$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/0253987d-a8c1-3341-bb5d-8983e720df64.roa File: 0253987d-a8c1-3341-bb5d-8983e720df64.roa (raw, json) Hash identifier: lysjY6k1ut0o49tK2WGb3Co/Gxi4rvfysb0LgGlCCtM= Subject key identifier: B9:62:3A:03:3E:8F:83:B3:9D:0C:A2:ED:71:22:51:FF:95:33:88:5F Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584E9D4A55BB84206E478AA48100 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/0253987d-a8c1-3341-bb5d-8983e720df64.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 55256 IP address blocks: 158.95.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:55:bb:84:20:6e:47:8a:a4:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=0625762a-eee5-4ed0-bf01-01f6116f4438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:0a:5c:59:01:89:99:9c:31:26:9d:15:a0: e8:4d:5d:b2:ec:df:db:f5:02:1b:57:c6:b7:73:16: 1b:4a:e6:e9:f3:51:50:83:fa:3c:71:d8:d8:c5:55: 36:6b:4c:e3:e1:68:7f:49:df:da:9a:bc:56:94:02: ed:d5:bc:9e:90:28:dc:ce:11:3b:f2:29:50:34:79: 40:c5:24:a1:52:ec:8e:bd:b3:67:08:e1:50:54:3b: d1:58:89:1d:ff:a4:37:db:66:47:4f:9c:aa:4d:b1: 79:7d:8f:f7:f8:90:a5:63:17:dc:65:93:ea:a2:10: 28:9c:e1:3c:f4:a0:70:59:56:88:39:35:cd:9b:d3: 7e:77:1d:ae:4e:72:ab:3b:92:5c:b3:2d:3a:06:79: c1:ca:bb:56:ff:ad:f5:97:04:9c:d8:01:62:75:fd: 31:c3:fa:e7:db:96:9f:10:75:a8:cc:05:08:1f:b8: 70:37:09:e0:eb:0d:5a:b1:83:66:a8:fb:88:9c:49: 7f:e4:8d:6c:60:13:ff:e4:24:9e:91:8b:9d:fc:d0: 84:90:7f:8a:cb:42:08:75:89:22:93:2d:53:f2:39: c6:e0:4f:76:d2:1d:1e:7b:c2:bf:bf:dc:6f:d7:86: 7f:2d:15:ac:80:b7:f2:e1:7e:0d:46:6e:ca:22:fa: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:3A:03:3E:8F:83:B3:9D:0C:A2:ED:71:22:51:FF:95:33:88:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/0253987d-a8c1-3341-bb5d-8983e720df64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:44:14:43:35:ef:27:c9:d4:12:cc:a1:5f:ae:9e:f3:16:52: ca:54:09:f3:44:fa:56:b7:1f:d7:a8:23:2b:fc:bb:62:a8:0f: 7b:29:56:9a:5f:b1:15:87:5d:b3:da:fa:dd:6a:45:f8:05:18: c6:6f:66:4b:2a:9c:4a:65:bf:08:14:5a:c9:60:b1:65:ec:03: bb:4d:0c:90:cd:a6:f6:b0:48:3f:8d:7e:3c:5f:c5:d8:ff:c1: bc:e0:57:e1:39:83:52:17:66:57:26:0e:75:ba:a1:dd:66:6a: 9f:ba:ee:83:22:cb:41:e2:c9:21:bb:1d:61:88:35:82:10:ce: 9c:97:fd:96:94:b7:77:15:ca:1b:73:ef:7c:2c:07:2f:9b:0a: b2:ef:b8:80:51:57:2c:c9:cc:ca:16:0f:2d:f3:91:77:b1:74: a1:da:02:6e:ed:8a:67:ab:eb:50:3e:b7:93:bf:aa:b2:7b:20: 56:b6:e8:af:37:0a:70:87:53:6a:c6:4b:c9:5f:55:ff:45:36: 3e:60:fc:6f:b0:11:fb:a5:26:b1:e0:41:41:7e:cb:1e:52:4c: 6a:0d:97:47:ab:d9:8c:35:81:cf:51:fc:69:5e:ea:1b:79:2c: f5:4c:ac:24:6b:cc:ec:76:42:c5:c6:79:cc:8d:c7:cc:e9:e1: de:48:a3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSlW7hCBuR4qkgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MDYyNTc2MmEtZWVlNS00ZWQwLWJmMDEtMDFmNjExNmY0NDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTsKXFkBiZmcMSadFaDoTV2y7N/b9QIbV8a3 cxYbSubp81FQg/o8cdjYxVU2a0zj4Wh/Sd/amrxWlALt1byekCjczhE78ilQNHlA xSShUuyOvbNnCOFQVDvRWIkd/6Q322ZHT5yqTbF5fY/3+JClYxfcZZPqohAonOE8 9KBwWVaIOTXNm9N+dx2uTnKrO5Jcsy06BnnByrtW/631lwSc2AFidf0xw/rn25af EHWozAUIH7hwNwng6w1asYNmqPuInEl/5I1sYBP/5CSekYud/NCEkH+Ky0IIdYki ky1T8jnG4E920h0ee8K/v9xv14Z/LRWsgLfy4X4NRm7KIvoU3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLliOgM+j4OznQyi7XEiUf+VM4hfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMDI1Mzk4N2QtYThjMS0z MzQxLWJiNWQtODk4M2U3MjBkZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1EFEM17yfJ1BLMoV+unvMWUspUCfNE+la3H9eoIyv8u2KoD3spVppf sRWHXbPa+t1qRfgFGMZvZksqnEplvwgUWslgsWXsA7tNDJDNpvawSD+Nfjxfxdj/ wbzgV+E5g1IXZlcmDnW6od1map+67oMiy0HiySG7HWGINYIQzpyX/ZaUt3cVyhtz 73wsBy+bCrLvuIBRVyzJzMoWDy3zkXexdKHaAm7timer61A+t5O/qrJ7IFa26K83 CnCHU2rGS8lfVf9FNj5g/G+wEfulJrHgQUF+yx5STGoNl0er2Yw1gc9R/Gle6ht5 LPVMrCRrzOx2QsXGecyNx8zp4d5Io2k= -----END CERTIFICATE-----Generated at Wed Jul 29 11:18:26 2026 by rpki-client