$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa File: 3831ba34-dfac-3ed1-9620-7655233ff882.roa (raw, json) Hash identifier: aLdkOzxGCwInJ2wPbZXtUuWEdSQEMpTHqYi0DajlyWI= Subject key identifier: CD:F9:AF:D8:6D:69:5B:E8:7C:74:66:A9:65:03:AB:E8:F8:57:56:34 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EA79477EE7E55E14A8B265300 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 55256 IP address blocks: 158.95.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:77:ee:7e:55:e1:4a:8b:26:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=588e4a76-997b-43d0-b314-160efcb21974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:95:ce:3c:3d:33:78:7d:97:f6:03:6a:e6: 3a:e4:a2:13:af:e3:09:24:65:be:34:aa:d1:2f:6c: 26:c1:23:ab:39:64:5c:e9:83:27:f1:bb:1d:1e:c4: db:25:9e:17:74:84:50:55:3d:aa:4e:b5:c6:eb:25: 69:f8:c1:a3:4e:f8:e8:dc:6b:c6:bd:b8:11:54:f3: a2:b5:b2:fc:56:38:e1:46:ec:3b:2c:de:7b:87:36: 33:d8:58:37:81:96:52:db:86:f9:b0:3d:0a:25:b2: 14:05:79:15:cd:bf:49:2b:bc:41:f4:c8:3e:9d:bd: d5:a8:d6:6f:3c:45:bf:a6:81:02:f1:9b:1d:85:0e: a2:36:27:45:60:d1:3c:9c:6f:3b:89:de:c6:d7:30: c7:85:da:34:4c:e0:97:af:18:80:df:59:ba:a8:58: 08:4b:6d:9c:36:34:8d:cd:db:f7:8e:54:b2:3e:66: 3e:80:db:96:0d:40:b4:75:2d:b9:94:17:23:2c:ae: 35:c7:fb:38:5c:4f:b7:4c:3b:14:cd:7e:0a:09:69: 86:5a:25:20:cd:6d:20:a9:d7:dc:12:50:98:6d:5c: 71:09:34:39:51:27:b4:ab:d3:fe:0a:a3:7a:50:bc: 73:c9:f5:2d:a6:0e:a4:80:7c:a6:3f:28:b0:e3:07: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F9:AF:D8:6D:69:5B:E8:7C:74:66:A9:65:03:AB:E8:F8:57:56:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:85:7b:f2:53:05:fb:05:ae:ab:11:0d:9b:7a:4e:38:e5:f7: 57:97:60:b2:69:ac:0b:e2:4b:73:46:66:be:1a:9f:64:fd:32: d3:04:8a:79:56:f6:c7:84:b5:c2:df:47:d7:75:97:8b:cb:e2: 4b:83:34:fc:46:17:80:a1:96:e6:0d:60:29:79:36:70:e4:61: e6:62:94:0a:61:ef:9e:b5:f6:3e:35:8f:e7:1b:ba:8b:fa:f9: f1:7a:c8:8d:10:4b:68:0d:d9:73:b1:ef:2b:2a:21:2b:4d:3b: b3:81:af:92:dc:6d:a7:2c:92:96:af:82:ad:c9:cf:91:96:ff: d7:1b:fa:cb:be:e2:e6:e4:dd:18:ba:38:27:95:d4:02:e4:b6: 3a:66:1f:ef:a6:5c:59:67:d6:cd:f5:5f:c0:98:b5:8e:79:b6: c1:90:da:c0:3d:32:7a:70:b7:5e:ec:6b:5e:f1:d2:2d:15:6f: d2:85:ba:26:90:61:9b:e3:af:de:65:22:fa:1c:c7:6c:54:59: 31:2e:aa:d2:ce:cd:f0:10:7e:e7:e6:0f:ae:41:93:5c:59:c5: a4:fe:c2:29:3b:86:71:19:90:d7:b7:18:ee:7d:c7:9f:49:21: 93:a2:3a:2d:cb:c7:8e:e0:c0:3e:bc:91:84:da:18:35:0d:24: c5:57:5a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlHfuflXhSosmUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTg4ZTRhNzYtOTk3Yi00M2QwLWIzMTQtMTYwZWZjYjIxOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0caVzjw9M3h9l/YDauY65KITr+MJJGW+NKrR L2wmwSOrOWRc6YMn8bsdHsTbJZ4XdIRQVT2qTrXG6yVp+MGjTvjo3GvGvbgRVPOi tbL8VjjhRuw7LN57hzYz2Fg3gZZS24b5sD0KJbIUBXkVzb9JK7xB9Mg+nb3VqNZv PEW/poEC8ZsdhQ6iNidFYNE8nG87id7G1zDHhdo0TOCXrxiA31m6qFgIS22cNjSN zdv3jlSyPmY+gNuWDUC0dS25lBcjLK41x/s4XE+3TDsUzX4KCWmGWiUgzW0gqdfc ElCYbVxxCTQ5USe0q9P+CqN6ULxzyfUtpg6kgHymPyiw4wcoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM35r9htaVvofHRmqWUDq+j4V1Y0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMzgzMWJhMzQtZGZhYy0z ZWQxLTk2MjAtNzY1NTIzM2ZmODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWFe/JTBfsFrqsRDZt6Tjjl91eXYLJprAviS3NGZr4an2T9MtMEinlW 9seEtcLfR9d1l4vL4kuDNPxGF4ChluYNYCl5NnDkYeZilAph75619j41j+cbuov6 +fF6yI0QS2gN2XOx7ysqIStNO7OBr5Lcbacskpavgq3Jz5GW/9cb+su+4ubk3Ri6 OCeV1ALktjpmH++mXFln1s31X8CYtY55tsGQ2sA9Mnpwt17sa17x0i0Vb9KFuiaQ YZvjr95lIvocx2xUWTEuqtLOzfAQfufmD65Bk1xZxaT+wik7hnEZkNe3GO59x59J IZOiOi3Lx47gwD68kYTaGDUNJMVXWks= -----END CERTIFICATE-----Generated at Wed Jul 29 07:04:33 2026 by rpki-client