$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa File: 8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa (raw, json) Hash identifier: jQOq0Kq5KyljlawC0u79OoroOM0cO87OBPbJsKhg1qM= Subject key identifier: DD:B2:67:CE:C0:C9:0A:91:50:92:BB:1A:66:62:70:BD:9B:48:4F:24 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584B0746B2384390834E30531F00 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b2:38:43:90:83:4e:30:53:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=6a83e85f-dedb-4e46-a789-3dbda1d78250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:0d:6a:65:70:5f:6d:ae:d0:f5:21:07:93: fd:53:99:4a:36:5c:72:7a:67:a4:32:3a:a8:45:6c: 78:bf:f9:a4:89:92:37:01:9b:f5:d9:fe:6e:f2:24: d7:ec:f1:60:a8:af:b2:58:9a:b9:dc:21:97:0f:74: ab:c7:f3:34:d7:c6:a8:cd:17:09:4d:89:61:98:c8: b2:59:94:3a:c4:0f:2e:01:81:51:80:a8:31:ac:f6: 58:00:3b:73:80:8e:07:63:bf:62:9b:e1:2d:3e:c0: 33:0a:95:39:99:b5:d2:8b:ef:45:57:8b:6a:cb:0b: 51:62:e1:03:63:3e:df:cf:ce:c5:88:10:0f:06:eb: e9:dd:15:16:d5:20:70:6c:9c:5d:41:20:1a:95:8f: 38:32:7a:6f:52:b7:86:d7:51:43:1c:d5:0d:6b:a5: c8:3e:ca:d3:6f:b8:53:11:ca:2b:24:69:37:83:75: a9:c1:04:7f:d5:e8:ea:38:b8:8a:c2:13:75:1a:4a: 6c:4c:4a:75:0b:96:2e:6e:8d:0a:89:09:fc:1e:a4: 21:64:ca:56:8c:53:0b:66:fe:18:3f:3c:2c:2a:9e: cc:72:2a:78:b0:ba:12:f0:1c:c8:de:ec:68:65:31: b5:4a:09:66:c1:7f:d0:80:2a:f2:a4:73:07:08:95: ed:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B2:67:CE:C0:C9:0A:91:50:92:BB:1A:66:62:70:BD:9B:48:4F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:10:c2:26:0c:e1:03:16:a8:b1:a1:42:a4:31:40:14:93:27: fe:a1:f6:a5:b6:2e:0f:8b:ec:a5:28:d4:5e:a2:10:08:c0:fe: 57:ee:75:04:ac:07:86:49:99:ee:63:b1:a8:1d:c2:fe:de:3c: 4a:11:25:a0:3a:cc:8a:d6:a2:eb:27:3a:49:7e:4b:be:4c:00: 03:d3:e0:05:cd:2e:66:49:1c:e0:41:29:09:0f:c3:7a:10:97: c7:8b:34:13:98:65:7e:f2:4c:6d:a7:c6:ed:d0:cf:ed:5a:8c: 03:6f:cc:b6:8f:a2:82:35:1c:aa:20:e9:d9:33:04:4c:b2:cf: d4:fe:df:7d:4d:ed:cf:3e:c0:86:40:56:3b:b7:7f:94:3e:ac: c8:37:c3:98:7e:ac:b4:ee:59:cc:12:96:a8:0a:18:76:0a:f3: 16:62:18:a5:70:33:ff:ac:e0:fb:6c:b1:ca:ce:c9:17:af:70: 70:99:b5:e1:9b:bc:d6:b9:6d:45:9a:a8:6f:5d:ea:76:68:e1: 3f:55:e0:7f:3d:df:91:99:e3:71:a0:53:2f:89:73:71:e0:4a: a0:2c:30:e5:b0:de:3e:c6:7e:61:2c:fa:93:d7:e0:c6:f1:4b: 92:bf:54:a1:35:44:d1:0e:96:8b:8f:43:f9:48:26:0f:7b:85: 36:20:40:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrI4Q5CDTjBTHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NmE4M2U4NWYtZGVkYi00ZTQ2LWE3ODktM2RiZGExZDc4MjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkENamVwX22u0PUhB5P9U5lKNlxyemekMjqo RWx4v/mkiZI3AZv12f5u8iTX7PFgqK+yWJq53CGXD3Srx/M018aozRcJTYlhmMiy WZQ6xA8uAYFRgKgxrPZYADtzgI4HY79im+EtPsAzCpU5mbXSi+9FV4tqywtRYuED Yz7fz87FiBAPBuvp3RUW1SBwbJxdQSAalY84MnpvUreG11FDHNUNa6XIPsrTb7hT EcorJGk3g3WpwQR/1ejqOLiKwhN1GkpsTEp1C5Yubo0KiQn8HqQhZMpWjFMLZv4Y PzwsKp7Mcip4sLoS8BzI3uxoZTG1SglmwX/QgCrypHMHCJXtjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2yZ87AyQqRUJK7GmZicL2bSE8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvOGM5MWQ2MjEtYTI3OS0z ZWMwLThjNGMtMWIyNjQ5MGRjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKR1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoQwiYM4QMWqLGhQqQxQBSTJ/6h9qW2Lg+L7KUo1F6iEAjA/lfudQSs B4ZJme5jsagdwv7ePEoRJaA6zIrWousnOkl+S75MAAPT4AXNLmZJHOBBKQkPw3oQ l8eLNBOYZX7yTG2nxu3Qz+1ajANvzLaPooI1HKog6dkzBEyyz9T+331N7c8+wIZA Vju3f5Q+rMg3w5h+rLTuWcwSlqgKGHYK8xZiGKVwM/+s4PtsscrOyRevcHCZteGb vNa5bUWaqG9d6nZo4T9V4H8935GZ43GgUy+Jc3HgSqAsMOWw3j7GfmEs+pPX4Mbx S5K/VKE1RNEOlouPQ/lIJg97hTYgQDY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:24 2025 by rpki-client