$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa File: 28b78652-65be-3a04-bece-bb5ab7563b1e.roa (raw, json) Hash identifier: BI8U3y8+z0j1zdW7eiZnYpD6IhXinILhPreObhT5LBg= Subject key identifier: E8:87:70:AC:A9:FA:64:27:24:C0:B1:89:46:A1:63:A5:31:2E:19:51 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EA794F63E43D6A94CF87A3000 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 55256 IP address blocks: 158.95.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:f6:3e:43:d6:a9:4c:f8:7a:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=089ca988-bed6-4a85-b897-8f29f32bbff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:eb:cc:21:ec:41:ce:89:2b:5c:1e:a1:4b: a0:9c:b6:6e:98:1a:e4:7b:ba:bc:3c:0a:34:fe:b9: 07:30:b8:2a:8f:a0:18:86:32:63:78:f1:ff:04:13: e1:05:62:c0:1a:62:03:aa:b9:8e:6b:bb:ff:3e:c1: 48:a7:4d:ad:80:78:84:09:05:a4:ad:f1:28:3a:6f: d9:e3:f1:16:1e:06:14:c9:25:20:2f:c6:89:13:9d: 38:93:86:41:f5:d1:de:8c:ea:b7:e7:46:51:1f:74: da:cd:fb:57:19:d1:2c:4c:c9:23:b1:1e:7e:fc:c3: a3:51:70:3e:13:dd:ae:bb:dd:26:db:3c:7c:4d:91: e5:64:7f:9f:42:77:a6:e5:10:db:18:75:b3:fb:cf: c0:61:f4:68:ae:ba:ad:7e:17:9a:f5:70:b4:d2:3a: 49:82:ff:61:0b:6e:c5:46:1b:1c:c6:9f:d2:bc:d3: a4:9e:e3:27:fa:db:c6:09:4b:32:49:ca:82:28:9c: f2:77:bb:cf:12:85:1c:21:77:b3:81:ce:98:6c:12: 1c:f9:ed:ac:61:b5:77:a9:e6:ee:54:4b:6c:13:1d: 74:81:5e:d6:33:00:93:ab:92:b4:30:e3:05:33:95: 0f:9a:5a:60:47:4e:a9:d8:8b:bf:f1:76:52:8c:81: a6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:87:70:AC:A9:FA:64:27:24:C0:B1:89:46:A1:63:A5:31:2E:19:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:5e:a0:d1:6f:3f:07:ca:5c:67:a4:2d:0f:6f:c5:59:f4:ad: 6b:10:38:4e:b1:3b:54:7d:53:40:44:61:10:4c:72:0c:bc:f9: c0:ad:98:4d:81:c6:d8:71:dc:ae:4e:be:3d:2d:13:4f:dd:2d: 61:80:60:f9:79:56:9f:1c:e2:47:24:c0:88:1f:f9:34:bb:30: 68:4e:73:23:6b:48:b3:a2:cd:50:d5:14:7a:e7:c9:16:48:17: 08:59:41:af:53:b0:53:4c:f3:35:9b:97:cf:5b:27:df:c6:bf: fb:fe:15:89:a8:5b:58:e1:06:a0:19:f4:cc:6f:50:8f:19:0f: 66:ff:cc:af:b7:fd:4c:35:55:43:13:0c:21:cb:1c:39:35:74: e1:4c:41:f7:a8:bb:71:57:df:94:f9:bf:ae:9e:b3:e4:26:e7: 0f:c1:44:5f:d2:74:2d:cf:68:ab:23:79:6f:12:17:65:89:95: b4:fb:11:1e:06:7f:38:a5:9a:3e:80:3a:ce:0c:92:37:db:9e: e8:0c:6d:38:96:e4:89:67:5f:7e:67:9d:a2:39:c2:63:e2:b1: 06:41:d1:30:6d:7e:e5:b4:c9:55:44:fd:e8:9b:49:aa:ba:6f: 2b:97:2d:d4:44:0c:28:65:c9:dc:8b:17:c9:55:c5:04:6d:92: 6a:3b:11:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlPY+Q9apTPh6MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDg5Y2E5ODgtYmVkNi00YTg1LWI4OTctOGYyOWYzMmJiZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW7rzCHsQc6JK1weoUugnLZumBrke7q8PAo0 /rkHMLgqj6AYhjJjePH/BBPhBWLAGmIDqrmOa7v/PsFIp02tgHiECQWkrfEoOm/Z 4/EWHgYUySUgL8aJE504k4ZB9dHejOq350ZRH3TazftXGdEsTMkjsR5+/MOjUXA+ E92uu90m2zx8TZHlZH+fQnem5RDbGHWz+8/AYfRorrqtfhea9XC00jpJgv9hC27F Rhscxp/SvNOknuMn+tvGCUsyScqCKJzyd7vPEoUcIXezgc6YbBIc+e2sYbV3qebu VEtsEx10gV7WMwCTq5K0MOMFM5UPmlpgR06p2Iu/8XZSjIGmbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiHcKyp+mQnJMCxiUahY6UxLhlRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMjhiNzg2NTItNjViZS0z YTA0LWJlY2UtYmI1YWI3NTYzYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9eoNFvPwfKXGekLQ9vxVn0rWsQOE6xO1R9U0BEYRBMcgy8+cCtmE2B xthx3K5Ovj0tE0/dLWGAYPl5Vp8c4kckwIgf+TS7MGhOcyNrSLOizVDVFHrnyRZI FwhZQa9TsFNM8zWbl89bJ9/Gv/v+FYmoW1jhBqAZ9MxvUI8ZD2b/zK+3/Uw1VUMT DCHLHDk1dOFMQfeou3FX35T5v66es+Qm5w/BRF/SdC3PaKsjeW8SF2WJlbT7ER4G fzilmj6AOs4MkjfbnugMbTiW5IlnX35nnaI5wmPisQZB0TBtfuW0yVVE/eibSaq6 byuXLdREDChlydyLF8lVxQRtkmo7EUI= -----END CERTIFICATE-----Generated at Wed Jul 29 09:06:01 2026 by rpki-client