$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa File: c0d325d4-637f-36da-a8b1-3933c07dd546.roa (raw, json) Hash identifier: y2ZjzSuxoOs1IhwMA4X43WqvrB8b0a4fA4AJgfHs5Ug= Subject key identifier: 44:5C:5E:4C:46:34:F3:BC:6A:DE:30:B0:19:6D:CD:0C:6B:09:C7:19 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584CDC6774427B056F48B47E4BC0 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 63199 IP address blocks: 148.153.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:74:42:7b:05:6f:48:b4:7e:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=01730a98-10f2-4088-bb60-89e20a16a2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:4b:4f:38:29:8c:ae:f1:98:2a:b4:37:e1: 9a:3e:f6:c2:c7:12:1c:61:fd:a7:e5:cc:16:84:fd: 0a:92:d0:80:59:b7:3a:c7:35:3e:d5:f8:ef:24:ce: 44:9f:79:81:c9:24:cf:61:ff:41:d5:5f:27:df:a5: ed:8e:dd:e2:d6:d0:0c:4f:1d:f5:af:16:46:a1:50: 82:96:6a:a7:dc:9a:26:d1:de:56:66:0b:54:b2:35: 94:62:e2:5a:ca:e3:1d:16:6e:aa:fe:a7:40:a6:32: 12:23:bc:f5:fc:59:2f:94:06:c6:76:4d:3b:64:0f: e1:55:81:2d:9f:1b:c0:1e:ce:bf:96:e2:3a:39:59: 46:f2:26:b0:7d:a2:4a:bf:19:f7:12:1d:da:0c:1e: 6b:a4:6d:76:df:8b:5d:49:51:c9:42:01:b5:6f:c9: 6c:ad:15:32:d6:40:e9:34:2f:81:18:10:68:f8:92: 68:98:2a:c1:0f:b4:77:66:aa:95:9c:f5:15:2f:80: 1d:bf:f4:4b:48:2b:75:59:bd:8a:62:c7:46:05:56: 1e:27:6a:92:90:3a:9f:a0:e8:06:30:41:bd:82:27: 80:5f:2f:90:a5:8d:86:27:cb:d2:f6:fb:8e:06:04: fb:9a:c3:e3:d2:12:64:b8:a1:dd:65:63:e6:dd:c5: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:5E:4C:46:34:F3:BC:6A:DE:30:B0:19:6D:CD:0C:6B:09:C7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c0d325d4-637f-36da-a8b1-3933c07dd546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c1:dc:70:0a:9b:3e:55:65:5d:42:74:78:63:0c:a5:25:57: 03:05:e0:b7:1f:ed:42:c5:c3:ee:0d:e3:17:76:fd:31:a8:7d: 32:cd:9f:44:ca:c4:9e:b6:21:58:80:fc:78:22:64:5c:32:f4: b8:79:4f:3e:c7:31:c2:27:4f:6c:c2:fb:c3:56:6d:81:2c:1c: b9:3a:83:26:a4:a4:0b:cb:52:e0:e2:93:98:68:6c:00:8d:19: c6:bf:15:95:9c:32:8c:e1:6e:65:c0:09:5c:07:c8:30:52:d2: 5b:6c:5c:16:1a:4a:1f:9b:f6:40:b3:c8:76:0f:70:e5:98:4c: d3:eb:9a:f7:55:e0:91:45:c0:fb:07:22:95:fd:23:20:06:04: 8a:32:d5:c3:5e:7a:f9:10:20:dc:15:8b:7e:84:f8:57:00:64: 25:64:4b:f7:b3:8b:fa:fe:41:2b:5f:34:9c:19:e9:90:47:ad: 9c:fe:e9:3c:d5:a3:b6:01:d5:d5:66:03:c8:14:70:a9:a3:1d: 7f:4c:9c:1c:78:e5:a0:a1:f1:93:9e:12:3c:2b:d0:df:3e:00: f4:55:f0:00:7f:99:bc:57:1a:58:f2:e9:03:53:c5:9b:e9:0b: 2f:1a:95:ea:7f:42:a3:46:b3:5b:4e:d9:b7:2a:0e:ac:1d:8a: 22:08:f0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ3RCewVvSLR+S8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk MDE3MzBhOTgtMTBmMi00MDg4LWJiNjAtODllMjBhMTZhMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqFLTzgpjK7xmCq0N+GaPvbCxxIcYf2n5cwW hP0KktCAWbc6xzU+1fjvJM5En3mBySTPYf9B1V8n36Xtjt3i1tAMTx31rxZGoVCC lmqn3Jom0d5WZgtUsjWUYuJayuMdFm6q/qdApjISI7z1/FkvlAbGdk07ZA/hVYEt nxvAHs6/luI6OVlG8iawfaJKvxn3Eh3aDB5rpG1234tdSVHJQgG1b8lsrRUy1kDp NC+BGBBo+JJomCrBD7R3ZqqVnPUVL4Adv/RLSCt1Wb2KYsdGBVYeJ2qSkDqfoOgG MEG9gieAXy+QpY2GJ8vS9vuOBgT7msPj0hJkuKHdZWPm3cW8uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERcXkxGNPO8at4wsBltzQxrCccZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvYzBkMzI1ZDQtNjM3Zi0z NmRhLWE4YjEtMzkzM2MwN2RkNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClJlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnB3HAKmz5VZV1CdHhjDKUlVwMF4Lcf7ULFw+4N4xd2/TGofTLNn0TK xJ62IViA/HgiZFwy9Lh5Tz7HMcInT2zC+8NWbYEsHLk6gyakpAvLUuDik5hobACN Gca/FZWcMozhbmXACVwHyDBS0ltsXBYaSh+b9kCzyHYPcOWYTNPrmvdV4JFFwPsH IpX9IyAGBIoy1cNeevkQINwVi36E+FcAZCVkS/ezi/r+QStfNJwZ6ZBHrZz+6TzV o7YB1dVmA8gUcKmjHX9MnBx45aCh8ZOeEjwr0N8+APRV8AB/mbxXGljy6QNTxZvp Cy8alep/QqNGs1tO2bcqDqwdiiII8EY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:23:19 2026 by rpki-client