$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/43ddee33-6e21-3aa8-9b1a-7d426e008e53.roa File: 43ddee33-6e21-3aa8-9b1a-7d426e008e53.roa (raw, json) Hash identifier: WlB+V8Oqz61egK65uwCYM1RAXk2inh0plDa2/jrfbso= Subject key identifier: FF:5B:2C:9D:76:A3:32:A1:49:79:1B:0A:C9:2B:0D:74:99:09:B3:E0 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584F331D2854C4322DF06BB39000 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/43ddee33-6e21-3aa8-9b1a-7d426e008e53.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 55256 IP address blocks: 158.95.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:28:54:c4:32:2d:f0:6b:b3:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=aef3f0b7-bf25-4b0c-9387-f37378c3de18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:50:42:c4:ff:fa:44:24:15:d7:5c:26:de: 66:39:10:bd:ae:cd:2b:1f:66:8f:b4:9b:97:15:37: 65:96:bc:49:51:20:d3:a0:5c:01:df:e3:d8:c2:cb: c8:4a:70:bd:52:c8:10:f9:d8:50:ec:69:76:a0:23: a7:fb:06:a5:ca:41:b0:ee:68:42:7e:b1:22:91:cd: 6d:e6:4b:03:df:67:3b:59:7b:8d:9b:c1:d1:a5:d5: b4:de:05:d3:c0:f6:27:bb:ff:14:3c:24:d2:ce:4b: 48:5b:d4:3a:8b:60:56:9e:85:a9:c0:1a:da:44:87: 54:f5:5c:2d:7a:da:5e:92:ca:87:6b:83:d0:0d:83: df:74:8a:9e:ba:46:0f:f3:29:46:b1:ce:28:41:ee: ab:ae:88:b3:4e:45:89:7f:06:8a:56:37:16:24:83: ba:dc:a3:8d:11:6d:65:b4:fb:db:74:24:8a:6b:58: e6:3e:e2:d0:7d:6f:89:43:99:0c:68:13:78:42:c4: 74:47:43:85:f8:4b:b0:18:b5:46:35:50:a1:1c:b0: 95:97:03:d1:58:54:6c:93:7e:d5:f6:b0:23:40:3f: eb:02:9a:1f:38:d2:61:72:1c:54:77:f3:63:78:23: ac:02:5b:8f:e3:88:3e:3b:25:06:05:63:9b:8b:ef: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5B:2C:9D:76:A3:32:A1:49:79:1B:0A:C9:2B:0D:74:99:09:B3:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/43ddee33-6e21-3aa8-9b1a-7d426e008e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8a:9f:67:4e:74:f1:a8:4b:88:e5:e3:30:a9:0c:79:a8:16: 8c:86:1b:11:6f:2b:8b:83:92:57:9e:e4:13:8b:28:22:98:cf: 7f:68:c0:ec:70:57:db:95:97:a0:fe:e3:c8:11:1d:b6:a1:51: 11:7c:be:22:ab:4f:29:75:e4:e9:a9:15:30:2e:64:9d:34:f0: 05:03:4c:11:b5:13:db:b6:4b:70:19:d4:2b:2e:01:b7:a3:7e: 29:be:8b:f3:65:a0:a2:64:1f:80:d8:d9:61:33:5d:1e:8a:dc: bd:a1:0e:57:78:b1:ac:20:84:67:7b:50:69:cb:9d:e5:13:a7: 57:27:a6:f1:6e:6c:29:83:96:5e:bb:6e:18:02:2e:56:7d:69: a0:a5:56:ca:4b:f0:eb:12:04:4f:68:93:e4:d5:76:67:9e:07: 59:eb:e0:fe:07:a4:17:ce:80:d6:3d:db:f8:bc:80:4c:42:af: 75:81:71:97:dc:98:b6:5c:e5:8d:e0:3b:f4:09:00:8c:eb:13: c8:dc:07:6c:c8:e8:fc:da:ad:d4:f9:91:c4:43:83:77:34:47: b0:c8:bf:0d:1d:de:9b:aa:be:65:ba:04:89:1f:ff:f0:b4:e0: cb:cb:cd:89:8c:8d:b6:82:f0:d4:02:5d:a3:41:d6:32:b8:ae: 81:54:5e:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHShUxDIt8GuzkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk YWVmM2YwYjctYmYyNS00YjBjLTkzODctZjM3Mzc4YzNkZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGFQQsT/+kQkFddcJt5mORC9rs0rH2aPtJuX FTdllrxJUSDToFwB3+PYwsvISnC9UsgQ+dhQ7Gl2oCOn+walykGw7mhCfrEikc1t 5ksD32c7WXuNm8HRpdW03gXTwPYnu/8UPCTSzktIW9Q6i2BWnoWpwBraRIdU9Vwt etpeksqHa4PQDYPfdIqeukYP8ylGsc4oQe6rroizTkWJfwaKVjcWJIO63KONEW1l tPvbdCSKa1jmPuLQfW+JQ5kMaBN4QsR0R0OF+EuwGLVGNVChHLCVlwPRWFRsk37V 9rAjQD/rApofONJhchxUd/NjeCOsAluP44g+OyUGBWObi++Z1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9bLJ12ozKhSXkbCskrDXSZCbPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvNDNkZGVlMzMtNmUyMS0z YWE4LTliMWEtN2Q0MjZlMDA4ZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOKn2dOdPGoS4jl4zCpDHmoFoyGGxFvK4uDklee5BOLKCKYz39owOxw V9uVl6D+48gRHbahURF8viKrTyl15OmpFTAuZJ008AUDTBG1E9u2S3AZ1CsuAbej fim+i/NloKJkH4DY2WEzXR6K3L2hDld4sawghGd7UGnLneUTp1cnpvFubCmDll67 bhgCLlZ9aaClVspL8OsSBE9ok+TVdmeeB1nr4P4HpBfOgNY92/i8gExCr3WBcZfc mLZc5Y3gO/QJAIzrE8jcB2zI6PzardT5kcRDg3c0R7DIvw0d3puqvmW6BIkf//C0 4MvLzYmMjbaC8NQCXaNB1jK4roFUXmw= -----END CERTIFICATE-----Generated at Tue Sep 22 09:21:29 2026 by rpki-client