$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa File: 3c30150f-dca1-38c3-ad8f-162e173fc54e.roa (raw, json) Hash identifier: DeRQrlxmaSXmnVhAUuiRlJq35KmEUAXFL3/TUj17XNY= Subject key identifier: 41:42:4C:B7:89:4A:93:37:9C:CE:83:D1:F8:99:CA:4D:20:9B:A0:D2 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584DA8157871541BCE0AE4A30600 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 23154 IP address blocks: 148.164.42.0/23 maxlen: 23 148.164.42.0/24 maxlen: 24 148.164.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:78:71:54:1b:ce:0a:e4:a3:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=8704d412-569c-4b1a-8aa6-4130cde0dfe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:a7:60:f6:b3:be:23:0b:4b:d4:c0:ab:d6: 6a:3a:2d:bd:26:85:b2:a5:3c:fc:01:c5:11:97:6d: 11:76:e6:c7:eb:e2:5a:bc:7e:bc:21:bd:d9:15:ab: cb:1f:43:a5:6a:ae:e6:f3:94:d4:50:92:b6:d5:25: 14:3b:18:5a:56:58:e1:0f:45:66:b6:6a:5d:e6:0a: 14:7c:da:2d:e8:ce:cc:66:3b:e1:04:bd:08:95:e3: c2:39:11:b1:f8:df:02:dc:60:c9:5d:76:a9:ab:fe: fc:ca:6e:7c:f5:da:cf:50:b0:fa:c7:68:c9:37:84: 96:87:d0:ef:ac:a2:23:39:79:a7:e8:bf:2d:91:db: 83:84:6d:24:80:d5:8d:43:0b:d3:d8:e0:bd:bb:30: 92:44:de:2c:f4:f1:3f:0c:c9:ea:5c:a6:64:d6:08: 17:26:c1:41:b2:e0:d1:54:e9:3b:4b:77:35:c9:3d: 55:54:1c:7f:19:f2:84:d2:ed:56:64:25:17:8e:04: e2:84:e4:da:5a:a3:80:87:56:af:c0:8c:c9:ca:51: cc:ab:bf:19:a8:bf:d2:e5:ae:f5:8e:a2:2d:67:00: 21:9c:71:e3:a6:c6:d5:58:71:9f:aa:e7:ec:00:3c: f2:08:41:5c:97:c8:cd:cd:3f:46:95:89:53:0c:f0: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:42:4C:B7:89:4A:93:37:9C:CE:83:D1:F8:99:CA:4D:20:9B:A0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:98:f5:4c:74:c7:1c:0f:5f:80:24:6f:ee:41:2d:c9:f0:ec: 4c:ef:bd:e5:68:3e:d2:0c:a9:b1:72:bd:eb:1a:50:2b:ee:2b: fe:25:bd:e9:ab:60:14:a1:3f:e7:99:34:ac:ea:e7:65:db:87: 58:70:08:f7:18:90:03:42:d8:46:9d:4a:e9:65:7f:b3:aa:4e: 6b:db:5a:8c:df:64:36:4c:13:35:5f:35:8d:48:4b:e6:73:62: 5a:67:ac:b1:7a:1e:aa:1c:ad:a4:db:2f:75:b3:ab:ea:7d:cc: 4f:04:7d:e7:06:62:4d:14:69:ee:78:14:61:c5:a9:d0:f1:5d: 5b:a7:08:11:27:be:91:1d:b4:30:0e:26:da:6a:93:4b:9b:f7: 3a:88:ac:62:80:ba:ae:3b:37:df:b7:15:af:7b:c1:bf:70:a5: bd:19:29:fe:64:6c:08:be:ae:6f:c0:2b:db:9d:07:c9:84:fb: 95:88:b9:a5:94:6a:89:fe:b7:5b:d4:7b:08:85:67:db:48:03: 7f:42:3f:84:2e:6a:98:f4:39:9f:1e:da:a6:21:30:c6:a7:d9: 80:ba:37:bb:e2:52:b9:bb:a5:90:29:53:ea:7d:4b:5d:8d:5a: 5f:9c:2d:83:8a:72:a5:b2:6d:3a:bc:75:20:50:48:e4:37:ea: c0:2f:23:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXhxVBvOCuSjBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ODcwNGQ0MTItNTY5Yy00YjFhLThhYTYtNDEzMGNkZTBkZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVunYPazviMLS9TAq9ZqOi29JoWypTz8AcUR l20RdubH6+JavH68Ib3ZFavLH0Olaq7m85TUUJK21SUUOxhaVljhD0Vmtmpd5goU fNot6M7MZjvhBL0IlePCORGx+N8C3GDJXXapq/78ym589drPULD6x2jJN4SWh9Dv rKIjOXmn6L8tkduDhG0kgNWNQwvT2OC9uzCSRN4s9PE/DMnqXKZk1ggXJsFBsuDR VOk7S3c1yT1VVBx/GfKE0u1WZCUXjgTihOTaWqOAh1avwIzJylHMq78ZqL/S5a71 jqItZwAhnHHjpsbVWHGfqufsADzyCEFcl8jNzT9GlYlTDPDKRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFCTLeJSpM3nM6D0fiZyk0gm6DSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2MzMDE1MGYtZGNhMS0z OGMzLWFkOGYtMTYyZTE3M2ZjNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiY9Ux0xxwPX4Akb+5BLcnw7EzvveVoPtIMqbFyvesaUCvuK/4lvemr YBShP+eZNKzq52Xbh1hwCPcYkANC2EadSullf7OqTmvbWozfZDZMEzVfNY1IS+Zz YlpnrLF6HqocraTbL3Wzq+p9zE8EfecGYk0Uae54FGHFqdDxXVunCBEnvpEdtDAO Jtpqk0ub9zqIrGKAuq47N9+3Fa97wb9wpb0ZKf5kbAi+rm/AK9udB8mE+5WIuaWU aon+t1vUewiFZ9tIA39CP4Quapj0OZ8e2qYhMMan2YC6N7viUrm7pZApU+p9S12N Wl+cLYOKcqWybTq8dSBQSOQ36sAvIyY= -----END CERTIFICATE-----Generated at Thu Apr 30 15:38:49 2026 by rpki-client