$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa File: f43e8308-d375-3574-bde0-f0f8e725d68c.roa (raw, json) Hash identifier: RYwMqA0vQ+wrlxLSXQCuCekhmWIUYdp8FzleRUQyzH0= Subject key identifier: 71:F4:D4:7F:42:40:49:0F:84:88:1E:F9:D2:1D:A6:63:0E:AD:32:16 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584E885A3F6A72D3C5F7DA25ACC0 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 23154 IP address blocks: 148.164.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:3f:6a:72:d3:c5:f7:da:25:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=17eba724-c4b1-4d2f-adc0-d8b1b81fa548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:de:b4:d1:e6:68:57:a2:92:d9:bc:8b:d8: 3d:9b:69:5f:7f:b4:0b:41:f1:6c:e7:46:57:de:ae: d9:75:fc:6b:45:5b:d7:e6:29:45:8a:25:a3:65:96: 59:fa:81:44:3e:23:07:c2:f2:0b:8b:99:90:a6:fd: 58:5c:bd:02:88:df:0b:42:eb:77:09:53:4c:1f:fe: 7e:09:9a:ad:95:b5:6f:6c:d2:cb:a8:6b:fb:08:d6: ed:1c:86:9d:b9:83:3a:e4:77:ad:ec:06:6a:6d:06: 1f:b8:49:26:4f:0f:bb:76:d9:cc:4e:69:9d:9a:3e: 36:63:2e:46:26:4e:cf:3f:d5:ed:30:61:18:2b:f0: a0:b2:96:99:9b:0a:1d:d9:9f:09:80:83:a5:af:3d: 3a:7d:db:97:5a:2b:63:e4:72:c6:83:0a:14:7d:80: 0a:0e:19:b7:58:6d:97:ea:57:f0:7a:fd:bf:e7:83: f5:8b:cd:9c:0e:3d:05:64:26:e8:ab:46:e5:f8:8c: 16:1e:da:6c:78:55:b6:c0:a0:26:da:12:a6:0b:8e: 84:58:13:75:ff:8d:7f:fb:0b:77:14:61:4b:c5:76: 3c:2d:6b:ff:b9:9a:61:92:2d:c7:57:75:8a:0a:18: e5:d3:dd:88:ac:44:1e:f2:91:44:f0:58:40:67:98: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F4:D4:7F:42:40:49:0F:84:88:1E:F9:D2:1D:A6:63:0E:AD:32:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f1:20:60:6c:87:2c:3e:83:1f:a3:ef:fa:39:0a:ca:d5:67: 8c:e6:c1:92:3c:87:8f:09:99:c1:f4:49:c6:b5:48:5e:7c:4f: fc:f0:c5:0b:1c:82:5d:ae:e9:30:8a:c6:e7:0c:f2:ac:8a:84: 7c:22:77:d6:4e:74:4f:c5:3d:0a:49:5f:08:e8:29:81:66:06: df:4a:14:ec:92:bd:68:d3:1a:dc:d6:17:4e:33:58:db:7a:a5: 94:0e:04:fa:7c:fe:b9:c7:08:7e:c5:21:96:79:a1:77:18:c2: 0e:33:f1:c3:90:8e:ef:96:e6:0b:bd:0a:31:d5:85:06:b2:1d: 72:d3:a1:67:b8:e7:43:2d:e9:73:ad:cb:d5:d2:39:ea:5e:a3: fb:d5:7f:74:12:39:48:51:83:18:82:96:59:75:bc:e6:7e:96: 19:73:0c:af:48:13:f0:21:91:ef:a7:c0:91:d5:92:a2:15:cd: f1:3b:05:17:1f:2d:96:56:06:90:95:55:08:02:dc:63:3b:38: 8b:93:43:a3:5f:f9:20:4a:f3:96:72:6e:35:50:1a:af:3a:1a: 30:c3:10:f0:ab:5e:59:7f:c8:0a:dd:8b:7b:4d:ab:60:48:99: 80:3e:8f:f8:7e:b6:c0:7f:91:a2:5d:a4:c4:3a:60:ca:c6:54: 3f:34:9b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWj9qctPF99olrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk MTdlYmE3MjQtYzRiMS00ZDJmLWFkYzAtZDhiMWI4MWZhNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw/etNHmaFeiktm8i9g9m2lff7QLQfFs50ZX 3q7ZdfxrRVvX5ilFiiWjZZZZ+oFEPiMHwvILi5mQpv1YXL0CiN8LQut3CVNMH/5+ CZqtlbVvbNLLqGv7CNbtHIaduYM65Het7AZqbQYfuEkmTw+7dtnMTmmdmj42Yy5G Jk7PP9XtMGEYK/CgspaZmwod2Z8JgIOlrz06fduXWitj5HLGgwoUfYAKDhm3WG2X 6lfwev2/54P1i82cDj0FZCboq0bl+IwWHtpseFW2wKAm2hKmC46EWBN1/41/+wt3 FGFLxXY8LWv/uZphki3HV3WKChjl092IrEQe8pFE8FhAZ5iwFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH01H9CQEkPhIge+dIdpmMOrTIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvZjQzZTgzMDgtZDM3NS0z NTc0LWJkZTAtZjBmOGU3MjVkNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPxIGBshyw+gx+j7/o5CsrVZ4zmwZI8h48JmcH0Sca1SF58T/zwxQsc gl2u6TCKxucM8qyKhHwid9ZOdE/FPQpJXwjoKYFmBt9KFOySvWjTGtzWF04zWNt6 pZQOBPp8/rnHCH7FIZZ5oXcYwg4z8cOQju+W5gu9CjHVhQayHXLToWe450Mt6XOt y9XSOepeo/vVf3QSOUhRgxiClll1vOZ+lhlzDK9IE/Ahke+nwJHVkqIVzfE7BRcf LZZWBpCVVQgC3GM7OIuTQ6Nf+SBK85ZybjVQGq86GjDDEPCrXll/yArdi3tNq2BI mYA+j/h+tsB/kaJdpMQ6YMrGVD80m5Q= -----END CERTIFICATE-----Generated at Fri Jul 24 14:46:34 2026 by rpki-client