$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa File: 8c1d8561-e377-394b-ad52-2f543980d885.roa (raw, json) Hash identifier: JSCJW8ENLgKL2iT8Sunxf3EZggm+mF90Gc9MWykFaPk= Subject key identifier: 6B:67:16:31:FC:C0:F7:B9:0B:42:BA:16:0A:2A:26:45:DB:F8:96:AF Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584DA815728033C5ADDD587ABC00 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 23154 IP address blocks: 148.164.48.0/23 maxlen: 23 148.164.48.0/24 maxlen: 24 148.164.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:72:80:33:c5:ad:dd:58:7a:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=eaa57a55-de90-49dd-a5da-90226f7fca18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:68:4e:3a:da:d3:11:f4:40:8e:32:4f:5d: f9:e3:02:31:49:87:60:2a:ec:92:d2:54:c2:ca:21: 8c:92:0d:cc:70:32:17:c3:86:be:73:a1:03:f4:3c: 40:18:f1:e8:6f:85:c8:46:5d:92:6b:e5:01:d7:87: 17:86:90:e5:3d:b2:7f:18:87:59:3c:e4:c9:e4:47: f6:27:7f:d7:e5:04:a1:aa:38:5b:51:0e:21:25:e3: fe:e9:2f:37:16:e7:f6:74:9f:16:05:e9:3d:29:32: c0:37:fb:55:e8:99:02:36:71:a8:04:df:9d:e6:11: b5:20:7f:f9:56:74:8e:95:f6:8b:c8:7d:18:f2:59: 43:33:4e:96:d1:25:ff:52:da:ab:ad:3a:64:6d:d4: f4:0b:8a:f7:fa:e7:d2:28:75:1d:7e:d2:f7:a7:ac: 60:ea:7f:63:82:09:c0:6d:df:15:04:4f:07:54:6f: 1f:c2:3f:a9:40:b4:02:61:1c:ab:c6:9a:2c:2d:fe: 53:65:7e:76:a2:23:f1:d0:99:e4:a7:26:43:dd:09: 86:cd:99:c4:e7:73:98:eb:1a:f4:70:a7:fc:ed:01: d7:93:f8:8c:f5:f7:56:1a:44:da:91:b5:08:0f:70: b0:fa:8f:66:b2:58:f2:21:78:05:5a:13:c1:de:08: ad:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:67:16:31:FC:C0:F7:B9:0B:42:BA:16:0A:2A:26:45:DB:F8:96:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a0:3d:de:3a:b8:c7:55:35:ad:96:9c:ab:4f:d0:ec:d3:68: d2:0c:e5:c8:84:41:ed:c9:6b:27:78:bd:4e:07:c7:24:c5:5e: d0:49:71:6d:ad:ed:8b:50:1a:d6:b4:6e:6d:e7:b7:f4:00:c3: e6:20:d2:8b:d4:f5:9b:35:34:98:82:a9:4d:5b:49:65:6a:cb: 6f:4a:ed:8b:45:52:4e:d9:9c:68:d3:06:3d:56:70:05:de:80: 07:fb:f4:92:f7:01:ac:85:d1:70:91:a7:2c:ee:88:43:b9:f8: f8:33:3b:bb:a1:1d:ca:cc:4a:e5:5d:7e:14:1b:30:02:21:15: 8a:d5:68:0c:0a:58:2e:0b:0d:87:25:ff:16:8d:72:b2:bd:bf: 2f:58:06:28:87:cf:29:a5:67:ab:ae:0d:71:9e:87:7c:27:56: a5:33:a2:a5:07:b2:23:e9:e6:96:33:ae:94:4f:3d:04:7c:a0: e0:4e:60:da:10:67:de:2c:68:2a:90:ea:7a:e0:32:c6:1b:5f: be:06:75:d2:68:77:51:ff:7b:ff:b7:0c:ef:0e:82:b8:8b:1d: a3:8c:e2:cd:9c:28:2f:b9:ff:32:b4:90:90:66:0e:76:13:d5: 30:d4:b2:6f:e4:dd:5b:ed:55:28:08:a9:07:62:7e:db:97:29: 60:fc:5a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXKAM8Wt3Vh6vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZWFhNTdhNTUtZGU5MC00OWRkLWE1ZGEtOTAyMjZmN2ZjYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsdoTjra0xH0QI4yT1354wIxSYdgKuyS0lTC yiGMkg3McDIXw4a+c6ED9DxAGPHob4XIRl2Sa+UB14cXhpDlPbJ/GIdZPOTJ5Ef2 J3/X5QShqjhbUQ4hJeP+6S83Fuf2dJ8WBek9KTLAN/tV6JkCNnGoBN+d5hG1IH/5 VnSOlfaLyH0Y8llDM06W0SX/UtqrrTpkbdT0C4r3+ufSKHUdftL3p6xg6n9jggnA bd8VBE8HVG8fwj+pQLQCYRyrxposLf5TZX52oiPx0JnkpyZD3QmGzZnE53OY6xr0 cKf87QHXk/iM9fdWGkTakbUID3Cw+o9msljyIXgFWhPB3gitqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtnFjH8wPe5C0K6FgoqJkXb+JavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvOGMxZDg1NjEtZTM3Ny0z OTRiLWFkNTItMmY1NDM5ODBkODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKgPd46uMdVNa2WnKtP0OzTaNIM5ciEQe3Jayd4vU4HxyTFXtBJcW2t 7YtQGta0bm3nt/QAw+Yg0ovU9Zs1NJiCqU1bSWVqy29K7YtFUk7ZnGjTBj1WcAXe gAf79JL3AayF0XCRpyzuiEO5+PgzO7uhHcrMSuVdfhQbMAIhFYrVaAwKWC4LDYcl /xaNcrK9vy9YBiiHzymlZ6uuDXGeh3wnVqUzoqUHsiPp5pYzrpRPPQR8oOBOYNoQ Z94saCqQ6nrgMsYbX74GddJod1H/e/+3DO8OgriLHaOM4s2cKC+5/zK0kJBmDnYT 1TDUsm/k3VvtVSgIqQdiftuXKWD8WrA= -----END CERTIFICATE-----Generated at Thu Apr 30 15:39:30 2026 by rpki-client