$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5be855a8-c52a-309e-b854-057524635349.roa File: 5be855a8-c52a-309e-b854-057524635349.roa (raw, json) Hash identifier: tZfRYWGQicBEvept/7GHhTvgiVSRzjUEmUd3xDYHkv8= Subject key identifier: 00:2F:62:6F:39:27:6F:1A:DA:CA:37:FA:F9:2A:8A:BA:20:BB:D4:A1 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD93E2D10CD3A546EDCB0400 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5be855a8-c52a-309e-b854-057524635349.roa Signing time: Wed 29 Oct 2025 02:40:31 +0000 ROA not before: Wed 29 Oct 2025 02:40:31 +0000 ROA not after: Tue 27 Jan 2026 03:40:31 +0000 asID: 55256 IP address blocks: 158.95.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:93:e2:d1:0c:d3:a5:46:ed:cb:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:40:31 2025 GMT Not After : Jan 27 03:40:31 2026 GMT Subject: CN=7685fad7-ef3b-41af-b70e-3fae14e142ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:95:36:b3:64:cd:6e:07:cd:b4:78:a3:68: b5:73:d8:36:22:e4:ef:83:76:85:18:13:ae:70:18: 07:a3:02:94:bd:5f:64:7d:59:90:77:cd:5e:26:32: d2:2c:bc:6b:6a:ba:e1:3f:fe:23:01:96:a7:d2:b2: b8:8c:fe:ca:0c:e4:0c:38:40:f2:20:60:21:fa:13: 92:0a:a4:ea:a0:ae:45:49:5f:6d:e2:53:9e:df:92: 2b:10:b6:c1:b1:d8:38:5a:31:46:45:d9:43:a9:ca: 37:1b:bb:c6:5b:25:e6:b1:f9:9b:20:44:37:6e:9e: fd:46:78:1b:79:f5:9f:ae:72:f8:04:62:d4:fb:77: ec:d1:64:ea:b2:3a:f6:ae:e4:66:2f:92:69:19:f5: 04:44:8f:43:5a:67:1e:a2:a8:bd:92:66:f4:fa:56: 57:de:2e:67:95:75:55:84:29:34:0c:52:83:69:0b: 21:a8:9d:68:02:69:fe:58:7c:64:86:90:6b:f1:92: 7a:dd:ab:8c:60:ee:ed:07:31:e2:20:de:52:a8:2c: f5:88:d5:2f:7c:c1:c4:6d:0d:b2:8e:bc:66:da:09: 9c:f8:09:8e:42:e5:2d:78:8c:5f:ca:a0:12:46:7b: c9:93:ac:4a:04:95:7a:ae:46:05:8c:09:1e:97:61: 0a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2F:62:6F:39:27:6F:1A:DA:CA:37:FA:F9:2A:8A:BA:20:BB:D4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5be855a8-c52a-309e-b854-057524635349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7c:d8:07:5a:c1:59:17:6d:d9:d4:aa:19:b7:18:2d:f4:a1: 99:21:b1:3f:67:b6:55:79:c1:00:6a:e9:09:16:15:4c:35:58: 06:c7:9c:2b:2b:ae:ad:bc:2b:68:2f:a3:95:86:8e:e0:31:08: 36:61:81:4b:f4:cd:b5:b4:42:eb:37:82:f2:d7:3c:76:c3:5f: 3f:68:85:ba:98:e3:16:80:84:29:ae:31:67:bb:08:6c:79:89: 45:f3:89:bf:1e:e9:7a:92:22:d6:56:15:95:5a:ca:79:f5:ba: c8:58:31:5c:af:90:d6:af:79:56:5c:a4:33:e1:31:2a:69:a2: 4f:33:3c:81:b9:f7:e7:32:f6:52:4b:b5:fa:8c:43:89:99:e0: 8c:2c:d5:97:9c:06:3f:85:a1:74:8c:a9:23:bd:ad:c0:18:c0: 90:7e:89:b1:18:96:e3:e6:e0:44:9b:7d:47:43:8f:b8:a0:fe: 97:42:90:66:0e:48:c6:b0:f0:1a:26:98:44:a9:7d:68:70:be: 72:f0:52:c8:6a:2b:8d:6c:ed:1a:54:48:b1:ca:40:37:ad:0c: fa:cf:23:64:c2:1b:c4:39:42:eb:38:3c:13:c4:0c:ee:c1:f4: 37:56:21:e1:03:6e:41:0d:1a:dc:8e:45:f3:bd:ed:c6:63:3a: 0a:1a:07:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutk+LRDNOlRu3LBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyNDAzMVoXDTI2MDEyNzAzNDAzMVowLzEtMCsGA1UEAxMk NzY4NWZhZDctZWYzYi00MWFmLWI3MGUtM2ZhZTE0ZTE0MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI2VNrNkzW4HzbR4o2i1c9g2IuTvg3aFGBOu cBgHowKUvV9kfVmQd81eJjLSLLxrarrhP/4jAZan0rK4jP7KDOQMOEDyIGAh+hOS CqTqoK5FSV9t4lOe35IrELbBsdg4WjFGRdlDqco3G7vGWyXmsfmbIEQ3bp79Rngb efWfrnL4BGLU+3fs0WTqsjr2ruRmL5JpGfUERI9DWmceoqi9kmb0+lZX3i5nlXVV hCk0DFKDaQshqJ1oAmn+WHxkhpBr8ZJ63auMYO7tBzHiIN5SqCz1iNUvfMHEbQ2y jrxm2gmc+AmOQuUteIxfyqASRnvJk6xKBJV6rkYFjAkel2EK1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAvYm85J28a2so3+vkqirogu9ShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvNWJlODU1YTgtYzUyYS0z MDllLWI4NTQtMDU3NTI0NjM1MzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ82AdawVkXbdnUqhm3GC30oZkhsT9ntlV5wQBq6QkWFUw1WAbHnCsr rq28K2gvo5WGjuAxCDZhgUv0zbW0Qus3gvLXPHbDXz9ohbqY4xaAhCmuMWe7CGx5 iUXzib8e6XqSItZWFZVaynn1ushYMVyvkNaveVZcpDPhMSppok8zPIG59+cy9lJL tfqMQ4mZ4Iws1ZecBj+FoXSMqSO9rcAYwJB+ibEYluPm4ESbfUdDj7ig/pdCkGYO SMaw8BommESpfWhwvnLwUshqK41s7RpUSLHKQDetDPrPI2TCG8Q5Qus4PBPEDO7B 9DdWIeEDbkENGtyORfO97cZjOgoaB3Q= -----END CERTIFICATE-----Generated at Wed Nov 5 09:25:01 2025 by rpki-client