$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa File: ae88cc2d-895e-3615-9e9b-18670bde5eec.roa (raw, json) Hash identifier: 4upXExovRAUMaBTUzrHlb8MvqwuVr43rgOjcqeVMi5U= Subject key identifier: 49:C9:4D:44:5F:E6:81:56:1F:55:80:2D:8E:AC:D2:C2:B2:95:01:C6 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584CB15B5C8517106FEC268E3420 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa Signing time: Fri 30 Jan 2026 03:56:48 +0000 ROA not before: Fri 30 Jan 2026 03:56:48 +0000 ROA not after: Thu 30 Apr 2026 02:56:48 +0000 asID: 63199 IP address blocks: 148.153.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:5b:5c:85:17:10:6f:ec:26:8e:34:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jan 30 03:56:48 2026 GMT Not After : Apr 30 02:56:48 2026 GMT Subject: CN=3d7667e5-d178-4f4e-9ad6-b20287704244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:11:bf:62:dd:72:d5:d4:fa:20:8c:81:53: 26:bd:c3:5b:7c:80:a5:ac:98:dc:c7:ca:99:45:cc: e8:6a:2f:c4:06:70:1e:8d:e6:86:96:a1:d4:f4:2b: 66:94:64:7e:38:a0:34:44:6f:03:c3:91:e6:c6:41: af:3a:9c:ee:23:a2:e1:04:2a:e0:f4:e5:d7:5b:a8: 88:81:b6:d4:0b:09:fb:53:32:e3:cb:6b:59:15:5e: 41:0d:e7:43:40:88:2f:6b:bc:eb:0c:1f:c1:8e:42: 18:62:c9:f5:54:cb:76:23:a7:13:fe:1d:67:d3:1e: 99:da:aa:35:29:25:9d:46:e4:5e:c7:1b:2b:f6:be: 7a:fc:1b:ba:72:5f:50:09:63:57:11:d1:5e:40:60: c6:2f:f9:1b:3d:4b:db:7c:e0:f6:a3:22:79:68:d3: 7d:53:9d:1e:f2:79:ff:b0:59:22:5f:00:d4:33:97: b2:17:0e:31:71:5f:bd:d7:89:bd:04:a9:19:ba:45: 97:d7:df:7d:55:98:12:58:7f:a5:f4:2f:c9:a6:f3: 6d:0d:37:63:ca:4b:6e:60:55:60:a3:99:a8:7c:ec: ad:aa:fd:c4:fb:bf:9e:44:8f:bc:d0:a0:3d:11:63: a3:6b:52:68:68:13:89:c9:c6:db:ec:67:af:e2:8c: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C9:4D:44:5F:E6:81:56:1F:55:80:2D:8E:AC:D2:C2:B2:95:01:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/ae88cc2d-895e-3615-9e9b-18670bde5eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fa:46:e7:2a:94:e0:5e:13:d8:c5:b6:17:a3:ca:2b:56:e7: b7:ac:e4:17:ae:35:16:7b:e2:30:74:4b:e8:56:82:25:ae:94: e9:a6:21:67:c1:9d:36:3f:53:57:ab:05:58:f3:a4:2b:b5:fd: 4c:15:88:37:e4:3b:d3:55:65:71:c6:27:ca:cc:33:fd:6f:34: dc:4a:50:6a:c3:32:b3:9f:24:98:68:a4:10:49:75:38:70:8c: 09:4c:05:c7:81:da:52:42:1a:44:a2:ba:b1:1f:1f:6b:18:81: 35:43:79:e9:de:25:26:8e:e8:53:ea:ee:cd:39:34:0c:b6:26: 8d:99:83:91:34:5c:a0:10:6b:03:0b:c3:ff:f0:18:d8:61:ff: ce:99:db:8e:9f:17:c5:5b:07:59:6f:b3:d7:7c:8f:1a:33:92: f8:18:9c:63:2c:ee:ed:db:97:fa:5e:f0:97:83:09:2b:24:a8: c9:6b:02:73:46:3a:41:06:d5:a8:6a:83:72:f1:d5:a8:66:cd: 39:7f:96:e9:d5:2a:62:ff:1d:13:e6:16:cc:b1:57:c8:a0:9e: 1a:01:61:bc:31:e1:be:4e:4c:33:8d:b2:37:32:39:45:c9:ec: 26:52:89:b9:92:b3:8c:5c:23:8c:20:14:5f:57:19:86:80:82: d5:08:df:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxW1yFFxBv7CaONCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDEzMDAzNTY0OFoXDTI2MDQzMDAyNTY0OFowLzEtMCsGA1UEAxMk M2Q3NjY3ZTUtZDE3OC00ZjRlLTlhZDYtYjIwMjg3NzA0MjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo0Rv2LdctXU+iCMgVMmvcNbfIClrJjcx8qZ Rczoai/EBnAejeaGlqHU9CtmlGR+OKA0RG8Dw5HmxkGvOpzuI6LhBCrg9OXXW6iI gbbUCwn7UzLjy2tZFV5BDedDQIgva7zrDB/BjkIYYsn1VMt2I6cT/h1n0x6Z2qo1 KSWdRuRexxsr9r56/Bu6cl9QCWNXEdFeQGDGL/kbPUvbfOD2oyJ5aNN9U50e8nn/ sFkiXwDUM5eyFw4xcV+914m9BKkZukWX1999VZgSWH+l9C/JpvNtDTdjyktuYFVg o5mofOytqv3E+7+eRI+80KA9EWOja1JoaBOJycbb7Gev4oxlKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnJTURf5oFWH1WALY6s0sKylQHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYWU4OGNjMmQtODk1ZS0z NjE1LTllOWItMTg2NzBiZGU1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL6RucqlOBeE9jFthejyitW57es5BeuNRZ74jB0S+hWgiWulOmmIWfB nTY/U1erBVjzpCu1/UwViDfkO9NVZXHGJ8rMM/1vNNxKUGrDMrOfJJhopBBJdThw jAlMBceB2lJCGkSiurEfH2sYgTVDeeneJSaO6FPq7s05NAy2Jo2Zg5E0XKAQawML w//wGNhh/86Z246fF8VbB1lvs9d8jxozkvgYnGMs7u3bl/pe8JeDCSskqMlrAnNG OkEG1ahqg3Lx1ahmzTl/lunVKmL/HRPmFsyxV8ignhoBYbwx4b5OTDONsjcyOUXJ 7CZSibmSs4xcI4wgFF9XGYaAgtUI38M= -----END CERTIFICATE-----Generated at Sun Mar 1 23:26:29 2026 by rpki-client