$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa File: aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa (raw, json) Hash identifier: rK3BbB5VPyF/aIAenkpjl433m+tQ2Yp/nd/XO+vw4D8= Subject key identifier: A7:9C:4D:3B:2A:39:9A:8A:41:B9:2C:C6:1F:B4:E6:9B:E6:44:F2:97 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584CC7772FE827911FC313FF78C0 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa Signing time: Sat 07 Feb 2026 02:00:31 +0000 ROA not before: Sat 07 Feb 2026 02:00:31 +0000 ROA not after: Fri 08 May 2026 01:00:31 +0000 asID: 23154 IP address blocks: 148.164.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c7:77:2f:e8:27:91:1f:c3:13:ff:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Feb 7 02:00:31 2026 GMT Not After : May 8 01:00:31 2026 GMT Subject: CN=8faef7f4-fe9b-4fe9-9947-a165c681b90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:cd:a0:89:c4:70:9c:83:80:9d:ab:a3:13: 24:35:13:eb:ba:f3:1a:03:a0:c5:7a:69:f6:50:24: c3:ea:a1:6d:68:9b:3e:b6:72:29:20:a2:e9:9a:66: 14:db:46:25:de:40:69:d8:86:75:11:95:8d:af:52: ab:aa:e5:37:02:c5:f7:36:b0:cd:a7:e9:8e:4a:dc: 9d:85:0c:42:31:69:af:95:3c:64:2f:48:3a:e3:42: a5:f9:ec:3b:7d:f1:47:ed:67:ec:fa:01:55:30:b4: db:f7:32:d6:95:b7:57:27:41:7f:20:81:6d:60:4e: 82:70:7f:e9:eb:45:e7:c0:63:e8:23:69:4f:08:7e: 69:c9:bd:af:fa:6a:69:a2:83:75:74:29:0d:df:50: 13:e1:7e:3f:f5:a3:9f:fe:fe:ad:3c:53:be:db:f4: 7f:4c:48:8b:39:56:84:97:a6:50:78:ad:6c:88:98: a6:4a:0a:f9:4f:8c:c4:4c:a8:cb:80:c1:84:7a:0e: 6e:d8:ce:4f:12:71:eb:cf:22:a5:eb:31:fc:59:4a: 17:a8:d5:7b:03:6f:fd:7b:0d:bc:7e:e2:4d:55:ee: 70:57:11:c7:a6:84:81:61:52:e5:8b:70:67:56:ae: 00:5d:1d:59:28:3b:73:21:bd:5b:78:6f:68:82:bf: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9C:4D:3B:2A:39:9A:8A:41:B9:2C:C6:1F:B4:E6:9B:E6:44:F2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:80:4d:f9:1d:13:48:c9:51:73:0d:4f:30:33:b5:c9:12:9b: 06:47:e2:7a:02:23:13:12:6d:08:ab:74:f0:5b:ed:eb:24:80: b2:81:c1:c1:60:53:0d:8a:87:77:e1:65:47:5d:eb:21:bb:d9: 04:60:17:8f:87:ad:fd:ee:98:21:bc:37:02:ea:d5:2d:c5:51: b9:47:66:e7:f4:99:33:6d:b5:c7:cb:09:4e:25:7e:15:fc:2d: 24:63:31:f5:c0:59:87:d5:c0:d8:2d:7a:bf:9b:ec:88:ea:b8: 1f:6c:e4:a5:6e:bb:3c:90:f6:69:d8:e6:12:3d:bd:ff:58:d8: 1e:f9:14:26:6d:00:24:51:d7:6f:59:9e:8f:1e:9c:33:90:15: 54:01:37:2c:ee:80:87:bb:87:dd:a6:1a:99:de:ff:8f:18:ea: 95:6f:d6:1c:2e:f2:ab:e4:f2:e7:f3:5a:de:ec:8c:48:4e:d8: 03:be:ad:4b:3d:3a:79:aa:e8:cc:a5:3f:62:64:4c:da:09:fc: 62:dd:d2:78:52:c3:2b:7a:3f:84:5d:79:60:14:67:7d:d8:30: ca:8d:f8:03:55:4f:dd:63:01:d2:74:e5:c3:dc:73:46:64:ba: 29:e1:e3:ca:22:2e:3c:fb:08:95:3b:7a:52:44:fd:a3:7c:6f: 79:71:df:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHdy/oJ5EfwxP/eMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk OGZhZWY3ZjQtZmU5Yi00ZmU5LTk5NDctYTE2NWM2ODFiOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BLNoInEcJyDgJ2roxMkNRPruvMaA6DFemn2 UCTD6qFtaJs+tnIpIKLpmmYU20Yl3kBp2IZ1EZWNr1KrquU3AsX3NrDNp+mOStyd hQxCMWmvlTxkL0g640Kl+ew7ffFH7Wfs+gFVMLTb9zLWlbdXJ0F/IIFtYE6CcH/p 60XnwGPoI2lPCH5pyb2v+mppooN1dCkN31AT4X4/9aOf/v6tPFO+2/R/TEiLOVaE l6ZQeK1siJimSgr5T4zETKjLgMGEeg5u2M5PEnHrzyKl6zH8WUoXqNV7A2/9ew28 fuJNVe5wVxHHpoSBYVLli3BnVq4AXR1ZKDtzIb1beG9ogr9nEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKecTTsqOZqKQbksxh+05pvmRPKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYWFkYzJjNDgtMWI2OC0z YzNkLTgzY2EtYjg3ODRlMWRmOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImATfkdE0jJUXMNTzAztckSmwZH4noCIxMSbQirdPBb7eskgLKBwcFg Uw2Kh3fhZUdd6yG72QRgF4+Hrf3umCG8NwLq1S3FUblHZuf0mTNttcfLCU4lfhX8 LSRjMfXAWYfVwNgter+b7IjquB9s5KVuuzyQ9mnY5hI9vf9Y2B75FCZtACRR129Z no8enDOQFVQBNyzugIe7h92mGpne/48Y6pVv1hwu8qvk8ufzWt7sjEhO2AO+rUs9 Onmq6MylP2JkTNoJ/GLd0nhSwyt6P4RdeWAUZ33YMMqN+ANVT91jAdJ05cPcc0Zk uinh48oiLjz7CJU7elJE/aN8b3lx32M= -----END CERTIFICATE-----Generated at Mon Feb 23 18:40:18 2026 by rpki-client