$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/02b8ef63-8644-3e90-b454-fda62c683a14.roa File: 02b8ef63-8644-3e90-b454-fda62c683a14.roa (raw, json) Hash identifier: ev/jElTcJoosTcITiW7rzn4Up91OYJOXrwK7Qq5D7UA= Subject key identifier: 95:6E:AB:0B:CC:6D:AF:57:7B:C3:BD:C8:A4:9B:7C:08:49:3E:29:96 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584B0746AA4EF3730A78E3C88634 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/02b8ef63-8644-3e90-b454-fda62c683a14.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:aa:4e:f3:73:0a:78:e3:c8:86:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=973e4005-7601-4889-a560-63fbb3e9a078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:69:ad:01:e4:0c:15:34:ef:c2:ca:c5:bc: 0b:83:aa:00:6b:a3:4d:4c:2f:8d:91:71:bf:2c:00: 9b:52:a5:9f:c1:ea:2a:36:14:2b:2b:86:17:4c:be: e2:b3:d8:15:5e:54:0f:1b:cb:7f:2f:88:0a:0d:0d: 7a:19:7b:54:4a:dc:1c:b3:2e:25:5b:80:14:f2:9a: 52:13:80:72:4b:bb:cc:7e:c3:35:00:9b:4c:7c:8d: a5:3d:8e:49:6f:70:5b:cf:71:59:c9:24:96:e4:ef: 51:82:16:d7:00:61:45:54:be:99:54:a2:2e:09:b0: 6d:61:bc:ee:19:b7:66:a9:bb:bb:a7:dc:fe:05:e3: 82:d5:b4:8a:08:93:a9:c6:7c:67:40:af:b8:98:b4: 4b:41:47:81:7c:15:f9:57:1c:46:73:57:95:41:5a: 62:92:a5:cc:30:04:8e:f3:10:b5:3b:9f:1d:2c:1d: fe:86:88:e4:a0:e4:fb:b9:77:d3:e8:b3:47:4e:29: ed:d5:49:f9:69:5d:50:50:f8:70:5c:92:84:fe:b4: 8e:00:39:63:14:bc:73:36:03:c5:86:58:e3:7b:10: 0b:1a:96:c0:7d:3b:85:b1:40:e0:09:77:30:d8:b9: 49:e4:e0:f4:50:87:aa:f4:b3:6a:0a:87:2f:3f:75: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:AB:0B:CC:6D:AF:57:7B:C3:BD:C8:A4:9B:7C:08:49:3E:29:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/02b8ef63-8644-3e90-b454-fda62c683a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:79:61:25:3d:24:f9:2b:a5:ce:37:20:30:c0:91:ad:06:ab: 63:e9:20:5f:7a:02:d4:2f:63:a8:4d:cd:ef:ae:2d:0e:b9:54: eb:dd:56:42:9c:cf:45:37:0d:31:ed:3a:a1:6e:9b:14:72:16: cd:88:e5:49:a4:7f:a0:72:5d:6f:c7:51:a0:05:cc:d5:a9:af: 52:9d:4b:2a:11:2a:82:77:22:22:3c:e3:95:3b:87:fa:da:d8: 7d:21:df:3b:f7:8b:30:0e:c7:c0:69:01:1a:e1:f9:08:c0:bc: 84:76:ca:56:78:d5:ef:8a:d2:ef:f6:c8:ee:1d:5f:51:39:b9: db:79:85:ec:e8:3a:45:6f:24:ed:e2:a0:e3:41:50:92:b0:7b: 54:99:d4:90:1e:50:3a:eb:66:34:ef:3a:f9:76:8c:70:18:5a: 3d:0f:f4:5c:8c:33:85:e4:ca:53:f7:22:31:df:8f:14:11:3d: 92:85:9a:5a:bd:f2:c6:45:3b:5c:5b:6a:b6:11:51:40:be:dd: 4e:f8:53:dc:7b:60:af:c8:b9:ab:97:2c:8a:f7:9c:ad:53:5c: cd:4b:2d:9f:37:e1:56:d4:98:dc:14:cf:de:f8:bf:00:41:6d: 69:52:ea:27:d6:f6:a8:92:53:9d:20:01:9c:82:d9:a1:be:26: 66:4f:a7:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRqpO83MKeOPIhjQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OTczZTQwMDUtNzYwMS00ODg5LWE1NjAtNjNmYmIzZTlhMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1VprQHkDBU078LKxbwLg6oAa6NNTC+NkXG/ LACbUqWfweoqNhQrK4YXTL7is9gVXlQPG8t/L4gKDQ16GXtUStwcsy4lW4AU8ppS E4ByS7vMfsM1AJtMfI2lPY5Jb3Bbz3FZySSW5O9RghbXAGFFVL6ZVKIuCbBtYbzu Gbdmqbu7p9z+BeOC1bSKCJOpxnxnQK+4mLRLQUeBfBX5VxxGc1eVQVpikqXMMASO 8xC1O58dLB3+hojkoOT7uXfT6LNHTint1Un5aV1QUPhwXJKE/rSOADljFLxzNgPF hljjexALGpbAfTuFsUDgCXcw2LlJ5OD0UIeq9LNqCocvP3XiNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVuqwvMba9Xe8O9yKSbfAhJPimWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvMDJiOGVmNjMtODY0NC0z ZTkwLWI0NTQtZmRhNjJjNjgzYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR5YSU9JPkrpc43IDDAka0Gq2PpIF96AtQvY6hNze+uLQ65VOvdVkKc z0U3DTHtOqFumxRyFs2I5Umkf6ByXW/HUaAFzNWpr1KdSyoRKoJ3IiI845U7h/ra 2H0h3zv3izAOx8BpARrh+QjAvIR2ylZ41e+K0u/2yO4dX1E5udt5hezoOkVvJO3i oONBUJKwe1SZ1JAeUDrrZjTvOvl2jHAYWj0P9FyMM4XkylP3IjHfjxQRPZKFmlq9 8sZFO1xbarYRUUC+3U74U9x7YK/IuauXLIr3nK1TXM1LLZ834VbUmNwUz974vwBB bWlS6ifW9qiSU50gAZyC2aG+JmZPp/c= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:10 2025 by rpki-client