$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/067cd237-8a7e-3b5d-b512-9e3b55010a5e.roa File: 067cd237-8a7e-3b5d-b512-9e3b55010a5e.roa (raw, json) Hash identifier: 9UJ3DwJIFx8zGeQOG6zYjXg2y57OJ7x4eBqF14N3bK0= Subject key identifier: FA:93:A2:75:F1:D3:26:44:1B:01:42:88:F9:81:72:C8:C5:6E:13:C5 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584F3FAD86DFA18D465D22967FA0 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/067cd237-8a7e-3b5d-b512-9e3b55010a5e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 55256 IP address blocks: 158.95.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:86:df:a1:8d:46:5d:22:96:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=2992e422-7709-4837-9384-b133feb46a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6c:91:a1:c5:ab:76:07:51:7a:b1:85:fc:01: 7f:89:b0:9a:53:73:6c:cc:db:cf:46:ec:d6:2b:d9: 7a:1f:91:70:27:cf:a0:ec:65:51:6b:64:3f:07:19: de:bd:45:cb:e3:81:25:84:41:d4:fc:32:95:ae:6a: f4:ea:d8:82:e5:5e:71:e8:3d:8b:d4:20:3a:74:56: 5e:f2:e7:f5:31:aa:e6:89:6f:f6:33:7c:74:81:64: 96:70:01:b0:59:ec:0e:bd:4d:73:c2:3e:03:47:1c: b3:85:89:54:8c:ad:1b:96:f5:e5:4e:f6:b8:08:9b: 77:6e:eb:6e:e2:de:b3:a5:0a:a5:c3:2b:e2:b1:97: b2:83:7c:94:e2:5b:a6:89:a6:42:0b:5c:f2:17:43: 98:12:89:02:47:38:36:b1:2e:44:a6:8f:9c:ee:9f: b9:1c:27:c9:77:55:b1:38:83:8a:0f:ff:26:b7:6b: 75:f2:79:c2:93:7b:91:c8:b0:9b:1a:73:7d:d2:cb: c2:f3:f9:53:51:22:b8:8e:7f:63:af:44:12:a9:33: ea:df:fb:52:15:0f:7f:c9:16:07:3e:37:a3:52:96: bc:d1:af:d9:50:bc:b6:56:d5:5f:33:f0:d8:a8:b0: 3e:10:98:43:d5:8c:e2:6d:e9:85:32:02:77:f1:cc: cc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:93:A2:75:F1:D3:26:44:1B:01:42:88:F9:81:72:C8:C5:6E:13:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/067cd237-8a7e-3b5d-b512-9e3b55010a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bc:38:5e:93:68:1d:03:a7:56:bb:68:65:e3:dd:8c:6c:38: 44:83:51:e7:bf:a6:79:d3:eb:d2:36:61:02:d3:e8:00:9e:cc: 1c:ad:04:54:28:ac:70:4e:78:04:f6:1e:c1:f8:05:f8:fc:99: a1:cc:09:7f:8c:d1:90:ac:e2:52:8d:24:85:d3:ad:fa:84:f5: 09:2c:82:bf:ef:6d:50:0a:21:a8:f5:39:c0:87:2e:e9:e3:40: e5:94:39:09:ec:98:ba:54:37:60:be:21:09:32:ba:db:31:a8: 11:8d:aa:3b:d4:40:1a:d5:84:0b:69:59:f2:9b:67:9f:52:e1: 79:88:aa:af:09:c7:d5:b3:05:e1:28:b3:fd:76:de:e9:24:7c: 7f:40:36:f8:f6:89:a9:19:a5:91:dc:8a:5c:f5:a5:d5:cd:54: 6c:97:d8:7c:a2:63:30:2e:39:39:93:95:71:3a:b6:61:cb:3d: 6b:6f:03:3d:4f:42:c1:ef:c5:13:35:95:f9:9c:7b:f1:71:fb: 89:38:3e:a2:f2:24:0b:31:fe:34:75:e9:eb:53:58:3d:50:5d: 37:74:79:9e:2d:80:f2:13:cb:7a:6b:05:48:33:cd:b7:52:22: 37:b4:2e:eb:9f:a6:00:d8:67:c6:e4:4b:8a:db:47:94:ad:cb: 05:42:d6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rYbfoY1GXSKWf6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk Mjk5MmU0MjItNzcwOS00ODM3LTkzODQtYjEzM2ZlYjQ2YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWyRocWrdgdRerGF/AF/ibCaU3NszNvPRuzW K9l6H5FwJ8+g7GVRa2Q/BxnevUXL44ElhEHU/DKVrmr06tiC5V5x6D2L1CA6dFZe 8uf1MarmiW/2M3x0gWSWcAGwWewOvU1zwj4DRxyzhYlUjK0blvXlTva4CJt3butu 4t6zpQqlwyvisZeyg3yU4lumiaZCC1zyF0OYEokCRzg2sS5Epo+c7p+5HCfJd1Wx OIOKD/8mt2t18nnCk3uRyLCbGnN90svC8/lTUSK4jn9jr0QSqTPq3/tSFQ9/yRYH PjejUpa80a/ZULy2VtVfM/DYqLA+EJhD1YzibemFMgJ38czM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqTonXx0yZEGwFCiPmBcsjFbhPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMDY3Y2QyMzctOGE3ZS0z YjVkLWI1MTItOWUzYjU1MDEwYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS8OF6TaB0Dp1a7aGXj3YxsOESDUee/pnnT69I2YQLT6ACezBytBFQo rHBOeAT2HsH4Bfj8maHMCX+M0ZCs4lKNJIXTrfqE9Qksgr/vbVAKIaj1OcCHLunj QOWUOQnsmLpUN2C+IQkyutsxqBGNqjvUQBrVhAtpWfKbZ59S4XmIqq8Jx9WzBeEo s/123ukkfH9ANvj2iakZpZHcilz1pdXNVGyX2HyiYzAuOTmTlXE6tmHLPWtvAz1P QsHvxRM1lfmce/Fx+4k4PqLyJAsx/jR16etTWD1QXTd0eZ4tgPITy3prBUgzzbdS Ije0LuufpgDYZ8bkS4rbR5StywVC1tA= -----END CERTIFICATE-----Generated at Tue Sep 22 00:17:57 2026 by rpki-client