c:ba:b6:56:79:9c:4f:a7:99:bd:36:5a:14:94:72: 0b:9f:94:60:9a:5c:79:b9:43:60:d5:ce:d0:39:4a: 9d:ef:88:fa:19:b9:ce:d5:b6:3c:a9:8d:87:8f:9f: de:e5:df:eb:7b:e5:54:a5:6b:f7:85:99:ce:69:31: a3:9c:48:9f:33:fa:a7:20:21:8b:ae:d6:2c:2b:26: 29:7a:da:c6:b2:b2:b2:9b:12:f4:72:2d:f9:09:a2: 87:a8:24:09:81:3a:a8:73:42:9b:37:f0:0d:92:f3: 29:67:9f:53:df:c2:15:ef:98:2a:fc:26:82:41:f6: 7f:8c:37:3d:b4:fe:a0:0b:11:a8:ff:6b:6c:5f:f1: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:56:A4:DC:5B:F4:38:C7:53:E9:7A:6E:F8:08:A0:1B:AE:B5:55:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/a5fade6e-275c-3ed2-a0be-b21ddef61294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9d:1d:67:9b:88:ae:c2:56:45:fe:6b:35:e4:b1:93:99:21: 82:1f:73:67:0b:71:9b:60:af:64:32:ff:24:ec:3f:c7:22:6c: e7:f5:d5:a0:99:a1:06:2a:80:74:04:e7:a2:1e:e2:4d:23:ca: 04:5c:f3:98:96:3d:ca:34:39:90:4d:c2:d7:ae:e1:29:46:e2: a4:6a:3c:84:77:cb:21:e8:d1:e0:d3:91:1b:f7:8d:12:78:d2: 66:fc:91:b0:06:4f:42:66:bf:e8:d7:0f:e5:12:03:96:c4:bd: c5:e2:a4:2c:d9:17:5f:8e:00:54:81:7e:71:71:83:a7:3d:40: f9:1e:fd:5a:66:38:cd:54:1f:b8:35:1b:20:4a:4c:11:cf:0a: 4d:10:78:94:3a:5b:1d:f9:8e:9e:6b:4a:df:c3:01:30:09:63: 97:25:40:76:3e:76:7a:7a:60:c0:5d:1e:0e:0a:87:b0:ac:8c: 9e:8c:f5:0a:76:d3:e7:4c:8c:86:c1:d9:76:99:91:6d:e7:d0: b3:b1:5d:98:75:ce:b7:cf:67:85:67:b1:69:be:40:e0:5a:41: 03:0b:60:73:74:fb:1b:ae:5f:30:cb:8c:b8:12:c6:7f:1b:98: 5a:dc:f7:76:b2:60:41:ef:33:6e:f6:d1:ad:fb:f2:bd:58:14: 7a:ed:3e:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnFASuJ+EVFrUeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTNlNDNlMzItMGNhYi00NzI3LWE3ZTgtNGRiYmJkNjgzZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Th3lCYbbKxS7ALlztdIn+KySNZr75p28QL M0m+GSHgvGIEgu/++oMsANc87um/lYNz40fMr9rrC0ZVdu30+DCj0VlxxT2EuJ+p 4FpynXQQzZVtt8W+P+7WcbfoMyewLmrAWn/HZknxE2R4XPMgXiOjW5BaN5ecurZW eZxPp5m9NloUlHILn5Rgmlx5uUNg1c7QOUqd74j6GbnO1bY8qY2Hj5/e5d/re+VU pWv3hZnOaTGjnEifM/qnICGLrtYsKyYpetrGsrKymxL0ci35CaKHqCQJgTqoc0Kb N/ANkvMpZ59T38IV75gq/CaCQfZ/jDc9tP6gCxGo/2tsX/EyZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJWpNxb9DjHU+l6bvgIoBuutVXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYTVmYWRlNmUtMjc1Yy0z ZWQyLWEwYmUtYjIxZGRlZjYxMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHudHWebiK7CVkX+azXksZOZIYIfc2cLcZtgr2Qy/yTsP8cibOf11aCZ oQYqgHQE56Ie4k0jygRc85iWPco0OZBNwteu4SlG4qRqPIR3yyHo0eDTkRv3jRJ4 0mb8kbAGT0Jmv+jXD+USA5bEvcXipCzZF1+OAFSBfnFxg6c9QPke/VpmOM1UH7g1 GyBKTBHPCk0QeJQ6Wx35jp5rSt/DATAJY5clQHY+dnp6YMBdHg4Kh7CsjJ6M9Qp2 0+dMjIbB2XaZkW3n0LOxXZh1zrfPZ4VnsWm+QOBaQQMLYHN0+xuuXzDLjLgSxn8b mFrc93ayYEHvM2720a378r1YFHrtPiI= -----END CERTIFICATE-----Generated at Wed Jul 29 03:59:46 2026 by rpki-client