$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa File: 3c30150f-dca1-38c3-ad8f-162e173fc54e.roa (raw, json) Hash identifier: Avn1pBuuJ7w0c8WA3O8NcYDidexGPT4jEQEJhiDizlU= Subject key identifier: A9:86:31:2F:E3:0F:B5:0D:86:A1:6D:3C:C6:EB:26:1E:41:54:FE:E6 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584F2ABD12FBB40BBBE3BC9B2DC0 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 23154 IP address blocks: 148.164.42.0/23 maxlen: 23 148.164.42.0/24 maxlen: 24 148.164.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:12:fb:b4:0b:bb:e3:bc:9b:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=b2a86178-7918-4e69-9a55-d936b909ee24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:0f:e9:d5:20:ff:04:31:81:bf:82:46:92: b6:1a:0a:b8:f8:56:86:7b:2b:3b:24:c2:12:de:06: 43:26:1c:73:8e:72:53:35:a1:50:dc:6f:d6:43:e3: ec:24:be:54:59:6e:3a:11:76:c7:59:cb:52:b2:8b: 82:6b:b1:e9:5f:d0:cc:0d:8f:01:87:24:dc:52:c1: c4:85:3d:b7:69:ca:02:a0:b0:21:2f:c5:56:4e:40: 44:aa:22:24:f9:74:36:f6:99:c3:02:5e:ef:0a:77: 23:ec:b8:51:19:72:b1:7a:05:6d:00:c3:93:18:19: b5:92:51:3d:2f:6f:d6:06:10:1f:e4:74:56:e7:c0: 23:ef:9a:b2:2a:69:e0:90:64:c8:93:dc:2d:c9:e3: 5f:5d:96:cc:71:d2:d3:d7:da:75:d8:a5:97:e7:a3: d0:76:90:b0:88:f8:d9:81:8c:1b:21:ba:91:43:a1: a8:7a:a5:21:c1:da:a7:ed:87:6e:46:b4:aa:a4:7f: a2:65:ec:ff:7d:5d:5c:26:8f:cd:ff:c7:fd:ca:44: 9d:b1:fa:fa:25:23:8d:24:79:5d:99:38:0d:1e:f4: 9d:03:bc:46:d2:64:18:46:60:62:cd:19:de:92:7e: a9:11:20:de:bd:38:05:8e:1f:15:ce:60:6e:6a:46: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:86:31:2F:E3:0F:B5:0D:86:A1:6D:3C:C6:EB:26:1E:41:54:FE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3c30150f-dca1-38c3-ad8f-162e173fc54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ea:26:a4:fd:38:bf:af:90:28:7c:20:c5:93:f3:f8:3c:76: 0c:35:a0:b0:57:26:23:c4:ac:86:ce:aa:a6:c8:92:0b:66:c4: d9:3d:ab:a5:11:41:17:79:6e:8f:3e:61:bb:67:f5:a4:3c:b5: 7c:d9:5e:02:24:35:f8:65:2e:3c:56:43:7c:70:17:5c:68:e1: 4e:17:bb:c4:f2:cf:dd:dc:b6:4e:1e:09:29:57:cc:9d:73:23: 99:ed:93:05:5a:ba:00:0f:cb:12:c4:a2:08:58:19:19:53:af: 06:86:03:14:29:f2:4b:27:bf:6a:77:37:0e:16:2a:a0:f5:3a: 72:eb:35:1a:6f:de:c2:09:b8:ba:a4:7f:4a:ce:73:2a:b2:d0: b1:90:d1:67:89:5e:d8:c2:ce:2e:41:1b:4a:4b:97:69:02:ea: 08:f5:78:a9:6b:5f:0d:03:fc:3d:87:38:a5:0a:64:5f:78:d2: f2:c0:6e:50:ba:94:0e:22:a6:f1:57:a3:55:49:c1:50:00:6a: 02:7f:95:e1:a4:4d:50:d8:d3:ae:d1:e4:64:e6:7b:0a:cd:c7: 46:d8:be:2a:d2:75:8a:51:70:45:ad:b7:ab:b6:f2:5b:60:81: 08:04:3d:d4:eb:29:b0:0c:78:38:45:ab:0f:0d:75:29:17:bf: 05:72:ea:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRL7tAu747ybLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YjJhODYxNzgtNzkxOC00ZTY5LTlhNTUtZDkzNmI5MDllZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0EP6dUg/wQxgb+CRpK2Ggq4+FaGeys7JMIS 3gZDJhxzjnJTNaFQ3G/WQ+PsJL5UWW46EXbHWctSsouCa7HpX9DMDY8BhyTcUsHE hT23acoCoLAhL8VWTkBEqiIk+XQ29pnDAl7vCncj7LhRGXKxegVtAMOTGBm1klE9 L2/WBhAf5HRW58Aj75qyKmngkGTIk9wtyeNfXZbMcdLT19p12KWX56PQdpCwiPjZ gYwbIbqRQ6GoeqUhwdqn7YduRrSqpH+iZez/fV1cJo/N/8f9ykSdsfr6JSONJHld mTgNHvSdA7xG0mQYRmBizRnekn6pESDevTgFjh8VzmBuakZWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmGMS/jD7UNhqFtPMbrJh5BVP7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvM2MzMDE1MGYtZGNhMS0z OGMzLWFkOGYtMTYyZTE3M2ZjNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbqJqT9OL+vkCh8IMWT8/g8dgw1oLBXJiPErIbOqqbIkgtmxNk9q6UR QRd5bo8+Ybtn9aQ8tXzZXgIkNfhlLjxWQ3xwF1xo4U4Xu8Tyz93ctk4eCSlXzJ1z I5ntkwVaugAPyxLEoghYGRlTrwaGAxQp8ksnv2p3Nw4WKqD1OnLrNRpv3sIJuLqk f0rOcyqy0LGQ0WeJXtjCzi5BG0pLl2kC6gj1eKlrXw0D/D2HOKUKZF940vLAblC6 lA4ipvFXo1VJwVAAagJ/leGkTVDY067R5GTmewrNx0bYvirSdYpRcEWtt6u28ltg gQgEPdTrKbAMeDhFqw8NdSkXvwVy6iw= -----END CERTIFICATE-----Generated at Sat Sep 19 07:38:49 2026 by rpki-client