$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa File: f43e8308-d375-3574-bde0-f0f8e725d68c.roa (raw, json) Hash identifier: OcS2z5zlud60CH3hjyPCJ3jPA85BFZpZfBnLSbXqfZE= Subject key identifier: 97:EA:71:FF:C9:45:85:95:E1:9B:15:31:4B:DB:0B:1F:FE:6E:DA:74 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584B0746B19B99F35A6AC1B52200 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 23154 IP address blocks: 148.164.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b1:9b:99:f3:5a:6a:c1:b5:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=3cfa572b-5490-4a69-9ba8-c228db81e712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:92:a1:c6:4d:d4:8f:28:d0:33:de:48:d8: a4:dc:d1:37:65:b6:f3:ec:64:6e:e8:40:94:92:72: 5d:27:52:2b:61:ad:74:e9:8b:4c:b8:35:fa:d5:63: 52:26:07:0c:cd:97:f2:3a:5e:c6:cf:02:1b:65:17: 82:50:b0:21:27:cb:78:cb:a5:b5:5d:47:81:60:77: 66:3b:40:3c:7d:7e:97:c9:e4:97:f7:eb:b9:62:62: b2:4a:52:19:78:4b:8a:36:14:fc:45:ac:79:b8:eb: 64:a1:a5:d8:60:47:a0:6d:4a:57:af:ea:46:97:c6: 8d:4a:b0:fd:a5:52:4f:45:52:59:1e:a2:88:11:59: cf:68:14:a3:7d:c4:6d:0a:b0:14:b3:7e:72:f0:54: f7:27:9d:dd:0a:cc:18:27:a6:44:9d:28:75:47:dd: 8e:2e:75:5a:2d:db:de:8a:51:d1:45:d2:ae:ff:87: 2a:d2:ee:49:c9:7f:80:10:ca:1f:a6:4a:ee:b3:19: 6f:db:79:6f:cb:08:13:50:eb:df:60:f8:85:55:c6: 28:fa:2f:2a:24:79:3a:97:a9:54:93:79:bf:61:dc: f6:98:f9:61:91:bd:4d:e0:6a:32:fd:0f:29:29:04: e6:d7:f7:5c:e1:77:68:89:75:d0:f0:69:bb:5a:7c: 1f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EA:71:FF:C9:45:85:95:E1:9B:15:31:4B:DB:0B:1F:FE:6E:DA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/f43e8308-d375-3574-bde0-f0f8e725d68c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:24:e9:46:92:3e:e2:66:9e:c6:3d:2f:8c:4c:51:b7:d3:7a: 70:e7:c2:86:81:33:63:db:cb:8d:bc:39:d3:ca:8a:e0:80:c4: e0:37:84:0e:d0:29:e7:70:1c:14:02:3d:ee:6f:b1:ed:36:5e: 9b:27:26:ee:4d:12:c0:11:eb:a8:66:4a:63:26:b1:5c:00:57: 71:d4:68:d2:c1:d7:06:83:54:ba:3d:ef:18:1b:cc:e1:ca:79: ff:cf:86:86:5e:10:dc:dc:bb:c1:83:ad:5a:d0:ca:37:89:33: 2a:52:e9:89:3b:93:fc:6b:b6:b9:da:b9:1d:47:da:2a:cf:94: 99:76:85:10:cb:61:bb:a4:07:c3:dd:33:4a:54:21:33:4e:1a: 93:98:36:c0:45:28:45:1f:71:1f:2f:f6:a6:d7:e9:78:9e:1f: 73:3a:2f:33:38:f0:f9:80:a4:88:72:13:03:3a:17:45:c5:ce: c3:2b:d2:a7:8a:91:f6:c8:2a:ad:8c:6c:23:36:38:54:94:e1: 25:e9:84:bd:c7:40:69:27:82:6f:db:55:31:5b:bd:73:9e:89: 9a:11:64:04:89:20:a5:47:d9:85:d0:7f:58:16:28:da:56:9f: 4a:2e:19:25:81:fb:bb:41:4d:96:e6:3a:39:5d:0d:70:65:f5: 5f:ed:7e:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrGbmfNaasG1IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk M2NmYTU3MmItNTQ5MC00YTY5LTliYTgtYzIyOGRiODFlNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1OSocZN1I8o0DPeSNik3NE3Zbbz7GRu6ECU knJdJ1IrYa106YtMuDX61WNSJgcMzZfyOl7GzwIbZReCULAhJ8t4y6W1XUeBYHdm O0A8fX6XyeSX9+u5YmKySlIZeEuKNhT8Rax5uOtkoaXYYEegbUpXr+pGl8aNSrD9 pVJPRVJZHqKIEVnPaBSjfcRtCrAUs35y8FT3J53dCswYJ6ZEnSh1R92OLnVaLdve ilHRRdKu/4cq0u5JyX+AEMofpkrusxlv23lvywgTUOvfYPiFVcYo+i8qJHk6l6lU k3m/Ydz2mPlhkb1N4Goy/Q8pKQTm1/dc4XdoiXXQ8Gm7WnwfzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfqcf/JRYWV4ZsVMUvbCx/+btp0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvZjQzZTgzMDgtZDM3NS0z NTc0LWJkZTAtZjBmOGU3MjVkNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQk6UaSPuJmnsY9L4xMUbfTenDnwoaBM2Pby428OdPKiuCAxOA3hA7Q KedwHBQCPe5vse02XpsnJu5NEsAR66hmSmMmsVwAV3HUaNLB1waDVLo97xgbzOHK ef/PhoZeENzcu8GDrVrQyjeJMypS6Yk7k/xrtrnauR1H2irPlJl2hRDLYbukB8Pd M0pUITNOGpOYNsBFKEUfcR8v9qbX6XieH3M6LzM48PmApIhyEwM6F0XFzsMr0qeK kfbIKq2MbCM2OFSU4SXphL3HQGkngm/bVTFbvXOeiZoRZASJIKVH2YXQf1gWKNpW n0ouGSWB+7tBTZbmOjldDXBl9V/tfqc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:59:14 2025 by rpki-client