$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa File: cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa (raw, json) Hash identifier: Zs2MqX1ktHI6TS19qsMoQ3FP97fLavVxkDFJ7CHrH9E= Subject key identifier: 82:FF:77:0E:35:27:CD:0B:6C:65:D6:4F:A1:90:22:EF:C0:BF:F5:27 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F4328584D0647AE8C068AEEEA4E289B00 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 63199 IP address blocks: 148.153.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:ae:8c:06:8a:ee:ea:4e:28:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=6b2b4315-356f-4ea2-8665-96c04c47eba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:d5:95:fe:75:50:b4:98:65:5b:21:fd:86: 31:91:5b:b0:53:62:75:14:18:95:c8:ac:50:a2:f9: 82:e6:81:25:a2:5d:cc:a7:0b:88:98:99:e6:8b:2b: fa:0e:99:ff:79:d1:e7:e9:ed:42:fe:1f:5a:e5:db: 05:20:bf:2b:eb:9b:20:11:3a:9b:61:a1:ad:33:cc: 69:21:0f:67:81:57:8e:92:af:f2:2e:56:4f:e7:61: 62:91:63:da:e6:3c:b3:1d:fa:09:5a:db:4a:78:35: 07:04:9d:d0:24:8c:b4:62:22:25:62:8d:63:d2:32: 6f:62:3d:12:bf:d9:65:aa:59:a4:82:69:0b:1d:70: bb:6e:36:c8:ce:c1:8f:b4:de:81:94:60:48:79:5f: 41:58:12:1c:6f:ce:da:ac:7d:7e:6d:b8:6a:8e:a4: 83:c3:45:b4:6c:3b:5f:43:00:ff:b4:d8:82:aa:41: 33:c6:de:6c:47:0c:78:22:88:56:39:06:f1:ba:c8: 4d:c0:8f:aa:1b:26:e7:60:2e:f1:76:67:8f:a2:e2: 96:fd:ad:3b:aa:28:c8:d3:aa:17:5f:b9:4d:37:a8: 3d:5a:41:e9:be:aa:7e:22:c4:bd:f2:81:c5:5b:c6: 42:c2:bc:8e:c2:d0:cb:95:60:6a:db:d9:c0:4c:3e: e2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FF:77:0E:35:27:CD:0B:6C:65:D6:4F:A1:90:22:EF:C0:BF:F5:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/cdf0dbe3-b4db-399b-b6d2-2a229898f1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:bc:a8:30:47:ec:02:41:4f:c3:45:01:4b:26:04:19:8e:46: 6e:42:cb:39:81:a5:fb:4e:ff:34:c5:52:74:ba:c0:69:c8:65: e0:71:d4:7d:f3:6f:77:f5:22:e4:31:48:72:88:97:c6:f2:ba: f9:48:ae:11:da:39:62:26:ae:4d:ac:c9:df:f8:b1:d5:5d:03: 1a:0f:c4:e3:26:0b:be:20:e3:cb:aa:8c:15:99:f4:c8:97:bd: 70:13:6c:f7:61:43:b0:2c:92:2a:7b:7d:cc:dc:ee:7f:db:6a: 24:22:32:40:3b:96:b8:c3:de:74:b5:02:63:d1:f5:67:de:8a: 7c:6c:f0:a2:dc:65:ff:64:11:a9:e8:f5:de:95:55:b9:d1:21: 37:a6:2f:3f:17:ad:2e:95:c6:7d:a3:7c:49:d2:c1:4b:d6:b7: 84:ce:0c:d1:f0:d7:91:26:e9:8c:12:61:e7:30:08:ee:a3:da: d2:2c:78:51:af:1c:36:03:16:94:09:26:8f:7e:a0:6d:28:21: 6d:6d:65:57:c2:a8:c6:3a:1a:7e:eb:ee:5f:bd:37:a3:d3:cc: 71:88:2b:dc:e9:62:bc:ec:33:0f:2c:61:94:6b:3e:97:12:c0: 9a:7b:d9:56:cb:d6:ed:e1:f0:d4:82:e4:9b:48:46:98:29:bb: 73:c1:d9:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR66MBoru6k4omwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk NmIyYjQzMTUtMzU2Zi00ZWEyLTg2NjUtOTZjMDRjNDdlYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyHVlf51ULSYZVsh/YYxkVuwU2J1FBiVyKxQ ovmC5oElol3MpwuImJnmiyv6Dpn/edHn6e1C/h9a5dsFIL8r65sgETqbYaGtM8xp IQ9ngVeOkq/yLlZP52FikWPa5jyzHfoJWttKeDUHBJ3QJIy0YiIlYo1j0jJvYj0S v9llqlmkgmkLHXC7bjbIzsGPtN6BlGBIeV9BWBIcb87arH1+bbhqjqSDw0W0bDtf QwD/tNiCqkEzxt5sRwx4IohWOQbxushNwI+qGybnYC7xdmePouKW/a07qijI06oX X7lNN6g9WkHpvqp+IsS98oHFW8ZCwryOwtDLlWBq29nATD7i3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL/dw41J80LbGXWT6GQIu/Av/UnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvY2RmMGRiZTMtYjRkYi0z OTliLWI2ZDItMmEyMjk4OThmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJlmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe8qDBH7AJBT8NFAUsmBBmORm5CyzmBpftO/zTFUnS6wGnIZeBx1H3z b3f1IuQxSHKIl8byuvlIrhHaOWImrk2syd/4sdVdAxoPxOMmC74g48uqjBWZ9MiX vXATbPdhQ7Askip7fczc7n/baiQiMkA7lrjD3nS1AmPR9Wfeinxs8KLcZf9kEano 9d6VVbnRITemLz8XrS6Vxn2jfEnSwUvWt4TODNHw15Em6YwSYecwCO6j2tIseFGv HDYDFpQJJo9+oG0oIW1tZVfCqMY6Gn7r7l+9N6PTzHGIK9zpYrzsMw8sYZRrPpcS wJp72VbL1u3h8NSC5JtIRpgpu3PB2Zs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:36 2026 by rpki-client