$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa File: 890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa (raw, json) Hash identifier: bmBx8ed+jzusvQZX0UISCqerK16MGb/MF3/xPbylbzQ= Subject key identifier: DB:56:35:1F:CA:8B:10:A1:4A:08:0F:AA:4B:0B:22:23:57:A0:57:53 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EF181FD14603107BEEBFDEE20 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 55256 IP address blocks: 158.95.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:81:fd:14:60:31:07:be:eb:fd:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=78008fc7-6fcc-4110-ad2f-5286a4dde9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:0d:3d:ec:52:37:07:32:e0:66:da:96:b6: b1:17:1a:a2:c7:8d:d3:34:77:32:20:5d:ea:e5:75: 66:4b:7f:aa:41:43:e5:27:47:5d:f0:86:b8:b4:3f: 20:96:22:d1:75:1e:a5:83:8f:74:f1:ed:c3:61:9a: a0:b8:e4:9c:65:c9:0e:17:52:90:9e:de:26:88:ed: 91:4f:f6:57:1a:c0:a2:da:ab:a4:bb:3d:25:f4:41: 03:a1:b6:5c:b0:5a:5b:5e:67:3f:d6:d3:cb:c0:c0: 3d:14:5c:f2:d7:1d:a9:1d:19:8e:7a:39:7d:fb:a9: 4b:6c:3e:69:55:6b:a1:92:2b:74:fe:07:74:89:23: a2:01:e8:bd:03:36:df:b8:0c:75:dc:63:75:e2:69: 31:4b:a3:a3:47:eb:9f:c5:8b:c2:69:32:02:4b:62: 86:40:fa:08:9e:77:0c:66:13:1d:3b:16:9e:da:e2: 65:e8:c6:e4:37:d8:23:35:a1:57:3e:67:0b:32:75: 50:34:15:61:d0:28:4c:89:77:f1:e6:63:ed:71:ce: 38:de:3b:da:64:55:97:66:82:57:62:17:03:72:be: d7:2e:49:a6:e1:ae:0c:48:76:02:1a:5b:dc:63:23: 9e:94:e2:83:64:05:5e:e5:46:fb:a4:d7:46:4f:f9: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:56:35:1F:CA:8B:10:A1:4A:08:0F:AA:4B:0B:22:23:57:A0:57:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:76:46:28:f2:46:21:75:b6:1a:b0:1f:51:4a:d8:4a:1c:65: 3d:ce:f0:b1:b1:5d:1a:79:17:08:8b:a3:13:d8:5d:69:62:8f: ed:6c:6b:79:2d:8a:95:dc:4f:70:7e:c6:9f:fc:b8:41:7c:28: 5b:98:41:37:2b:1b:d0:0f:37:e5:f6:cf:bb:86:1c:d5:de:96: aa:0f:35:03:7f:50:15:0e:2a:06:8c:05:a1:67:5d:13:b9:4b: 10:d3:4e:db:01:7b:cc:a5:c8:97:1a:87:49:d8:d5:1e:cd:57: a8:41:76:57:23:c3:64:cc:fe:cf:59:31:67:bb:f0:58:26:39: 61:04:61:2f:82:2f:76:85:01:64:56:98:a0:90:7a:21:79:85: c1:c9:9f:78:c6:58:07:4b:2b:66:e6:c0:24:1c:2f:d2:71:7e: 26:28:67:ae:fa:ef:f2:55:03:48:c3:fc:e2:0a:f5:c3:6d:f7: 5f:0c:11:78:fe:cc:15:57:80:9b:cc:0d:20:0f:a2:31:3b:42: 0e:f9:6c:69:12:fd:09:84:44:8a:83:ee:f5:21:2c:62:7c:ed: 1a:ea:1f:e3:f2:a0:ad:fb:a1:b6:01:40:16:d3:f4:28:e5:b3: a2:5a:e0:4c:f4:7f:a1:e4:52:12:7a:d5:45:7e:c9:b0:64:d1: e6:02:0f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgf0UYDEHvuv97iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NzgwMDhmYzctNmZjYy00MTEwLWFkMmYtNTI4NmE0ZGRlOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqccNPexSNwcy4GbalraxFxqix43TNHcyIF3q 5XVmS3+qQUPlJ0dd8Ia4tD8gliLRdR6lg4908e3DYZqguOScZckOF1KQnt4miO2R T/ZXGsCi2qukuz0l9EEDobZcsFpbXmc/1tPLwMA9FFzy1x2pHRmOejl9+6lLbD5p VWuhkit0/gd0iSOiAei9AzbfuAx13GN14mkxS6OjR+ufxYvCaTICS2KGQPoInncM ZhMdOxae2uJl6MbkN9gjNaFXPmcLMnVQNBVh0ChMiXfx5mPtcc443jvaZFWXZoJX YhcDcr7XLkmm4a4MSHYCGlvcYyOelOKDZAVe5Ub7pNdGT/niAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtWNR/KixChSggPqksLIiNXoFdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvODkwYzVhOWYtY2M2My0z NzM1LTkyYjYtZDI5Yjc5YjlkNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx2RijyRiF1thqwH1FK2EocZT3O8LGxXRp5FwiLoxPYXWlij+1sa3kt ipXcT3B+xp/8uEF8KFuYQTcrG9APN+X2z7uGHNXelqoPNQN/UBUOKgaMBaFnXRO5 SxDTTtsBe8ylyJcah0nY1R7NV6hBdlcjw2TM/s9ZMWe78FgmOWEEYS+CL3aFAWRW mKCQeiF5hcHJn3jGWAdLK2bmwCQcL9JxfiYoZ6767/JVA0jD/OIK9cNt918MEXj+ zBVXgJvMDSAPojE7Qg75bGkS/QmERIqD7vUhLGJ87RrqH+PyoK37obYBQBbT9Cjl s6Ja4Ez0f6HkUhJ61UV+ybBk0eYCD0k= -----END CERTIFICATE-----Generated at Tue Sep 22 17:19:35 2026 by rpki-client