$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa File: aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa (raw, json) Hash identifier: /sh2eVwyaXlFF1gxPDbDiAwhiFuWQAtQyrD+AP1BOM0= Subject key identifier: 6C:EB:8E:73:56:46:A5:16:42:83:82:CA:0B:BF:A8:8F:2D:15:54:C0 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584F2ABD0F093F8645D343697D80 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 23154 IP address blocks: 148.164.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:0f:09:3f:86:45:d3:43:69:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=3dfa2e55-7397-4b83-b88c-ac72b09067a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:52:c7:28:80:57:0a:99:68:83:38:f3:b0: 7a:87:16:fc:e2:a9:36:70:68:17:4f:ad:ba:45:ba: 92:98:7e:94:11:d7:ff:cc:e8:e5:5c:be:c0:cb:54: 91:15:20:80:7f:9e:4c:41:04:2e:41:94:a4:0f:8c: 2a:7e:00:5c:28:34:cd:92:7e:2d:ae:83:f4:43:ce: d5:83:e1:d3:3b:75:52:a2:77:9c:c6:49:09:49:db: 8e:80:90:24:79:51:71:97:7b:82:c9:6f:5a:d8:a1: 0c:de:bf:4a:76:7d:c9:74:25:0e:68:40:c7:0f:c1: f9:86:ca:f5:fa:96:25:72:3f:9a:d7:04:c7:85:54: 7b:de:a2:43:0e:61:ed:b9:8a:83:8a:9c:5b:ab:df: 65:73:1c:4e:87:39:a2:14:bd:49:3e:98:7f:0f:c9: 17:fc:7f:5e:9d:5b:d0:67:e3:c7:ab:3e:fe:48:8b: 95:c8:d9:b2:2b:08:b9:41:25:d3:b7:35:96:0d:64: ce:25:46:45:9a:1c:53:ea:dd:06:e9:bc:e0:f1:6b: 5c:3d:d6:d0:55:b0:b2:df:4f:1b:de:fb:74:9a:a8: e3:98:15:ca:a7:17:9c:d0:67:2e:ac:57:06:f9:16: b9:4f:7b:e5:3d:00:98:d9:43:f4:ba:20:88:4e:f3: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EB:8E:73:56:46:A5:16:42:83:82:CA:0B:BF:A8:8F:2D:15:54:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8f:2e:d2:dd:75:1e:49:da:f2:72:01:17:ca:8a:64:f0:78: 45:1b:6c:5a:9d:6e:ca:5e:db:d3:a3:3d:f7:f5:d6:a3:1b:fa: f5:5b:83:d3:a8:18:8d:2d:0d:81:09:87:44:0e:88:1e:8c:f4: 3f:dd:ab:e1:76:5d:c2:b9:27:59:b4:bf:72:4b:be:ce:18:a6: 60:9d:95:94:97:09:71:c1:3f:3f:10:85:14:08:94:03:90:09: 1b:bd:56:c2:b1:de:35:72:e5:d4:41:2f:a2:25:b8:29:ef:a7: 5e:9f:ad:5c:ad:e7:30:e4:f9:c7:20:ce:c6:cb:43:d1:44:4f: 1a:38:76:4b:e5:9e:0d:71:6b:68:31:2d:40:00:ac:a0:17:ad: 4e:69:17:d1:e2:91:76:5c:bb:05:b3:e7:af:08:33:ff:f9:84: 1e:ae:f8:a6:62:eb:a6:c7:41:84:c5:1b:03:97:15:f7:9d:ff: ad:03:1c:bb:4f:99:6a:cb:17:2b:ba:0b:95:76:ae:5f:28:c4: e6:d8:ae:11:50:8c:ff:7b:04:8b:24:63:f2:1a:fa:60:ce:ef: 1f:af:77:5a:0e:23:4b:21:3b:f6:3e:26:bc:ae:77:43:6d:b9: 0b:bb:43:cd:86:bd:4d:b0:97:e5:88:ce:9d:6d:87:e1:ef:73: bd:b3:10:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQ8JP4ZF00NpfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk M2RmYTJlNTUtNzM5Ny00YjgzLWI4OGMtYWM3MmIwOTA2N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo99SxyiAVwqZaIM487B6hxb84qk2cGgXT626 RbqSmH6UEdf/zOjlXL7Ay1SRFSCAf55MQQQuQZSkD4wqfgBcKDTNkn4troP0Q87V g+HTO3VSonecxkkJSduOgJAkeVFxl3uCyW9a2KEM3r9Kdn3JdCUOaEDHD8H5hsr1 +pYlcj+a1wTHhVR73qJDDmHtuYqDipxbq99lcxxOhzmiFL1JPph/D8kX/H9enVvQ Z+PHqz7+SIuVyNmyKwi5QSXTtzWWDWTOJUZFmhxT6t0G6bzg8WtcPdbQVbCy308b 3vt0mqjjmBXKpxec0GcurFcG+Ra5T3vlPQCY2UP0uiCITvNFJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzrjnNWRqUWQoOCygu/qI8tFVTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYWFkYzJjNDgtMWI2OC0z YzNkLTgzY2EtYjg3ODRlMWRmOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmPLtLddR5J2vJyARfKimTweEUbbFqdbspe29OjPff11qMb+vVbg9Oo GI0tDYEJh0QOiB6M9D/dq+F2XcK5J1m0v3JLvs4YpmCdlZSXCXHBPz8QhRQIlAOQ CRu9VsKx3jVy5dRBL6IluCnvp16frVyt5zDk+ccgzsbLQ9FETxo4dkvlng1xa2gx LUAArKAXrU5pF9HikXZcuwWz568IM//5hB6u+KZi66bHQYTFGwOXFfed/60DHLtP mWrLFyu6C5V2rl8oxObYrhFQjP97BIskY/Ia+mDO7x+vd1oOI0shO/Y+Jryud0Nt uQu7Q82GvU2wl+WIzp1th+Hvc72zELE= -----END CERTIFICATE-----Generated at Sat Sep 19 07:38:07 2026 by rpki-client