$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa File: 3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa (raw, json) Hash identifier: /Neyz3PXyxFNoCW+1ux/9BIq4aor0Ows24Cn8PCbtV0= Subject key identifier: 58:2A:E6:F4:AC:68:89:C7:6E:7E:09:E7:AE:D3:15:3A:50:CC:B2:BD Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584B0746B1B6B812D894AF056380 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b1:b6:b8:12:d8:94:af:05:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=8a3747ef-8784-4363-8a4c-0126097d86ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:aa:54:cf:53:59:25:a9:a8:a1:17:d2:2d:b0: 13:91:3e:88:0d:8b:21:61:0b:c1:d8:ce:9a:58:69: 8e:1d:03:f6:e1:2d:a4:c6:87:c5:96:fd:48:a9:ea: d5:db:ec:fe:2c:37:b1:e7:4b:20:a1:54:83:8b:66: 27:89:72:cb:04:32:8b:2b:a9:9c:a4:44:2c:e9:34: 13:65:0a:e4:ed:e3:a8:d5:36:10:70:c1:08:27:a7: 0e:ed:c2:cb:b4:6c:58:b9:ce:24:2a:f1:70:be:b1: 41:c2:0b:24:cb:4c:d1:0c:24:4e:4f:98:c3:c9:1c: 74:8e:a4:8c:0e:10:31:b6:de:f3:19:01:3b:14:dd: d3:98:67:73:77:cc:b1:f3:ed:71:aa:de:c2:24:da: 71:a3:85:27:94:ee:d5:4e:ea:5c:e4:0a:47:41:d4: 19:02:a5:fd:84:19:95:a2:ad:2a:da:ac:dd:42:ca: c3:4f:d9:21:cb:97:23:79:ae:76:9a:2e:bf:9c:6b: 67:2d:cc:0c:e1:84:56:db:83:a5:92:ed:68:06:d8: a2:91:9e:3a:65:9e:b2:7b:a2:33:ce:db:a1:59:18: 0b:52:a2:4f:79:bc:44:77:a2:c3:5d:b7:fb:ad:1f: dd:e8:7e:dd:6e:33:cb:1e:25:ab:ec:ba:f3:47:74: 4f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:E6:F4:AC:68:89:C7:6E:7E:09:E7:AE:D3:15:3A:50:CC:B2:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:79:8b:9b:5c:a1:73:46:da:ca:4b:07:39:4c:3a:1f:de:a9: 43:7b:f2:04:b2:84:a8:9c:7c:30:23:e9:13:eb:7d:b9:d6:1a: f8:5c:1f:f4:c9:48:eb:c6:b5:2b:00:3f:5a:c0:a0:c6:bf:b0: d3:9f:3c:51:0d:fb:73:75:78:b5:33:07:58:dc:06:d3:59:1c: 61:11:b0:16:08:a3:5e:ee:a1:fc:d3:45:3d:d6:a8:4e:3c:95: dc:f7:2e:2a:96:01:da:bc:43:35:25:2f:51:f9:a5:ef:fa:b7: a6:ec:f1:dd:21:76:e3:12:b4:b0:8f:0d:bc:f3:ab:44:fe:97: fd:1c:58:35:46:02:bd:fe:2e:17:80:15:a8:d8:5e:26:38:d1: 88:32:0e:98:16:8d:ed:50:d2:b8:13:11:dc:f2:5e:07:4b:72: ed:5c:fc:ee:8a:8f:f6:3c:74:5d:46:56:34:a1:c5:25:1c:8b: e4:8d:a0:59:26:7c:b5:75:d9:6a:70:12:1e:67:2a:a6:8a:f9: c3:5e:cf:f8:66:6f:74:29:d3:1a:b6:74:46:84:01:29:90:f6: f9:75:5b:9c:6d:0c:f5:31:c9:9b:0e:b4:74:67:a4:6b:c4:c0: 6f:3f:40:65:74:a2:01:95:59:22:d1:75:80:77:3d:da:16:5d: 33:a9:f3:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrG2uBLYlK8FY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OGEzNzQ3ZWYtODc4NC00MzYzLThhNGMtMDEyNjA5N2Q4NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkapUz1NZJamooRfSLbATkT6IDYshYQvB2M6a WGmOHQP24S2kxofFlv1IqerV2+z+LDex50sgoVSDi2YniXLLBDKLK6mcpEQs6TQT ZQrk7eOo1TYQcMEIJ6cO7cLLtGxYuc4kKvFwvrFBwgsky0zRDCROT5jDyRx0jqSM DhAxtt7zGQE7FN3TmGdzd8yx8+1xqt7CJNpxo4UnlO7VTupc5ApHQdQZAqX9hBmV oq0q2qzdQsrDT9khy5cjea52mi6/nGtnLcwM4YRW24Olku1oBtiikZ46ZZ6ye6Iz ztuhWRgLUqJPebxEd6LDXbf7rR/d6H7dbjPLHiWr7LrzR3RPPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgq5vSsaInHbn4J567TFTpQzLK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2IwZTRlYjctMDJiMS0z ODYxLThlODgtNGU4NTQ3Mjc3YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ5i5tcoXNG2spLBzlMOh/eqUN78gSyhKicfDAj6RPrfbnWGvhcH/TJ SOvGtSsAP1rAoMa/sNOfPFEN+3N1eLUzB1jcBtNZHGERsBYIo17uofzTRT3WqE48 ldz3LiqWAdq8QzUlL1H5pe/6t6bs8d0hduMStLCPDbzzq0T+l/0cWDVGAr3+LheA FajYXiY40YgyDpgWje1Q0rgTEdzyXgdLcu1c/O6Kj/Y8dF1GVjShxSUci+SNoFkm fLV12WpwEh5nKqaK+cNez/hmb3Qp0xq2dEaEASmQ9vl1W5xtDPUxyZsOtHRnpGvE wG8/QGV0ogGVWSLRdYB3PdoWXTOp8wc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:35 2025 by rpki-client