$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa File: 3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa (raw, json) Hash identifier: pdRsIxcZ3OcygUrgZCzRCHhUm8r0Lsy9A9QiCP+VULo= Subject key identifier: 19:EA:C3:A4:26:A6:B4:F1:98:6D:70:6A:25:9D:FF:53:F4:29:B7:23 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584E885A3F76F46630988916DE80 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 23154 IP address blocks: 148.164.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:3f:76:f4:66:30:98:89:16:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=bfb9f051-8181-426d-9aad-9efae1be4b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f9:5d:1b:7a:a3:04:5d:b5:1a:46:ce:ac:e6: e7:a7:ab:73:c4:bb:46:f6:10:29:2c:61:e9:25:5e: bd:0b:69:d3:94:9b:48:be:b0:6e:cd:dc:1d:ac:17: 20:7d:ad:51:29:ac:cf:df:3f:98:0b:1f:63:2e:04: f9:51:2b:c7:4e:e9:9f:f2:90:2e:8b:22:c8:be:78: f5:4c:14:27:5a:1e:f3:62:1a:f6:6e:f1:e9:3e:24: a3:64:2c:c0:c9:1b:f5:42:79:d3:23:a2:9c:4c:3f: 4d:8e:1c:79:0e:4c:48:6a:cd:52:97:fa:49:dc:09: de:ae:02:36:f4:d4:f4:d0:a7:c6:40:01:90:f1:97: f4:db:da:b1:90:a1:c5:d3:72:29:e2:2e:14:46:d1: 24:55:42:3f:e0:c8:23:32:e7:07:a4:8d:ca:dd:ab: 3a:2f:83:23:bc:4c:b8:a4:0e:de:57:ae:53:05:66: c6:70:ab:07:5c:70:98:c0:dd:a9:a4:5f:73:1b:35: 9a:13:38:38:41:9b:a9:a8:28:9e:60:2d:8b:53:b9: fc:f9:69:85:53:17:b9:b3:ec:cd:29:8f:bb:0a:a6: f0:28:43:2a:02:fb:04:4b:e6:e5:99:c9:55:d2:06: d0:8d:c5:41:0b:20:a0:ac:ba:a8:e7:96:26:3e:55: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EA:C3:A4:26:A6:B4:F1:98:6D:70:6A:25:9D:FF:53:F4:29:B7:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9e:25:57:18:f6:36:b7:24:89:c4:12:8f:94:1a:7b:4a:e3: cc:01:b9:fc:50:18:1c:8d:79:f2:c3:8e:64:be:26:95:3c:a4: 33:c9:dc:0e:3a:13:50:97:b4:44:59:3d:a0:72:e9:b8:75:5a: 1a:fd:fc:22:aa:20:0a:38:fc:b7:c4:dc:0f:96:d3:59:79:3b: 24:c3:2b:8a:fd:5a:3e:c9:fd:75:10:0e:e2:19:66:cb:9f:74: 6e:5b:28:7c:54:47:e4:1b:66:2c:e0:bb:6c:0e:f8:7c:49:b8: 3b:5e:d2:40:15:32:72:6c:0b:6c:34:63:15:37:14:66:43:8c: 10:09:5e:d1:d0:ed:87:61:13:67:9f:ed:16:ec:ed:91:f8:87: 5c:99:73:68:58:8d:37:02:1d:2e:6e:34:92:72:88:b7:db:35: ec:c6:67:9a:71:d3:d6:5d:9e:47:78:05:a1:5a:14:eb:4d:7f: 84:26:e1:62:f5:a1:7c:c5:4c:a6:d9:43:db:ca:6a:5e:d4:fc: ee:73:75:9b:3d:e4:dd:ad:5f:4e:0e:98:b9:b0:18:33:1a:d2: 40:16:59:df:99:47:40:18:15:17:f9:d9:69:5e:bf:c2:15:24: a3:fb:f0:4c:a0:ce:16:57:0f:50:92:c0:2b:a6:58:b6:f6:60: af:7a:94:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWj929GYwmIkW3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk YmZiOWYwNTEtODE4MS00MjZkLTlhYWQtOWVmYWUxYmU0YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PldG3qjBF21GkbOrObnp6tzxLtG9hApLGHp JV69C2nTlJtIvrBuzdwdrBcgfa1RKazP3z+YCx9jLgT5USvHTumf8pAuiyLIvnj1 TBQnWh7zYhr2bvHpPiSjZCzAyRv1QnnTI6KcTD9Njhx5DkxIas1Sl/pJ3AnergI2 9NT00KfGQAGQ8Zf029qxkKHF03Ip4i4URtEkVUI/4MgjMucHpI3K3as6L4MjvEy4 pA7eV65TBWbGcKsHXHCYwN2ppF9zGzWaEzg4QZupqCieYC2LU7n8+WmFUxe5s+zN KY+7CqbwKEMqAvsES+blmclV0gbQjcVBCyCgrLqo55YmPlWGTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnqw6QmprTxmG1waiWd/1P0KbcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2IwZTRlYjctMDJiMS0z ODYxLThlODgtNGU4NTQ3Mjc3YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+eJVcY9ja3JInEEo+UGntK48wBufxQGByNefLDjmS+JpU8pDPJ3A46 E1CXtERZPaBy6bh1Whr9/CKqIAo4/LfE3A+W01l5OyTDK4r9Wj7J/XUQDuIZZsuf dG5bKHxUR+QbZizgu2wO+HxJuDte0kAVMnJsC2w0YxU3FGZDjBAJXtHQ7YdhE2ef 7Rbs7ZH4h1yZc2hYjTcCHS5uNJJyiLfbNezGZ5px09Zdnkd4BaFaFOtNf4Qm4WL1 oXzFTKbZQ9vKal7U/O5zdZs95N2tX04OmLmwGDMa0kAWWd+ZR0AYFRf52Wlev8IV JKP78EygzhZXD1CSwCumWLb2YK96lHc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:54:19 2026 by rpki-client