$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/b3fd9998-1320-396c-871f-60c0d57dc9a8.roa File: b3fd9998-1320-396c-871f-60c0d57dc9a8.roa (raw, json) Hash identifier: fX9gLBFJpAE0atQ8W9dyCATKJ5fUvRD3vpf0zs+meHI= Subject key identifier: 1D:B3:C1:A3:B6:98:24:EB:F1:76:61:65:BC:34:D7:18:8F:8F:1A:1F Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584DA81572B18648401689BD0400 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/b3fd9998-1320-396c-871f-60c0d57dc9a8.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 23154 IP address blocks: 148.164.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:72:b1:86:48:40:16:89:bd:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=7edf1d25-ac81-4de8-b421-e041061a9f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:45:96:e3:c3:c8:db:13:84:99:f2:f0:b6: d8:1e:78:ce:bc:6c:ce:48:54:d7:c5:5d:c7:d6:ee: a0:ec:fa:06:1e:35:43:60:52:0e:14:3b:ba:3a:ec: 46:ff:dd:a7:83:16:8d:14:b7:22:bc:1d:d1:42:d0: c5:c4:29:14:c9:64:89:ef:76:a8:f7:2f:bf:41:81: 31:45:31:2f:e0:c5:ce:1e:9c:74:38:5d:32:81:e6: 65:3c:2a:36:29:a6:3c:4e:8c:d1:c8:ba:f4:b6:b6: b0:da:47:c8:f1:34:7d:7b:8f:f0:a6:d4:db:4a:b8: c4:41:ec:37:a0:5c:85:04:f9:92:1d:15:e6:7a:1c: dc:76:5e:b5:6e:90:e4:2c:7b:6a:8d:45:71:cd:cc: 5d:0b:4c:09:d1:f1:70:1f:60:eb:23:f6:0c:7a:7d: 2b:43:11:bc:0c:2b:7c:73:d3:ce:d4:d9:ca:f7:89: 99:68:8b:52:01:39:7b:5a:0c:02:18:98:02:1d:ba: 87:09:bb:3d:5e:47:da:d3:26:e4:cc:31:3e:8e:77: 82:f4:40:d8:bb:d7:9c:98:ea:03:34:93:ff:dc:16: f0:6e:36:1e:65:8d:d4:06:8f:54:7b:12:b4:44:df: 85:1d:e0:c3:28:41:fe:d5:f4:99:5f:e3:a0:76:bc: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B3:C1:A3:B6:98:24:EB:F1:76:61:65:BC:34:D7:18:8F:8F:1A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/b3fd9998-1320-396c-871f-60c0d57dc9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2f:89:2f:0f:85:8e:65:e7:8d:ba:16:8c:04:39:e9:9e:ac: f8:22:67:0c:4e:c2:3b:3d:ac:5a:6d:b9:85:84:70:88:72:61: 62:78:e7:d6:fd:71:14:b7:ac:10:0b:86:8f:b9:13:9b:d7:11: 58:28:ce:d2:7b:cf:c4:56:b8:66:fc:29:86:87:e9:a5:12:62: 41:2b:9a:a7:83:a6:2a:6e:7f:03:00:1e:62:d9:c9:75:c7:11: 83:6f:cf:98:71:b0:f9:0d:8e:1f:67:58:23:29:da:75:3b:45: d9:5c:11:c1:1b:63:e5:bd:97:25:6a:18:9e:44:24:f7:68:a4: 40:6f:ad:2a:15:6f:10:f0:9b:9e:ac:6e:dd:6c:b3:60:27:96: fe:57:51:c1:21:82:d3:3e:c2:46:8d:cd:bc:2c:d1:fb:ec:16: c8:c3:da:7a:64:8d:e3:ba:d6:d6:3a:13:11:94:7e:27:30:51: 22:8a:d3:61:00:4f:32:8d:ec:0d:96:d2:82:6a:d8:21:d7:e1: 03:79:0b:12:45:5b:d0:a0:52:f9:4d:aa:92:4e:90:46:54:2c: 53:6c:1d:29:01:31:31:28:1b:62:fb:93:6d:5e:a1:14:f2:ca: 66:e3:42:70:90:b7:78:b8:e4:54:ed:48:44:c9:44:ac:a4:01: b2:e3:d4:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXKxhkhAFom9BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk N2VkZjFkMjUtYWM4MS00ZGU4LWI0MjEtZTA0MTA2MWE5ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlZFluPDyNsThJny8LbYHnjOvGzOSFTXxV3H 1u6g7PoGHjVDYFIOFDu6OuxG/92ngxaNFLcivB3RQtDFxCkUyWSJ73ao9y+/QYEx RTEv4MXOHpx0OF0ygeZlPCo2KaY8TozRyLr0traw2kfI8TR9e4/wptTbSrjEQew3 oFyFBPmSHRXmehzcdl61bpDkLHtqjUVxzcxdC0wJ0fFwH2DrI/YMen0rQxG8DCt8 c9PO1NnK94mZaItSATl7WgwCGJgCHbqHCbs9Xkfa0ybkzDE+jneC9EDYu9ecmOoD NJP/3BbwbjYeZY3UBo9UexK0RN+FHeDDKEH+1fSZX+OgdrzDowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2zwaO2mCTr8XZhZbw01xiPjxofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYjNmZDk5OTgtMTMyMC0z OTZjLTg3MWYtNjBjMGQ1N2RjOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKSOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUviS8PhY5l5426FowEOemerPgiZwxOwjs9rFptuYWEcIhyYWJ459b9 cRS3rBALho+5E5vXEVgoztJ7z8RWuGb8KYaH6aUSYkErmqeDpipufwMAHmLZyXXH EYNvz5hxsPkNjh9nWCMp2nU7RdlcEcEbY+W9lyVqGJ5EJPdopEBvrSoVbxDwm56s bt1ss2Anlv5XUcEhgtM+wkaNzbws0fvsFsjD2npkjeO61tY6ExGUficwUSKK02EA TzKN7A2W0oJq2CHX4QN5CxJFW9CgUvlNqpJOkEZULFNsHSkBMTEoG2L7k21eoRTy ymbjQnCQt3i45FTtSETJRKykAbLj1O4= -----END CERTIFICATE-----Generated at Thu Apr 30 15:39:40 2026 by rpki-client