$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5a71387b-6111-3135-b8b0-3451734e6a20.roa File: 5a71387b-6111-3135-b8b0-3451734e6a20.roa (raw, json) Hash identifier: H2YJeqnTHy+hM78B3leSSOQJDHliBzQOvPkFqyu3m/U= Subject key identifier: EE:BD:43:63:19:1C:4A:5C:33:74:79:0C:C0:0B:A3:70:CC:FA:62:38 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EA794E564C83A241615BE4B80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5a71387b-6111-3135-b8b0-3451734e6a20.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 55256 IP address blocks: 158.95.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:e5:64:c8:3a:24:16:15:be:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a6f2988a-441c-4da3-bc97-1c112c6422e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:41:cb:90:48:dd:9a:18:e0:cc:c1:6a:fb: 1c:87:96:2d:09:84:70:76:64:f4:f8:42:9b:ba:83: dd:bc:df:0b:4e:f0:3c:99:98:64:c2:0c:a1:f6:22: 75:39:53:4e:ac:1b:c6:bd:d6:32:81:85:86:0d:aa: bd:42:9c:d1:7c:2a:66:6e:87:db:7c:65:50:df:0c: 19:8a:74:f4:45:be:2d:da:b3:b4:fb:b2:64:d2:5f: 47:ab:f0:36:fb:74:9f:3f:0e:a9:15:2c:5c:72:5d: 91:42:3c:95:27:d4:24:dd:38:69:96:28:36:d6:76: 48:c6:b3:c1:3f:36:31:e7:b6:90:98:59:7a:99:23: 2b:69:5e:de:c2:a5:69:62:ec:db:71:64:44:d7:b0: df:64:c6:8b:57:d1:b0:33:8b:e3:a2:b7:8f:fc:a9: 33:11:c5:13:e4:19:c6:5c:70:29:2a:0f:b1:ea:04: 2e:2d:71:5a:41:5d:e6:22:9a:52:0e:40:56:9a:41: 4f:91:62:30:12:47:56:2c:e7:1c:ce:55:96:81:11: 31:25:7f:30:ef:40:92:1d:fc:b9:40:b7:88:8f:c4: 23:1f:11:90:29:d8:51:f6:3f:15:dd:5d:41:24:3d: 07:0b:8d:01:e6:5e:95:d7:ed:12:a2:2b:4f:4a:88: f1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BD:43:63:19:1C:4A:5C:33:74:79:0C:C0:0B:A3:70:CC:FA:62:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5a71387b-6111-3135-b8b0-3451734e6a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:46:4e:4f:86:a2:2c:7d:22:0f:4a:ac:35:50:80:2c:cd:b1: 7f:aa:20:9a:c0:b6:7d:7e:fd:de:7b:24:b7:6b:00:04:3b:54: 80:d4:9e:ec:b4:cd:16:c7:d2:a5:b4:c2:e4:73:fe:f3:77:f7: 8d:69:42:1b:5a:46:27:fb:67:17:54:ee:99:8d:65:d2:7b:03: 1c:e0:64:f8:40:f9:d6:4b:89:06:a5:37:ec:d7:b0:b8:a9:40: 17:88:8c:a0:53:75:c1:7d:5d:6d:80:28:3b:c1:7b:a3:32:a1: 56:f5:a0:45:70:4f:6e:60:9f:27:29:09:34:4b:0f:4b:93:b3: 53:0b:68:05:27:1a:af:82:9c:eb:25:d0:fa:fc:2a:b7:2f:09: c9:30:4c:1e:f0:1e:8a:4c:9c:bb:51:72:47:fb:3f:12:92:bd: cc:ec:b6:9c:49:31:d9:27:d4:1b:41:67:af:df:36:2b:8d:36: 1f:81:5b:cd:57:f3:a0:46:ae:42:93:bb:2d:96:c5:80:ea:f4: c3:5d:cd:b9:39:f9:cc:34:f1:78:82:5e:02:cc:0a:69:2e:49: 83:c2:42:56:6a:9d:e0:b6:d1:3e:3b:94:1d:1c:e8:d7:bf:99: 80:2b:b9:58:74:d8:63:29:7e:b5:90:d1:e9:e7:04:fb:5b:09: e0:36:e8:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlOVkyDokFhW+S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTZmMjk4OGEtNDQxYy00ZGEzLWJjOTctMWMxMTJjNjQyMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49xBy5BI3ZoY4MzBavsch5YtCYRwdmT0+EKb uoPdvN8LTvA8mZhkwgyh9iJ1OVNOrBvGvdYygYWGDaq9QpzRfCpmbofbfGVQ3wwZ inT0Rb4t2rO0+7Jk0l9Hq/A2+3SfPw6pFSxccl2RQjyVJ9Qk3Thplig21nZIxrPB PzYx57aQmFl6mSMraV7ewqVpYuzbcWRE17DfZMaLV9GwM4vjoreP/KkzEcUT5BnG XHApKg+x6gQuLXFaQV3mIppSDkBWmkFPkWIwEkdWLOcczlWWgRExJX8w70CSHfy5 QLeIj8QjHxGQKdhR9j8V3V1BJD0HC40B5l6V1+0SoitPSojxfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO69Q2MZHEpcM3R5DMALo3DM+mI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvNWE3MTM4N2ItNjExMS0z MTM1LWI4YjAtMzQ1MTczNGU2YTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJGTk+Goix9Ig9KrDVQgCzNsX+qIJrAtn1+/d57JLdrAAQ7VIDUnuy0 zRbH0qW0wuRz/vN3941pQhtaRif7ZxdU7pmNZdJ7AxzgZPhA+dZLiQalN+zXsLip QBeIjKBTdcF9XW2AKDvBe6MyoVb1oEVwT25gnycpCTRLD0uTs1MLaAUnGq+CnOsl 0Pr8KrcvCckwTB7wHopMnLtRckf7PxKSvczstpxJMdkn1BtBZ6/fNiuNNh+BW81X 86BGrkKTuy2WxYDq9MNdzbk5+cw08XiCXgLMCmkuSYPCQlZqneC20T47lB0c6Ne/ mYAruVh02GMpfrWQ0ennBPtbCeA26P0= -----END CERTIFICATE-----Generated at Wed Jul 29 09:11:54 2026 by rpki-client