$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa File: 3c30150f-dca1-38c3-ad8f-162e173fc54e.roa (raw, json) Hash identifier: EzhwXL09EMLI2JumiaL2VJuCvh4MriqWwCbeGlzKUuw= Subject key identifier: BF:F8:18:16:44:0D:43:AE:47:7F:CB:0F:FA:58:1B:33:CD:B0:6D:F8 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584E885A3F9063405F7CE2649120 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 23154 IP address blocks: 148.164.42.0/23 maxlen: 23 148.164.42.0/24 maxlen: 24 148.164.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:3f:90:63:40:5f:7c:e2:64:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=cbeb370b-46a7-4b02-9ab6-6b581bb9e130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:0d:d1:7a:10:3e:48:cb:94:fe:0c:c2:79: 45:45:11:3d:77:2c:7c:a5:b3:1b:06:7b:be:82:92: 32:e8:61:2f:57:90:4e:ab:b5:9d:d0:f3:b5:0a:58: 47:50:97:f3:fa:9d:49:4e:7b:13:3a:b0:fa:3d:67: 4f:ff:53:91:56:f8:71:b8:75:b8:b2:74:78:18:30: d2:a0:c7:3d:02:ad:38:5d:20:d9:4e:66:6e:3c:51: 87:de:44:8c:06:41:43:8c:77:af:1e:d8:15:c2:6d: 2c:1b:c3:82:b4:9a:02:92:8a:f1:74:fb:57:65:0e: 70:09:54:a0:8d:22:fe:13:85:2d:81:8e:67:b1:69: 0a:56:9b:dc:ad:52:19:1a:18:84:0d:22:ac:5f:60: 1c:01:28:08:16:cd:59:b1:fb:67:62:98:41:2a:52: 96:a9:ff:c4:d5:9b:0c:ab:05:a7:f8:31:36:4a:fd: 58:33:66:b3:6c:19:f9:0e:81:de:29:6f:2c:6a:df: 5c:41:19:dc:c1:5a:f8:ed:b8:9d:3e:80:37:73:dd: 78:f5:f4:b8:f4:c5:f5:7b:83:71:6e:a3:68:c1:11: 88:81:a3:09:d7:82:00:a1:03:3a:7f:2f:e9:e8:f1: a1:b1:76:e3:38:84:bf:f9:a0:29:25:88:4e:13:80: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:18:16:44:0D:43:AE:47:7F:CB:0F:FA:58:1B:33:CD:B0:6D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:08:8e:26:5a:75:57:4b:26:7c:20:2c:f6:1d:f3:26:ab:dc: 6e:91:07:90:11:c1:dc:af:de:8d:54:f0:16:2a:c5:7a:99:7d: f5:4e:2e:7c:6c:dc:dc:20:12:b9:b9:6f:64:66:55:14:3b:ca: 63:7d:66:da:1e:e9:c9:0d:9c:f1:fb:3f:0f:a0:3a:1e:8a:88: 5a:14:1d:2f:1c:b2:e3:14:8e:9a:59:66:30:60:0d:9f:82:e1: de:f3:de:99:f5:0f:0a:15:ca:92:3d:cc:58:da:1c:6b:99:72: 1a:66:a4:b6:7d:29:7c:66:dd:6a:86:09:bb:b1:2d:27:40:df: 44:f6:e8:1c:da:2e:a2:1f:13:eb:15:ef:69:7f:6f:34:8f:05: b0:61:b5:be:8f:a9:a2:b5:1d:07:fc:10:69:0b:7f:6d:80:2b: 51:61:b7:eb:4f:8c:d4:48:1f:f7:18:ce:87:75:06:ae:2e:9d: e4:3c:1f:c1:d2:aa:62:fb:21:a3:48:bd:cb:04:d2:47:42:3b: 0d:7a:20:fc:66:3b:1f:5a:39:7d:70:27:f2:f4:98:67:50:e9: 80:67:1a:05:67:a9:fa:38:d2:de:ac:85:85:88:bf:c9:e2:b6: 7e:88:5d:70:9f:69:97:a1:3c:d9:b7:2d:89:32:2b:38:02:33: 10:57:4b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWj+QY0BffOJkkSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk Y2JlYjM3MGItNDZhNy00YjAyLTlhYjYtNmI1ODFiYjllMTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwQN0XoQPkjLlP4MwnlFRRE9dyx8pbMbBnu+ gpIy6GEvV5BOq7Wd0PO1ClhHUJfz+p1JTnsTOrD6PWdP/1ORVvhxuHW4snR4GDDS oMc9Aq04XSDZTmZuPFGH3kSMBkFDjHevHtgVwm0sG8OCtJoCkorxdPtXZQ5wCVSg jSL+E4UtgY5nsWkKVpvcrVIZGhiEDSKsX2AcASgIFs1ZsftnYphBKlKWqf/E1ZsM qwWn+DE2Sv1YM2azbBn5DoHeKW8sat9cQRncwVr47bidPoA3c9149fS49MX1e4Nx bqNowRGIgaMJ14IAoQM6fy/p6PGhsXbjOIS/+aApJYhOE4CK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/4GBZEDUOuR3/LD/pYGzPNsG34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2MzMDE1MGYtZGNhMS0z OGMzLWFkOGYtMTYyZTE3M2ZjNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4IjiZadVdLJnwgLPYd8yar3G6RB5ARwdyv3o1U8BYqxXqZffVOLnxs 3NwgErm5b2RmVRQ7ymN9Ztoe6ckNnPH7Pw+gOh6KiFoUHS8csuMUjppZZjBgDZ+C 4d7z3pn1DwoVypI9zFjaHGuZchpmpLZ9KXxm3WqGCbuxLSdA30T26BzaLqIfE+sV 72l/bzSPBbBhtb6PqaK1HQf8EGkLf22AK1Fht+tPjNRIH/cYzod1Bq4uneQ8H8HS qmL7IaNIvcsE0kdCOw16IPxmOx9aOX1wJ/L0mGdQ6YBnGgVnqfo40t6shYWIv8ni tn6IXXCfaZehPNm3LYkyKzgCMxBXS0k= -----END CERTIFICATE-----Generated at Fri Jul 24 02:02:59 2026 by rpki-client