$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa File: 3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa (raw, json) Hash identifier: ahSdLhjVZXFBmlMn0lMbNqXss0KEqV6dCpW81WesOz8= Subject key identifier: 91:7D:AB:23:01:BA:A1:C5:1C:92:73:E0:28:D2:22:50:60:CE:CF:6D Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584DA815784D06413D29E76C3E00 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 23154 IP address blocks: 148.164.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:78:4d:06:41:3d:29:e7:6c:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=ecf3a6e7-3dce-41be-9aac-df59c0df2c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9a:86:6c:de:cd:7e:e3:7e:19:96:93:8c:fd: fd:04:2f:30:e7:32:56:c1:15:4a:0a:d0:8c:57:e3: c1:ba:5a:61:92:92:eb:4f:26:7d:c2:08:64:c2:da: c5:06:9d:f0:8a:5c:5e:27:fc:09:57:bb:af:0f:14: 97:15:58:ab:79:d4:6b:b3:fe:35:b6:d6:e5:0d:af: 24:d0:3d:2e:d3:c2:5f:be:84:e7:f4:57:cb:d6:72: e8:88:c7:80:82:85:71:13:72:35:68:f6:b7:de:e4: b7:c7:dc:be:6f:99:7c:ac:87:6d:5f:65:19:a7:f5: 0e:6a:75:40:3b:82:de:27:97:1c:c9:b9:d1:7c:fd: 4f:f0:64:f2:62:3b:2f:e5:9a:e6:33:e4:70:1a:e9: 4e:46:37:af:aa:13:18:be:e9:ba:db:41:1f:4e:77: 0d:e6:27:d3:e0:c1:ce:cc:6d:a0:30:c5:6a:68:31: a1:44:ed:56:38:06:0b:ae:0a:38:e8:9e:4f:c8:32: bc:c2:5e:6a:6f:25:ee:97:33:d4:1e:0b:88:6b:a8: e3:34:0c:2c:0d:b4:d1:58:20:43:35:bd:6d:53:e0: c5:72:4e:1d:b5:28:ef:f4:cb:cd:12:22:8e:f7:cf: 5d:d7:9a:a6:e6:ce:a0:4d:dd:9c:28:92:1f:ee:ab: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7D:AB:23:01:BA:A1:C5:1C:92:73:E0:28:D2:22:50:60:CE:CF:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c4:b2:d1:60:5e:bb:9b:8f:62:e0:bd:fc:db:9e:31:5d:ab: 97:2e:29:69:90:e1:4c:f2:eb:3c:30:10:16:d0:07:f6:e9:cc: 0f:d3:96:18:f3:66:7f:1f:c0:50:63:14:21:db:67:ef:b3:52: d3:68:88:57:67:6f:42:67:66:ed:73:de:d7:37:95:1b:1c:a3: 6e:93:6d:23:ed:22:d2:e3:68:ec:4c:e6:20:3f:6e:8f:71:e4: f5:13:50:15:4e:fe:ab:eb:22:3c:4d:bd:e2:db:db:7d:a3:0b: 55:d4:e6:5d:aa:cb:11:d4:55:66:62:34:be:4f:b3:38:8a:62: 53:a7:07:86:a3:d2:b4:1d:4c:bc:26:56:0d:9a:b9:24:84:d3: 7d:d9:67:82:7b:28:79:e1:bb:3a:c6:f6:5c:59:1e:98:75:af: 0d:42:52:7e:55:a9:4f:a8:bb:57:a2:bc:00:c6:3c:4f:ba:c1: a2:37:e7:6a:71:c3:8e:e1:67:fd:8a:9f:a2:6b:0d:e3:f2:ed: b6:30:fb:87:38:12:be:eb:7e:6f:99:d2:14:f4:c8:b0:b7:50: 65:08:eb:79:a9:25:8b:09:ca:e3:38:fe:6a:68:68:50:a6:b8: ee:cf:e1:46:ea:40:bc:aa:64:cf:0f:3e:0e:ee:23:6d:89:fb: 02:c5:a6:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXhNBkE9KedsPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZWNmM2E2ZTctM2RjZS00MWJlLTlhYWMtZGY1OWMwZGYyYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5qGbN7NfuN+GZaTjP39BC8w5zJWwRVKCtCM V+PBulphkpLrTyZ9wghkwtrFBp3wilxeJ/wJV7uvDxSXFViredRrs/41ttblDa8k 0D0u08JfvoTn9FfL1nLoiMeAgoVxE3I1aPa33uS3x9y+b5l8rIdtX2UZp/UOanVA O4LeJ5ccybnRfP1P8GTyYjsv5ZrmM+RwGulORjevqhMYvum620EfTncN5ifT4MHO zG2gMMVqaDGhRO1WOAYLrgo46J5PyDK8wl5qbyXulzPUHguIa6jjNAwsDbTRWCBD Nb1tU+DFck4dtSjv9MvNEiKO989d15qm5s6gTd2cKJIf7qteFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF9qyMBuqHFHJJz4CjSIlBgzs9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2IwZTRlYjctMDJiMS0z ODYxLThlODgtNGU4NTQ3Mjc3YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7EstFgXrubj2LgvfzbnjFdq5cuKWmQ4Uzy6zwwEBbQB/bpzA/Tlhjz Zn8fwFBjFCHbZ++zUtNoiFdnb0JnZu1z3tc3lRsco26TbSPtItLjaOxM5iA/bo9x 5PUTUBVO/qvrIjxNveLb232jC1XU5l2qyxHUVWZiNL5PsziKYlOnB4aj0rQdTLwm Vg2auSSE033ZZ4J7KHnhuzrG9lxZHph1rw1CUn5VqU+ou1eivADGPE+6waI352px w47hZ/2Kn6JrDePy7bYw+4c4Er7rfm+Z0hT0yLC3UGUI63mpJYsJyuM4/mpoaFCm uO7P4UbqQLyqZM8PPg7uI22J+wLFpvE= -----END CERTIFICATE-----Generated at Thu Apr 30 15:38:29 2026 by rpki-client