$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3bd71bd7-72fa-3d47-bf7f-0e580c7fb72b.roa File: 3bd71bd7-72fa-3d47-bf7f-0e580c7fb72b.roa (raw, json) Hash identifier: 5XKEziWFlt9jpkFvX1qCanPfqxe781rWELHxgAVgDyU= Subject key identifier: C5:77:EA:6A:40:10:54:33:71:82:D0:DA:26:AC:83:80:C6:31:AE:F9 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EA799CD12D207ACF662C35C80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3bd71bd7-72fa-3d47-bf7f-0e580c7fb72b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 55256 IP address blocks: 158.95.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:cd:12:d2:07:ac:f6:62:c3:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=23347ea5-f805-4692-9e7b-28cdf9ec613e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:ae:f0:07:97:e6:2f:89:be:2a:69:81:43: 57:dd:6e:37:5a:b4:9e:01:b1:8a:b2:85:d5:ee:15: 62:f5:63:de:03:79:a0:c0:40:d8:0e:eb:a5:ea:47: a6:75:92:2d:fe:eb:64:9a:69:39:28:7f:3c:c6:fc: 0e:54:96:13:17:e3:c6:08:2c:64:44:a2:76:5a:8e: 38:d6:25:4b:c8:b3:b5:0d:24:fa:23:da:25:45:3d: c7:62:6a:ee:c7:fd:da:52:b1:71:25:78:43:9b:af: c2:c9:30:3e:36:8b:ff:c6:bc:b6:87:3e:9a:df:76: 95:e2:74:47:76:b7:b8:06:54:d1:38:26:d9:2b:7a: 81:ba:e9:58:04:ee:9e:36:3d:59:ff:12:00:e3:3f: 5e:9c:e3:34:2f:24:94:01:ad:17:2c:2b:be:8e:a8: fa:00:8e:7a:b7:3f:83:56:74:13:f0:fc:e6:66:06: 24:68:d4:9c:7e:f1:07:f0:48:d5:a1:39:a5:31:fe: c5:09:3b:40:24:42:06:65:1a:39:bb:17:5f:6e:4e: 41:42:95:c7:c7:9b:1a:fb:cf:f7:81:ef:c4:96:cf: 5c:2a:ee:e3:15:01:bd:90:35:ab:46:a1:58:42:f1: fb:f4:6d:29:b9:6c:05:06:69:01:82:a2:ab:94:59: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:77:EA:6A:40:10:54:33:71:82:D0:DA:26:AC:83:80:C6:31:AE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3bd71bd7-72fa-3d47-bf7f-0e580c7fb72b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:43:8e:a6:0b:7d:72:80:6c:fc:ea:f5:0d:f4:c8:cf:66:ad: 6d:e5:99:03:ed:3b:5a:c6:eb:62:c3:65:5b:8d:27:d5:39:f1: ed:67:96:81:94:7b:ad:39:22:9d:c7:24:de:73:ed:31:80:c8: f9:f8:8f:f9:59:de:bb:f9:7a:39:5f:75:74:fd:bd:3b:f9:fc: 7e:66:d9:c9:ce:93:21:a8:fd:c1:1c:0e:42:f7:53:7e:5a:94: 0f:58:34:da:99:5c:9c:2a:dc:a3:5c:af:85:81:ec:0b:bd:89: 85:73:68:37:f1:3f:93:df:2b:a0:4e:89:a6:c0:f8:3f:ef:97: 09:d8:0c:95:69:aa:43:7e:00:4d:b3:6f:2a:a0:94:4d:b0:e3: 32:fd:90:d8:d4:fb:c9:cd:18:57:c0:6b:c4:1e:5f:5f:bd:37: bd:53:28:5c:5c:87:63:f4:5b:be:16:e5:ad:16:7d:f7:8c:63: 7f:12:28:4f:43:10:f6:e7:6c:e0:92:55:55:ee:9a:20:ca:1c: 51:a9:1f:a4:03:7e:41:ec:11:13:0a:6e:a8:7d:fa:cc:9e:17: b3:7d:e7:0c:53:77:ce:e8:1b:b8:f5:b9:8a:f3:53:9c:f4:66: 75:a9:01:d6:0f:56:4c:fa:78:a6:e4:ef:7b:61:c8:36:7c:65: b7:38:d5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmc0S0ges9mLDXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjMzNDdlYTUtZjgwNS00NjkyLTllN2ItMjhjZGY5ZWM2MTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp32u8AeX5i+JvippgUNX3W43WrSeAbGKsoXV 7hVi9WPeA3mgwEDYDuul6kemdZIt/utkmmk5KH88xvwOVJYTF+PGCCxkRKJ2Wo44 1iVLyLO1DST6I9olRT3HYmrux/3aUrFxJXhDm6/CyTA+Nov/xry2hz6a33aV4nRH dre4BlTROCbZK3qBuulYBO6eNj1Z/xIA4z9enOM0LySUAa0XLCu+jqj6AI56tz+D VnQT8PzmZgYkaNScfvEH8EjVoTmlMf7FCTtAJEIGZRo5uxdfbk5BQpXHx5sa+8/3 ge/Els9cKu7jFQG9kDWrRqFYQvH79G0puWwFBmkBgqKrlFljUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV36mpAEFQzcYLQ2iasg4DGMa75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvM2JkNzFiZDctNzJmYS0z ZDQ3LWJmN2YtMGU1ODBjN2ZiNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1DjqYLfXKAbPzq9Q30yM9mrW3lmQPtO1rG62LDZVuNJ9U58e1nloGU e605Ip3HJN5z7TGAyPn4j/lZ3rv5ejlfdXT9vTv5/H5m2cnOkyGo/cEcDkL3U35a lA9YNNqZXJwq3KNcr4WB7Au9iYVzaDfxP5PfK6BOiabA+D/vlwnYDJVpqkN+AE2z byqglE2w4zL9kNjU+8nNGFfAa8QeX1+9N71TKFxch2P0W74W5a0WffeMY38SKE9D EPbnbOCSVVXumiDKHFGpH6QDfkHsERMKbqh9+syeF7N95wxTd87oG7j1uYrzU5z0 ZnWpAdYPVkz6eKbk73thyDZ8Zbc41b8= -----END CERTIFICATE-----Generated at Wed Jul 29 08:11:01 2026 by rpki-client