$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa File: f43e8308-d375-3574-bde0-f0f8e725d68c.roa (raw, json) Hash identifier: 02dDFS6SX1xjlZ8aOEV70f8tQ1nBbxX0b6gIco+nbkY= Subject key identifier: 2E:AB:78:09:7B:8B:92:47:E8:93:AB:D3:3D:CD:E0:ED:64:1F:41:80 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584F2ABD12D75E14C04B599D4740 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 23154 IP address blocks: 148.164.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:12:d7:5e:14:c0:4b:59:9d:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=f9ddbbe3-67f1-4a4a-8de7-f0d28e030ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d4:87:5a:80:c6:06:d7:de:75:ec:08:6b:53: 0b:b6:c2:0d:09:2f:d7:2e:62:2b:56:46:7a:fa:68: 2f:c5:0b:2e:d1:6e:e7:f1:e9:0a:25:5b:6d:83:13: 65:70:1d:9a:04:41:88:93:19:19:41:15:46:80:da: 20:6b:d8:b1:de:25:14:ba:f7:a7:a9:07:8b:de:82: 9c:6c:20:6e:cb:30:a3:71:b4:4a:12:9a:be:e1:3c: 0e:f7:d7:80:0d:5e:41:69:cf:63:91:01:70:2e:4f: 20:1b:bc:a8:4a:0e:48:6f:4a:3b:4b:b7:9a:1a:4f: ba:32:93:37:60:ab:7c:ac:96:f8:f1:d2:d7:38:ed: 0f:46:85:92:78:ac:67:42:0f:62:ff:a1:38:c3:fc: 4f:97:a4:fb:12:1e:0a:c3:34:a4:ae:37:9b:73:5a: 04:b2:dc:f2:5c:39:95:c5:7d:f3:c7:db:d1:2b:9e: d6:6c:eb:35:07:b1:95:96:6a:4a:d9:5d:45:f7:95: 4a:a4:3a:a1:d0:a7:b1:1b:53:f2:9a:07:e7:47:84: 51:61:6d:ec:1f:3a:e4:e9:83:8a:d9:42:fd:b7:c4: 0e:43:c2:69:3d:8e:ab:99:03:15:4a:f7:88:87:e9: 32:b1:ec:bb:18:0d:f1:ad:2f:31:b2:86:02:cb:ea: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AB:78:09:7B:8B:92:47:E8:93:AB:D3:3D:CD:E0:ED:64:1F:41:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4b:cd:18:cc:4d:07:7a:63:3c:28:c7:82:f5:e7:b8:c6:66: 5b:ad:74:f8:bb:0f:35:14:df:cb:c3:1d:ca:e1:78:38:bd:3c: ac:21:5e:ca:8e:0b:da:b7:db:ef:91:b0:9a:c6:86:17:11:1b: 8c:cf:9f:8f:66:72:ec:a0:05:7d:dc:bd:80:2c:59:51:56:44: ec:b0:7d:d5:5d:6a:8d:3e:0c:88:43:3a:7e:43:29:a5:d3:58: a2:c1:a3:1a:3f:81:c9:02:17:ba:57:bb:d1:68:1d:18:3c:e4: a5:a4:b4:04:aa:6a:af:cf:09:be:b6:16:91:51:24:88:0d:f3: 75:94:cd:2d:bf:1a:e6:38:1c:ea:db:b0:10:3f:36:0a:29:37: c0:41:03:44:61:68:ec:15:0f:b6:d9:8d:2d:88:45:c3:bc:46: 7f:ad:d2:25:e8:3b:2e:67:ad:a0:16:98:4b:92:f1:bc:b6:29: 30:60:e0:f4:04:e5:61:3e:3e:ce:64:35:a3:60:18:7a:25:5c: be:21:49:2f:13:c6:26:e8:8c:fa:a3:1d:e6:b9:2c:b9:6f:e4: 4a:1c:63:d3:84:9f:87:80:e4:05:fb:f1:7f:ce:05:1d:e7:76: 2f:a9:1b:d0:00:eb:86:69:c1:e0:4a:7f:c0:71:8c:8c:72:46: be:ba:73:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRLXXhTAS1mdR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZjlkZGJiZTMtNjdmMS00YTRhLThkZTctZjBkMjhlMDMwZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9SHWoDGBtfedewIa1MLtsINCS/XLmIrVkZ6 +mgvxQsu0W7n8ekKJVttgxNlcB2aBEGIkxkZQRVGgNoga9ix3iUUuvenqQeL3oKc bCBuyzCjcbRKEpq+4TwO99eADV5Bac9jkQFwLk8gG7yoSg5Ib0o7S7eaGk+6MpM3 YKt8rJb48dLXOO0PRoWSeKxnQg9i/6E4w/xPl6T7Eh4KwzSkrjebc1oEstzyXDmV xX3zx9vRK57WbOs1B7GVlmpK2V1F95VKpDqh0KexG1PymgfnR4RRYW3sHzrk6YOK 2UL9t8QOQ8JpPY6rmQMVSveIh+kysey7GA3xrS8xsoYCy+q5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6reAl7i5JH6JOr0z3N4O1kH0GAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvZjQzZTgzMDgtZDM3NS0z NTc0LWJkZTAtZjBmOGU3MjVkNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBLzRjMTQd6Yzwox4L157jGZlutdPi7DzUU38vDHcrheDi9PKwhXsqO C9q32++RsJrGhhcRG4zPn49mcuygBX3cvYAsWVFWROywfdVdao0+DIhDOn5DKaXT WKLBoxo/gckCF7pXu9FoHRg85KWktASqaq/PCb62FpFRJIgN83WUzS2/GuY4HOrb sBA/NgopN8BBA0RhaOwVD7bZjS2IRcO8Rn+t0iXoOy5nraAWmEuS8by2KTBg4PQE 5WE+Ps5kNaNgGHolXL4hSS8TxibojPqjHea5LLlv5EocY9OEn4eA5AX78X/OBR3n di+pG9AA64ZpweBKf8BxjIxyRr66c3s= -----END CERTIFICATE-----Generated at Sat Sep 19 07:39:17 2026 by rpki-client