$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa File: 8c1d8561-e377-394b-ad52-2f543980d885.roa (raw, json) Hash identifier: QRaLBhHmCXdSyC9Q+no36KhjXPQ5LjXnfmaM7tAfPM0= Subject key identifier: 68:5B:86:7B:58:D7:82:E3:34:3B:6E:C5:40:9B:26:15:4F:AC:B2:E5 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584F2ABD0F22B851B6936AAAE880 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 23154 IP address blocks: 148.164.48.0/23 maxlen: 23 148.164.48.0/24 maxlen: 24 148.164.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:0f:22:b8:51:b6:93:6a:aa:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=8f11416e-52ee-472a-b22d-3c0800074e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:ee:e2:56:86:c9:c9:94:37:5b:a8:12:ee: ea:ad:45:5a:d8:e1:80:f8:c6:14:cf:31:70:20:7a: 3c:ac:8f:13:d5:da:9c:c8:2f:0d:91:38:c9:e5:b9: 46:86:07:cd:26:2a:a2:51:36:ff:85:6e:68:28:46: 29:7b:0b:86:9b:70:02:c7:a3:9c:1c:76:ce:f2:f2: c2:01:6a:83:c9:fc:bd:db:a5:38:0c:e0:68:10:19: 36:f9:d3:5c:ae:24:f5:b4:f6:b1:db:ce:55:91:35: af:fa:b2:99:3c:da:83:40:69:3f:22:0b:1e:ce:de: 63:af:83:6a:dc:21:95:fc:93:ce:ca:e8:e9:cf:ec: 72:3b:45:20:5b:aa:89:bc:d7:d9:01:81:e5:da:54: 76:dc:65:ca:87:20:5d:ae:ba:b3:b3:6c:79:f3:e9: 6a:c8:07:af:31:60:ca:c4:3f:b1:82:a8:65:90:15: 2a:b7:ac:a8:48:f8:d9:93:69:b4:c2:8a:bf:e8:ea: cd:95:d6:fd:e3:9d:fc:7b:9e:d2:46:32:f9:cf:5b: a4:6a:3e:cd:52:c9:ad:75:57:16:23:1b:72:40:70: 4b:df:df:c0:6b:d4:34:70:dc:bb:6e:fd:95:a8:bf: 8a:57:bd:48:36:57:b4:27:14:01:8e:af:be:5b:d5: b7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5B:86:7B:58:D7:82:E3:34:3B:6E:C5:40:9B:26:15:4F:AC:B2:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c1d8561-e377-394b-ad52-2f543980d885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:27:f9:db:85:e7:05:00:52:a6:9f:a4:5c:f7:29:32:60:56: aa:25:d1:64:5f:c2:49:9e:97:50:9b:ea:58:04:29:e7:81:93: df:bc:02:c1:a8:a9:14:be:59:0c:25:71:f1:a9:b9:de:c4:36: 3a:31:69:30:3b:41:80:00:f0:c3:c5:88:f2:34:b1:43:c4:34: 44:f7:e7:7c:e3:de:91:69:4d:72:42:16:4e:64:d8:78:05:a7: 66:d2:fd:69:c4:85:02:ba:de:a3:49:4a:31:45:8c:0a:c8:a9: fa:a8:9c:df:7c:05:26:1e:36:06:3d:0b:49:d2:0e:59:da:d7: b3:4c:25:dd:fc:cf:26:0c:87:42:a3:fe:71:82:8e:d4:25:80: 43:bc:f3:aa:f1:98:0e:43:5c:a8:1c:0a:d0:9b:26:2d:3e:26: 00:4d:3e:68:51:e5:37:52:74:d3:27:d9:9b:e3:84:b5:f9:78: 27:7b:98:d7:97:52:1c:d4:f0:25:ce:c3:5b:40:da:7a:85:9d: 87:72:00:79:53:83:1c:4a:15:c4:ba:a3:d0:0c:67:a6:60:52: 43:e0:a6:d3:92:c9:4c:d6:46:26:03:31:04:da:02:50:d3:91: ba:37:18:23:c8:7e:27:dc:ed:08:7b:4e:f2:36:b0:34:51:d5: c3:12:e0:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQ8iuFG2k2qq6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk OGYxMTQxNmUtNTJlZS00NzJhLWIyMmQtM2MwODAwMDc0ZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhLu4laGycmUN1uoEu7qrUVa2OGA+MYUzzFw IHo8rI8T1dqcyC8NkTjJ5blGhgfNJiqiUTb/hW5oKEYpewuGm3ACx6OcHHbO8vLC AWqDyfy926U4DOBoEBk2+dNcriT1tPax285VkTWv+rKZPNqDQGk/Igsezt5jr4Nq 3CGV/JPOyujpz+xyO0UgW6qJvNfZAYHl2lR23GXKhyBdrrqzs2x58+lqyAevMWDK xD+xgqhlkBUqt6yoSPjZk2m0woq/6OrNldb94538e57SRjL5z1ukaj7NUsmtdVcW IxtyQHBL39/Aa9Q0cNy7bv2VqL+KV71INle0JxQBjq++W9W3YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhbhntY14LjNDtuxUCbJhVPrLLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvOGMxZDg1NjEtZTM3Ny0z OTRiLWFkNTItMmY1NDM5ODBkODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlKQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkn+duF5wUAUqafpFz3KTJgVqol0WRfwkmel1Cb6lgEKeeBk9+8AsGo qRS+WQwlcfGpud7ENjoxaTA7QYAA8MPFiPI0sUPENET353zj3pFpTXJCFk5k2HgF p2bS/WnEhQK63qNJSjFFjArIqfqonN98BSYeNgY9C0nSDlna17NMJd38zyYMh0Kj /nGCjtQlgEO886rxmA5DXKgcCtCbJi0+JgBNPmhR5TdSdNMn2ZvjhLX5eCd7mNeX UhzU8CXOw1tA2nqFnYdyAHlTgxxKFcS6o9AMZ6ZgUkPgptOSyUzWRiYDMQTaAlDT kbo3GCPIfifc7Qh7TvI2sDRR1cMS4CI= -----END CERTIFICATE-----Generated at Sat Sep 19 07:38:50 2026 by rpki-client