$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa File: c0d325d4-637f-36da-a8b1-3933c07dd546.roa (raw, json) Hash identifier: aT/oSUY2zdDv85hs8nqezpeSYTMSvulqObbgX63PEhs= Subject key identifier: 81:90:BA:35:B9:77:A4:DB:AD:57:97:14:43:27:6E:E8:8B:DF:B5:87 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584E9D4A670309179652B2F9DEC0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 63199 IP address blocks: 148.153.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:67:03:09:17:96:52:b2:f9:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=3c2c2cb8-4908-4203-9bff-210436ab3c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:c3:ab:30:43:6b:66:26:14:73:62:df:24: f0:cf:5f:31:8e:3a:92:64:af:70:91:1e:4a:9e:4b: d6:4c:cd:c4:de:72:1b:0f:a1:93:be:1d:6f:dc:3c: 13:7d:49:71:0c:84:ad:10:ec:68:37:0d:a0:34:51: 0d:1a:46:91:af:6f:99:9f:34:4c:9d:0f:6c:91:52: 1b:a0:ee:2a:27:0d:3c:f5:59:c3:8b:49:52:15:43: f0:77:31:dc:ce:55:f3:28:9c:3e:49:ba:5b:48:be: 6c:fa:e2:52:89:9b:34:6c:dc:e9:c4:68:6b:cd:1c: 95:f1:3e:17:0b:af:d0:4c:2c:0e:e4:86:a0:73:24: 79:94:fa:c9:b0:b0:c2:83:87:ee:39:ef:a3:df:d3: e8:e3:32:e6:54:05:d6:d7:43:40:fc:05:76:48:29: 53:cf:f4:ff:5f:20:1d:b3:3c:9d:04:26:71:d8:61: 88:a0:54:2f:0d:0d:81:d1:2b:bf:c6:7e:96:3f:87: db:7c:27:e3:3e:11:2a:c6:cc:e2:f2:04:1e:62:cc: 5b:86:43:f7:e6:23:9e:ff:59:54:82:2e:30:72:a5: ec:fa:71:f9:a6:fd:9d:21:9b:8e:41:8d:c0:2c:1f: 6e:cf:c3:2b:81:07:56:1c:0d:f3:42:4f:40:71:9b: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:90:BA:35:B9:77:A4:DB:AD:57:97:14:43:27:6E:E8:8B:DF:B5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0c:49:92:e8:e0:88:fb:85:bb:2e:ae:74:1e:f2:4d:82:05: e3:69:cc:46:40:68:92:3e:e1:fa:a1:ac:d6:72:2c:d7:f9:51: ed:9d:df:a2:69:d5:63:30:cf:09:23:ba:be:44:1a:40:01:45: e9:7f:2f:11:2d:75:c0:49:78:1a:92:20:46:77:e6:20:56:7a: c8:28:54:f6:fe:5a:dc:13:be:d3:30:31:e9:73:f8:32:e4:91: 28:a2:d0:fe:15:20:ac:ac:a8:ea:4e:b3:b3:60:72:9b:d3:fb: 5b:82:2e:da:aa:70:df:52:62:72:f0:e6:90:fb:92:a0:2b:13: 72:d5:e1:a8:a8:fc:39:18:bc:b6:51:4c:9b:d7:dd:7f:63:8b: e2:d0:11:a7:26:7f:35:18:08:88:a6:1c:c9:61:6c:6e:7c:d0: 44:38:2d:97:4a:23:d9:05:0d:8f:3a:65:09:54:a6:44:85:32: 6e:16:34:e4:e8:fb:43:74:8d:41:50:9b:1b:9f:fd:13:b4:a8: e5:39:94:c6:2d:e6:6c:fc:67:69:16:d4:36:c8:15:f8:6d:16: be:e9:d1:a9:30:c1:ca:2f:eb:c1:21:61:a7:8a:50:b5:d6:3e: b2:94:d7:db:a0:c1:62:a0:52:03:3a:40:40:96:05:63:26:f7: c6:57:cf:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmcDCReWUrL53sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk M2MyYzJjYjgtNDkwOC00MjAzLTliZmYtMjEwNDM2YWIzYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnnDqzBDa2YmFHNi3yTwz18xjjqSZK9wkR5K nkvWTM3E3nIbD6GTvh1v3DwTfUlxDIStEOxoNw2gNFENGkaRr2+ZnzRMnQ9skVIb oO4qJw089VnDi0lSFUPwdzHczlXzKJw+SbpbSL5s+uJSiZs0bNzpxGhrzRyV8T4X C6/QTCwO5IagcyR5lPrJsLDCg4fuOe+j39Po4zLmVAXW10NA/AV2SClTz/T/XyAd szydBCZx2GGIoFQvDQ2B0Su/xn6WP4fbfCfjPhEqxszi8gQeYsxbhkP35iOe/1lU gi4wcqXs+nH5pv2dIZuOQY3ALB9uz8MrgQdWHA3zQk9AcZvA2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGQujW5d6TbrVeXFEMnbuiL37WHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzBkMzI1ZDQtNjM3Zi0z NmRhLWE4YjEtMzkzM2MwN2RkNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkMSZLo4Ij7hbsurnQe8k2CBeNpzEZAaJI+4fqhrNZyLNf5Ue2d36Jp 1WMwzwkjur5EGkABRel/LxEtdcBJeBqSIEZ35iBWesgoVPb+WtwTvtMwMelz+DLk kSii0P4VIKysqOpOs7NgcpvT+1uCLtqqcN9SYnLw5pD7kqArE3LV4aio/DkYvLZR TJvX3X9ji+LQEacmfzUYCIimHMlhbG580EQ4LZdKI9kFDY86ZQlUpkSFMm4WNOTo +0N0jUFQmxuf/RO0qOU5lMYt5mz8Z2kW1DbIFfhtFr7p0akwwcov68EhYaeKULXW PrKU19ugwWKgUgM6QECWBWMm98ZXzzY= -----END CERTIFICATE-----Generated at Wed Jul 29 02:47:07 2026 by rpki-client