$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa File: aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa (raw, json) Hash identifier: QvJwfvITSpVEsNx5roCzUX8PQyXxvStYRNbfHuxAvqk= Subject key identifier: E1:0A:A2:4B:7F:BF:65:2B:EA:F2:3B:96:03:C7:83:43:A9:76:67:06 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584B0746AA6418A21677906525D0 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:aa:64:18:a2:16:77:90:65:25:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=11bf0f37-db96-4767-8000-b11e42bc2488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:42:77:9d:8d:b7:46:8a:ce:9c:4e:07:c1: aa:24:5f:3f:b8:a1:6b:a0:4d:70:13:bf:86:a9:b0: b0:f2:f9:31:e9:2d:05:08:e1:b6:1b:3c:4d:b7:2b: bb:29:83:5d:49:e2:82:1a:68:c0:81:2d:06:ad:75: 67:c0:eb:ff:f3:40:5d:85:9d:9f:a1:ce:6d:17:1e: 3e:99:be:0b:23:72:9b:e7:f8:12:09:de:3c:54:1d: 5e:d7:50:3b:a1:0e:13:f6:ed:ca:c0:47:f8:24:82: 90:84:b7:15:40:d3:6a:3c:f8:f2:af:ec:f9:45:3b: 2e:44:05:29:f4:a9:f1:b9:2f:e3:f8:70:1f:cc:72: 23:ac:45:87:3e:80:99:78:ec:b8:5b:4d:31:5c:1d: b5:6a:3d:17:b0:ec:e0:5a:36:bd:33:98:2c:74:14: e2:cd:3e:cf:fa:81:1f:2b:be:b6:7b:af:02:0b:e5: 67:00:b4:14:53:8b:13:15:3f:ee:9f:71:dd:5e:b8: 9f:31:ed:96:9b:d2:1e:4e:1f:5f:29:ac:66:07:3c: 90:d5:25:c2:ce:07:16:97:79:25:09:4a:02:c8:dc: 00:ed:bd:e9:05:cd:e3:cd:39:9b:9e:70:a8:65:4d: 5f:03:a9:03:3a:8c:b4:47:87:60:78:e3:e8:a6:f7: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:A2:4B:7F:BF:65:2B:EA:F2:3B:96:03:C7:83:43:A9:76:67:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3a:8b:a7:72:46:54:32:90:3a:55:a0:c4:31:62:b2:cc:48: 4f:20:ab:36:06:d3:c1:07:36:08:94:22:15:fe:8b:b5:9b:2d: 21:48:02:b2:28:4e:bb:37:74:b3:e6:7e:39:71:47:28:3a:b1: a9:bc:9a:f8:05:49:8f:ed:31:18:bb:79:9b:a8:6a:46:2b:f6: 44:30:0a:fd:37:52:e3:17:fa:f3:3e:b7:9e:6b:03:cd:2c:2a: 33:aa:18:a6:9b:cb:31:be:c2:44:7f:31:c6:ba:c3:6b:fe:2b: ff:47:28:32:a7:2f:9c:b8:a3:76:29:15:9c:d0:df:99:e0:de: 31:d7:a9:2c:26:78:45:ea:58:6f:db:4f:aa:0d:07:62:7b:d3: bd:89:a1:a7:85:1d:57:af:22:8a:20:89:cf:67:e0:76:af:f4: 84:40:05:e8:4d:3c:35:1c:fb:11:0c:9b:e4:fa:97:e5:48:a0: 87:71:16:ce:81:5c:1e:02:1b:9e:cb:2f:1a:3b:f5:28:aa:a5: 62:07:d8:f9:b6:48:1e:4b:43:94:51:64:dc:a9:2e:42:74:0e: d4:44:d9:60:c7:34:6d:bf:41:de:7a:25:3f:4d:25:3d:d3:9d: 0d:45:44:cb:28:7b:00:e0:dc:27:3f:39:75:bb:04:de:b1:fa: aa:92:65:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRqpkGKIWd5BlJdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MTFiZjBmMzctZGI5Ni00NzY3LTgwMDAtYjExZTQyYmMyNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRRCd52Nt0aKzpxOB8GqJF8/uKFroE1wE7+G qbCw8vkx6S0FCOG2GzxNtyu7KYNdSeKCGmjAgS0GrXVnwOv/80BdhZ2foc5tFx4+ mb4LI3Kb5/gSCd48VB1e11A7oQ4T9u3KwEf4JIKQhLcVQNNqPPjyr+z5RTsuRAUp 9KnxuS/j+HAfzHIjrEWHPoCZeOy4W00xXB21aj0XsOzgWja9M5gsdBTizT7P+oEf K762e68CC+VnALQUU4sTFT/un3HdXrifMe2Wm9IeTh9fKaxmBzyQ1SXCzgcWl3kl CUoCyNwA7b3pBc3jzTmbnnCoZU1fA6kDOoy0R4dgeOPopvel9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEKokt/v2Ur6vI7lgPHg0OpdmcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYWFkYzJjNDgtMWI2OC0z YzNkLTgzY2EtYjg3ODRlMWRmOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF46i6dyRlQykDpVoMQxYrLMSE8gqzYG08EHNgiUIhX+i7WbLSFIArIo Trs3dLPmfjlxRyg6sam8mvgFSY/tMRi7eZuoakYr9kQwCv03UuMX+vM+t55rA80s KjOqGKabyzG+wkR/Mca6w2v+K/9HKDKnL5y4o3YpFZzQ35ng3jHXqSwmeEXqWG/b T6oNB2J7072JoaeFHVevIoogic9n4Hav9IRABehNPDUc+xEMm+T6l+VIoIdxFs6B XB4CG57LLxo79SiqpWIH2Pm2SB5LQ5RRZNypLkJ0DtRE2WDHNG2/Qd56JT9NJT3T nQ1FRMsoewDg3Cc/OXW7BN6x+qqSZXI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:44:11 2025 by rpki-client