$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa File: aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa (raw, json) Hash identifier: b+X+E2dSMoLRFH6hhC/nij5qvSeHTaqbKRWKv/5AxPc= Subject key identifier: 6A:4B:A2:60:0F:7E:4C:BA:47:C6:7C:52:65:2D:E9:59:75:D7:10:D0 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584CDC677454E41E66A038360F60 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 63199 IP address blocks: 148.153.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:74:54:e4:1e:66:a0:38:36:0f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=6cf6b50f-003e-4636-abc3-e2ff5f6d1cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:70:01:e5:3f:d3:b6:dd:73:33:38:1b:a2:80: 37:bd:d5:1f:58:75:16:79:e9:f2:67:d9:e4:38:78: 2c:7a:a0:f0:08:3b:d9:30:23:8d:87:fc:67:9b:f0: 92:1d:b8:b9:14:c2:3a:8b:d8:39:57:c4:7d:51:c7: 0c:4d:3b:a5:1a:76:fe:b4:f2:c7:f5:5e:45:f5:a9: cf:40:00:d7:13:1e:fd:c1:6f:5f:c8:d1:62:05:70: 79:c6:6e:1e:0b:20:e6:b8:da:cc:d1:f9:60:4b:48: 36:e7:c7:dc:47:46:ea:53:c2:14:cf:0c:f9:d3:39: 54:5f:58:80:5a:90:b9:ac:26:c4:13:30:03:05:01: 89:e1:c8:2b:46:a3:ea:f5:3f:37:ca:59:89:cc:25: 48:67:f3:91:46:7e:89:bd:2c:57:79:d7:66:e8:15: 24:2c:3a:98:26:3c:0f:fd:be:8c:8b:91:0c:4a:8e: 67:2f:09:3d:0a:fa:73:60:77:23:84:f8:b1:10:61: 37:e3:88:19:55:34:a8:35:f1:79:8a:ab:88:e5:ad: cd:bd:d1:96:a9:b9:cd:22:75:5c:6f:92:54:e2:25: 98:2a:99:33:19:eb:f5:58:6f:45:30:5e:59:b2:2a: 97:f6:29:dd:e5:49:ba:ea:30:13:6a:41:18:ad:8d: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4B:A2:60:0F:7E:4C:BA:47:C6:7C:52:65:2D:E9:59:75:D7:10:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/aaf4975d-7dd0-355a-8dbf-cb0e346e6185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:cd:e1:e7:42:b8:9d:87:f1:dc:37:05:07:4f:2e:81:71:62: 96:ee:76:f5:42:6a:a5:51:72:34:de:79:38:1f:6f:8c:62:e9: 46:29:9f:e8:c8:f9:fd:a4:28:70:eb:22:df:ab:99:0f:19:97: ce:1f:11:42:2f:18:22:4d:b2:f8:43:6f:1f:cc:16:bb:49:4a: 90:b8:5e:b9:86:c0:ab:df:53:f2:b8:e5:18:ab:df:9f:bf:bb: 57:5c:93:6d:a8:23:be:2b:3f:d1:35:9a:53:89:c0:01:e0:40: 91:0f:a0:83:21:8f:13:be:9d:74:91:ef:c8:01:1f:a3:aa:e8: 85:73:31:4b:d5:41:c1:2b:68:7f:9b:95:85:3f:95:79:e5:31: bb:c5:36:eb:7f:72:a0:cb:2d:6b:fc:86:96:e2:72:6e:f0:2c: e1:bc:39:a6:0c:76:70:19:44:38:83:59:26:d6:a0:66:bf:f9: 85:bc:6a:4a:a1:62:43:3f:1d:c7:f0:37:72:f7:7b:0f:19:33: 0e:38:61:77:3d:79:23:8f:b8:27:12:5c:6e:67:30:8b:05:4c: 8a:d9:30:19:5f:9f:e2:db:13:3b:b8:28:fd:d7:c1:fe:ee:63: 48:d0:5a:9e:ac:39:60:5a:c7:02:1c:80:ea:5b:2e:de:ca:2a: 4b:74:23:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ3RU5B5moDg2D2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk NmNmNmI1MGYtMDAzZS00NjM2LWFiYzMtZTJmZjVmNmQxY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHAB5T/Ttt1zMzgbooA3vdUfWHUWeenyZ9nk OHgseqDwCDvZMCONh/xnm/CSHbi5FMI6i9g5V8R9UccMTTulGnb+tPLH9V5F9anP QADXEx79wW9fyNFiBXB5xm4eCyDmuNrM0flgS0g258fcR0bqU8IUzwz50zlUX1iA WpC5rCbEEzADBQGJ4cgrRqPq9T83ylmJzCVIZ/ORRn6JvSxXeddm6BUkLDqYJjwP /b6Mi5EMSo5nLwk9CvpzYHcjhPixEGE344gZVTSoNfF5iquI5a3NvdGWqbnNInVc b5JU4iWYKpkzGev1WG9FMF5ZsiqX9ind5Um66jATakEYrY2dxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpLomAPfky6R8Z8UmUt6Vl11xDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWFmNDk3NWQtN2RkMC0z NTVhLThkYmYtY2IwZTM0NmU2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjN4edCuJ2H8dw3BQdPLoFxYpbudvVCaqVRcjTeeTgfb4xi6UYpn+jI +f2kKHDrIt+rmQ8Zl84fEUIvGCJNsvhDbx/MFrtJSpC4XrmGwKvfU/K45Rir35+/ u1dck22oI74rP9E1mlOJwAHgQJEPoIMhjxO+nXSR78gBH6Oq6IVzMUvVQcEraH+b lYU/lXnlMbvFNut/cqDLLWv8hpbicm7wLOG8OaYMdnAZRDiDWSbWoGa/+YW8akqh YkM/HcfwN3L3ew8ZMw44YXc9eSOPuCcSXG5nMIsFTIrZMBlfn+LbEzu4KP3Xwf7u Y0jQWp6sOWBaxwIcgOpbLt7KKkt0I7Y= -----END CERTIFICATE-----Generated at Mon Mar 2 05:01:09 2026 by rpki-client