$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa File: 890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa (raw, json) Hash identifier: CR+wtGuw4gCKnd+Rp1GdAnQ4+3/wcFRSMftVEM/Kn3g= Subject key identifier: 60:86:F0:42:DF:76:CD:3A:50:78:67:9A:13:A2:2A:BF:7A:AC:7E:35 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D6EDA5A389E859D1B735F1140 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 55256 IP address blocks: 158.95.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:5a:38:9e:85:9d:1b:73:5f:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=0635a4b3-b94e-466f-995b-28d84c87099c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:00:90:a1:5f:f4:ee:51:ea:5a:47:b2:00: 17:3c:19:8d:6d:10:51:d0:31:dc:d9:71:ca:fa:0f: 82:b9:a4:60:71:67:88:ae:47:b7:55:df:37:dc:8f: 70:3d:35:a2:4c:3d:3a:17:4b:d6:1b:53:b8:7c:7b: 4b:0c:64:78:db:a2:73:6f:1b:b7:df:21:30:18:96: 41:84:a2:5b:af:54:b7:bf:fe:9e:3e:4b:cd:f4:0b: b7:40:55:0f:a7:2b:12:11:06:92:8d:95:26:c4:68: ed:a9:8b:e8:ff:ff:79:38:51:64:4b:a3:ac:30:31: 92:9c:76:58:2f:46:e6:63:f1:eb:63:84:bf:ca:82: ed:a3:66:4a:2d:f8:94:ea:21:7b:0f:3e:25:fc:53: 8a:bb:ce:4d:79:47:70:15:63:68:15:23:25:47:3c: 40:75:64:1e:5b:2f:16:d0:01:8f:76:6c:df:33:44: f3:36:3e:b5:9e:15:c8:de:f3:30:8e:72:ac:74:63: 2b:19:a4:11:ee:09:b1:78:0f:c8:93:d0:e6:b7:a9: bc:73:79:89:d6:23:05:d0:fc:a7:d7:d0:c3:df:a0: 1f:34:12:28:3d:67:c2:03:6d:97:07:9b:22:6b:44: 26:9d:6e:b4:67:fc:87:cc:b2:8b:22:b3:4b:6e:64: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:86:F0:42:DF:76:CD:3A:50:78:67:9A:13:A2:2A:BF:7A:AC:7E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9c:e6:e4:a9:d9:1b:33:6b:f9:ad:31:ef:71:48:ed:b2:21: eb:ba:db:b4:e0:34:55:57:83:ef:83:34:0d:71:25:f4:94:8b: 9a:3d:45:a2:ac:f1:a7:07:ea:64:23:36:ad:74:57:f9:e3:44: 2c:6a:8e:b8:73:80:92:ab:e9:c3:fa:3f:8e:46:74:26:12:4a: 75:19:13:72:b5:b0:8e:71:16:ba:7c:da:ba:47:05:32:ca:53: ac:31:82:2a:97:fe:6f:79:44:3a:53:05:9c:d4:22:4e:c1:83: 2b:45:3f:67:ab:ef:5b:d8:df:25:fd:4a:6a:b5:3b:c7:7c:3c: 58:3b:91:0f:b3:1f:13:6a:2b:da:24:33:e8:ef:bf:cd:9f:fd: c8:2f:b5:e0:6e:e5:c1:86:72:7e:40:ca:cc:9e:45:8c:92:0b: e7:bb:3a:4a:d4:bf:b6:4d:a6:a8:3a:56:6e:01:b2:07:e2:24: 32:e0:a3:4f:02:e2:29:ad:db:5e:70:9a:9a:ad:4a:75:29:24: 32:86:d3:83:d1:a6:d3:4f:b5:6d:38:2d:fb:45:09:29:3e:0f: 55:35:f6:df:61:88:23:25:ba:6e:f5:1d:55:cf:a5:7b:d3:a1: be:49:b4:27:b0:da:a9:08:7e:68:e8:38:54:08:d8:4f:26:49: d9:68:5a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2lo4noWdG3NfEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MDYzNWE0YjMtYjk0ZS00NjZmLTk5NWItMjhkODRjODcwOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SwAkKFf9O5R6lpHsgAXPBmNbRBR0DHc2XHK +g+CuaRgcWeIrke3Vd833I9wPTWiTD06F0vWG1O4fHtLDGR426Jzbxu33yEwGJZB hKJbr1S3v/6ePkvN9Au3QFUPpysSEQaSjZUmxGjtqYvo//95OFFkS6OsMDGSnHZY L0bmY/HrY4S/yoLto2ZKLfiU6iF7Dz4l/FOKu85NeUdwFWNoFSMlRzxAdWQeWy8W 0AGPdmzfM0TzNj61nhXI3vMwjnKsdGMrGaQR7gmxeA/Ik9Dmt6m8c3mJ1iMF0Pyn 19DD36AfNBIoPWfCA22XB5sia0QmnW60Z/yHzLKLIrNLbmQYJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCG8ELfds06UHhnmhOiKr96rH41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvODkwYzVhOWYtY2M2My0z NzM1LTkyYjYtZDI5Yjc5YjlkNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmc5uSp2Rsza/mtMe9xSO2yIeu627TgNFVXg++DNA1xJfSUi5o9RaKs 8acH6mQjNq10V/njRCxqjrhzgJKr6cP6P45GdCYSSnUZE3K1sI5xFrp82rpHBTLK U6wxgiqX/m95RDpTBZzUIk7BgytFP2er71vY3yX9Smq1O8d8PFg7kQ+zHxNqK9ok M+jvv82f/cgvteBu5cGGcn5AysyeRYySC+e7OkrUv7ZNpqg6Vm4BsgfiJDLgo08C 4imt215wmpqtSnUpJDKG04PRptNPtW04LftFCSk+D1U19t9hiCMlum71HVXPpXvT ob5JtCew2qkIfmjoOFQI2E8mSdloWsc= -----END CERTIFICATE-----Generated at Fri Apr 17 08:04:47 2026 by rpki-client