$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa File: 37219094-f4ad-3a5e-a5de-82c59292ef7c.roa (raw, json) Hash identifier: ihGhGy7of1BLWP+PbR4rdXofEIiKlvUFP0MLsub9VeU= Subject key identifier: 9E:11:DD:BA:3E:EB:04:D1:A4:EF:E2:75:3E:DD:FD:02:F0:2B:2B:BE Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584B0746A9FC08C65610E54875C0 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:a9:fc:08:c6:56:10:e5:48:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=a2f08ed4-8ba8-4a4f-9f5c-6ad39b79bf07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e6:0d:62:2d:f6:f8:26:10:49:c7:f4:41:fd: 21:57:b9:33:d8:08:fc:36:c3:eb:7e:ab:33:a0:7d: 4a:6a:16:20:c7:79:84:71:eb:60:aa:c5:c0:0b:a2: 89:e4:6c:8a:0b:f1:94:ff:ac:a3:1d:2b:81:14:00: 0b:1d:3c:8a:d9:d3:1e:5f:65:a4:cf:d0:b7:0f:a1: 53:14:03:f6:1c:df:ca:54:d4:b8:42:eb:eb:44:02: a2:c4:e7:58:13:38:3f:57:e7:0b:b8:c5:1b:5e:8b: e8:a8:0c:80:c9:a7:68:ef:fb:bb:e4:46:4c:cd:d2: f6:82:cc:2b:6e:3c:1a:f6:4e:e4:79:fe:42:a1:dc: 5f:7c:5a:e7:f0:d5:9e:69:db:24:0e:5d:67:50:4c: af:6e:e5:fe:be:4d:61:96:51:64:88:ff:db:d6:2c: df:04:d6:1c:de:68:0c:0d:5a:61:2e:01:a1:9d:51: de:35:6d:d7:e4:dd:f7:1f:70:36:06:1e:c6:5a:45: e5:db:53:5a:1d:97:a4:4a:c6:90:f5:0b:b6:81:55: 59:42:e6:14:04:88:38:99:2b:43:cb:1b:e5:3d:07: 59:9b:a9:d7:02:e7:03:35:52:ea:7d:3f:fd:ff:41: 8e:75:5d:16:85:e2:b5:d4:94:d8:3d:e5:82:4d:c4: 68:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:11:DD:BA:3E:EB:04:D1:A4:EF:E2:75:3E:DD:FD:02:F0:2B:2B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/37219094-f4ad-3a5e-a5de-82c59292ef7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:72:f3:5d:a4:65:00:20:b8:92:cc:88:af:d2:34:a2:ce:3d: e9:89:ac:5b:b1:ab:7f:71:a3:24:91:86:7d:2e:9d:03:4a:98: 3a:7d:a3:0b:44:90:2b:c7:ff:48:be:87:82:e6:b2:61:95:8a: 6c:ef:f1:ee:3e:7d:2f:ae:9a:95:b5:50:a5:ce:74:35:16:38: 1b:88:3b:e1:e4:31:20:b1:d0:e7:3c:5e:c9:66:69:ac:ac:0b: 1d:79:77:f0:34:1e:76:fa:02:ac:9a:97:b5:e5:90:53:f6:61: 6e:79:7c:87:1b:df:a9:f1:ef:9a:8e:77:10:2c:bc:f3:ed:b3: 8d:b8:4c:60:9a:ac:93:71:ce:e4:4a:7a:85:58:20:bd:ae:c6: 0d:a8:98:0b:9a:37:c0:ce:46:a3:bb:5c:f6:6b:b5:c3:5f:39: 4f:b8:33:98:c4:29:7d:7c:18:a2:fb:35:59:c5:7f:d6:82:b3: 7a:e2:ca:89:b1:b2:14:79:1f:c4:8a:5f:55:18:b5:a1:1d:ed: e1:ea:0c:9a:06:f5:4c:77:82:8c:60:f0:c3:c4:3e:5f:e2:15: 51:7e:1b:ea:45:86:cf:5b:76:c0:af:d5:18:3b:c5:a8:29:be: 81:39:53:b6:44:88:6d:2d:dd:63:09:01:1c:91:25:a1:bd:44: bd:68:0a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRqn8CMZWEOVIdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk YTJmMDhlZDQtOGJhOC00YTRmLTlmNWMtNmFkMzliNzliZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuYNYi32+CYQScf0Qf0hV7kz2Aj8NsPrfqsz oH1KahYgx3mEcetgqsXAC6KJ5GyKC/GU/6yjHSuBFAALHTyK2dMeX2Wkz9C3D6FT FAP2HN/KVNS4QuvrRAKixOdYEzg/V+cLuMUbXovoqAyAyado7/u75EZMzdL2gswr bjwa9k7kef5CodxffFrn8NWeadskDl1nUEyvbuX+vk1hllFkiP/b1izfBNYc3mgM DVphLgGhnVHeNW3X5N33H3A2Bh7GWkXl21NaHZekSsaQ9Qu2gVVZQuYUBIg4mStD yxvlPQdZm6nXAucDNVLqfT/9/0GOdV0WheK11JTYPeWCTcRoHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4R3bo+6wTRpO/idT7d/QLwKyu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvMzcyMTkwOTQtZjRhZC0z YTVlLWE1ZGUtODJjNTkyOTJlZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpy812kZQAguJLMiK/SNKLOPemJrFuxq39xoySRhn0unQNKmDp9owtE kCvH/0i+h4LmsmGVimzv8e4+fS+umpW1UKXOdDUWOBuIO+HkMSCx0Oc8Xslmaays Cx15d/A0Hnb6Aqyal7XlkFP2YW55fIcb36nx75qOdxAsvPPts424TGCarJNxzuRK eoVYIL2uxg2omAuaN8DORqO7XPZrtcNfOU+4M5jEKX18GKL7NVnFf9aCs3riyomx shR5H8SKX1UYtaEd7eHqDJoG9Ux3goxg8MPEPl/iFVF+G+pFhs9bdsCv1Rg7xagp voE5U7ZEiG0t3WMJARyRJaG9RL1oCrE= -----END CERTIFICATE-----Generated at Wed Sep 10 04:27:30 2025 by rpki-client