$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa File: 3c30150f-dca1-38c3-ad8f-162e173fc54e.roa (raw, json) Hash identifier: 882kePbXbdICkBCQ3xifNWKlWKjVfKcEjwz8NgOryvc= Subject key identifier: 55:09:42:83:1D:CB:8D:57:13:CE:27:C2:08:57:5E:D7:7B:02:A8:1A Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584B0746B1E20F8FC42DDBA14080 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.42.0/23 maxlen: 23 148.164.42.0/24 maxlen: 24 148.164.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b1:e2:0f:8f:c4:2d:db:a1:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=a42cc885-1d7a-4a89-aa26-edefd2e1f920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:89:89:57:97:e5:fd:93:b6:3f:eb:6d:7d: fb:e8:91:42:f3:22:e6:74:cb:ac:09:82:c2:f8:4a: d2:1e:5d:44:ce:df:18:d4:0c:28:49:e6:f0:f6:61: 70:93:1d:70:a0:b6:aa:6a:c3:36:42:40:a3:34:e9: 4e:dd:56:14:b6:10:18:7a:02:d0:69:11:05:2d:c5: 20:87:36:8c:49:5d:d4:98:7a:56:e0:f6:e2:3e:5e: 05:be:3a:5c:64:80:4a:80:e1:93:cd:43:51:f9:31: 6e:1b:db:25:05:53:68:30:08:75:03:df:a2:72:9b: ba:44:bf:85:d1:b9:ec:9a:b4:fd:f0:cb:76:ad:be: 86:5c:c1:b2:04:fb:cb:66:38:d1:db:9d:05:5a:ad: 70:4b:00:c6:9b:24:89:8b:3f:20:79:48:50:25:1d: 90:3a:8b:8f:b8:dc:82:b2:2a:74:60:33:19:80:79: b1:91:16:84:71:ba:46:37:0b:30:3a:58:9e:bc:dd: 24:3d:c6:09:fa:a1:87:60:6f:f5:d8:e9:dc:2b:76: 25:76:46:b2:7c:95:59:02:fd:e8:ec:27:b1:2f:5c: 5e:38:31:37:f5:fe:18:02:b5:cc:87:7b:fd:c8:e6: 6d:f1:e2:cf:de:72:c9:8c:6d:1a:fe:7f:52:2c:8b: f8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:09:42:83:1D:CB:8D:57:13:CE:27:C2:08:57:5E:D7:7B:02:A8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:00:78:e3:23:2c:0b:17:15:cc:78:c1:e3:cf:a5:19:b4:dd: 2b:c9:29:cc:f5:27:55:de:9c:bc:bf:b7:12:a2:78:c7:7e:df: 60:1e:9d:d4:04:77:a7:d7:0f:09:01:0a:34:1b:d5:b8:59:3d: 80:63:ec:d2:83:ce:5b:25:05:76:07:ab:4b:33:b2:7d:de:93: 33:c2:fd:c5:6f:72:e5:70:c2:70:14:23:01:be:30:bd:48:19: 35:93:20:b7:ba:0d:6d:b6:50:95:98:6a:d7:c7:12:5b:15:c2: 48:45:45:17:f9:1c:82:c0:8e:68:e6:93:17:96:f5:7a:3e:b7: bc:38:3c:7f:45:da:05:b3:84:59:f9:e4:9d:fb:a4:40:30:bd: 4c:59:8c:89:8c:52:04:25:c2:87:36:42:c9:dd:63:1e:b5:fb: 43:9b:31:cc:45:fe:ed:c1:7d:39:58:30:e1:a8:07:57:01:db: 66:3b:fc:7c:2d:41:70:c0:6d:a8:05:0f:84:c8:c7:c7:73:4a: 15:e2:d7:74:1d:77:21:5a:6c:c1:6c:db:6f:be:5a:b4:f7:f3: 44:ca:47:f3:83:41:71:f5:e8:ac:1b:2b:7d:3c:b2:27:fb:02: f8:77:66:d1:b8:ed:db:58:0d:f7:49:c9:2e:a0:cb:a2:d4:94: 4d:cd:a7:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrHiD4/ELduhQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YTQyY2M4ODUtMWQ3YS00YTg5LWFhMjYtZWRlZmQyZTFmOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fiJiVeX5f2Ttj/rbX376JFC8yLmdMusCYLC +ErSHl1Ezt8Y1AwoSebw9mFwkx1woLaqasM2QkCjNOlO3VYUthAYegLQaREFLcUg hzaMSV3UmHpW4PbiPl4FvjpcZIBKgOGTzUNR+TFuG9slBVNoMAh1A9+icpu6RL+F 0bnsmrT98Mt2rb6GXMGyBPvLZjjR250FWq1wSwDGmySJiz8geUhQJR2QOouPuNyC sip0YDMZgHmxkRaEcbpGNwswOlievN0kPcYJ+qGHYG/12OncK3YldkayfJVZAv3o 7CexL1xeODE39f4YArXMh3v9yOZt8eLP3nLJjG0a/n9SLIv4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUJQoMdy41XE84nwghXXtd7AqgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2MzMDE1MGYtZGNhMS0z OGMzLWFkOGYtMTYyZTE3M2ZjNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4AeOMjLAsXFcx4wePPpRm03SvJKcz1J1XenLy/txKieMd+32AendQE d6fXDwkBCjQb1bhZPYBj7NKDzlslBXYHq0szsn3ekzPC/cVvcuVwwnAUIwG+ML1I GTWTILe6DW22UJWYatfHElsVwkhFRRf5HILAjmjmkxeW9Xo+t7w4PH9F2gWzhFn5 5J37pEAwvUxZjImMUgQlwoc2QsndYx61+0ObMcxF/u3BfTlYMOGoB1cB22Y7/Hwt QXDAbagFD4TIx8dzShXi13QddyFabMFs22++WrT380TKR/ODQXH16KwbK308sif7 Avh3ZtG47dtYDfdJyS6gy6LUlE3Np/w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:43:47 2025 by rpki-client