$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a3e587fb-4a81-3abe-83d6-cac1f7a68007.roa File: a3e587fb-4a81-3abe-83d6-cac1f7a68007.roa (raw, json) Hash identifier: Dpz3z1QQeSuUCnAiQXf02Ce/rmCUNXMimXx8X1MYhs8= Subject key identifier: 66:E9:0C:53:4F:BC:DB:95:4D:C1:D3:69:69:5A:2C:E1:27:2C:AC:11 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584F3FAD2C4807FBBBBFB679F400 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a3e587fb-4a81-3abe-83d6-cac1f7a68007.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 55256 IP address blocks: 158.95.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:2c:48:07:fb:bb:bf:b6:79:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=500e3a27-d1e1-4ce0-8577-ef4e666858ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cb:c2:9d:29:df:13:88:95:13:07:b1:dc:f7: 0f:06:eb:5f:03:3e:9d:98:b5:55:4d:a1:1c:7b:fb: 9a:28:ff:08:c6:10:59:ae:62:ae:f8:54:79:bb:14: 80:56:61:d5:1b:ce:fa:50:d7:8c:29:a9:85:b3:09: 16:43:f3:b1:fe:da:74:d7:5f:c3:2f:86:96:76:fb: d2:3f:ad:ad:6f:36:a0:a4:25:3a:46:d2:e0:b7:42: ca:e5:a0:74:54:54:2b:43:b3:d9:84:6a:f9:b8:14: 30:22:da:88:d3:42:7a:21:9d:5b:59:eb:98:d4:02: 89:4f:7e:a7:c0:8c:12:ae:09:45:0a:e5:28:9a:c1: 3c:12:22:46:94:87:d4:c0:44:a7:b1:88:b2:20:7c: 09:30:b8:be:e4:6b:94:df:d6:90:6a:4c:f4:5f:6f: 76:24:8e:79:c4:d4:cf:b6:84:b4:6a:8c:10:3a:b0: 81:69:5f:ec:5d:af:4d:e2:92:8a:81:11:4f:ad:10: 5c:7c:53:67:42:05:83:12:3d:0a:9d:e3:1c:ea:81: d6:93:7d:24:1a:47:5a:88:e7:4e:2a:0f:a9:09:3a: 10:ac:09:40:0f:39:d4:e8:0f:4c:ca:dc:1b:77:b6: 71:55:87:54:a6:f7:c6:3a:40:60:c0:18:84:b4:69: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E9:0C:53:4F:BC:DB:95:4D:C1:D3:69:69:5A:2C:E1:27:2C:AC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a3e587fb-4a81-3abe-83d6-cac1f7a68007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ab:01:82:8b:98:a8:3b:3b:99:eb:93:1d:a7:64:a1:a0:72: 42:b7:7c:19:f2:9a:fa:17:15:b0:f2:92:cf:fb:62:ff:66:ab: d6:6e:fb:8b:bc:cb:6e:92:6b:d7:3b:e3:3d:42:d9:73:d9:19: d0:23:62:97:1e:90:e5:2e:a1:bc:fe:6c:6e:d9:b2:55:79:c1: 5c:0a:0b:a5:dd:89:81:61:ff:61:66:51:e2:36:fc:3a:bc:7d: 55:58:50:87:8f:2c:74:b8:d7:08:c9:7d:5a:eb:f3:64:c9:a7: 7f:5f:97:96:72:79:20:b0:1c:ef:69:67:b3:6e:27:ca:87:1d: 2b:71:57:d8:73:51:e6:8f:fa:6d:4c:2a:d8:f5:b7:c8:9c:3c: 1d:09:62:1c:2b:32:40:fd:43:53:a4:01:72:42:db:b3:63:ef: 4f:89:f4:49:2b:3a:7f:b1:40:9e:70:8c:0a:82:6a:9a:25:ef: 74:09:11:84:19:ad:3f:1a:0f:98:ca:e3:66:b3:8d:df:58:4a: e3:56:66:23:5a:4f:6f:96:69:87:de:96:2d:3c:b6:c7:04:d9: a4:41:63:74:e3:ac:a3:a1:46:a9:ca:d4:51:06:3f:9f:9f:71: bf:9b:ab:27:01:dc:ba:9e:5a:ea:a4:33:75:41:9b:8a:53:bd: bf:e2:2b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSxIB/u7v7Z59AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NTAwZTNhMjctZDFlMS00Y2UwLTg1NzctZWY0ZTY2Njg1OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMvCnSnfE4iVEwex3PcPButfAz6dmLVVTaEc e/uaKP8IxhBZrmKu+FR5uxSAVmHVG876UNeMKamFswkWQ/Ox/tp011/DL4aWdvvS P62tbzagpCU6RtLgt0LK5aB0VFQrQ7PZhGr5uBQwItqI00J6IZ1bWeuY1AKJT36n wIwSrglFCuUomsE8EiJGlIfUwESnsYiyIHwJMLi+5GuU39aQakz0X292JI55xNTP toS0aowQOrCBaV/sXa9N4pKKgRFPrRBcfFNnQgWDEj0KneMc6oHWk30kGkdaiOdO Kg+pCToQrAlADznU6A9Mytwbd7ZxVYdUpvfGOkBgwBiEtGnmLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbpDFNPvNuVTcHTaWlaLOEnLKwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYTNlNTg3ZmItNGE4MS0z YWJlLTgzZDYtY2FjMWY3YTY4MDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmrAYKLmKg7O5nrkx2nZKGgckK3fBnymvoXFbDyks/7Yv9mq9Zu+4u8 y26Sa9c74z1C2XPZGdAjYpcekOUuobz+bG7ZslV5wVwKC6XdiYFh/2FmUeI2/Dq8 fVVYUIePLHS41wjJfVrr82TJp39fl5ZyeSCwHO9pZ7NuJ8qHHStxV9hzUeaP+m1M Ktj1t8icPB0JYhwrMkD9Q1OkAXJC27Nj70+J9EkrOn+xQJ5wjAqCapol73QJEYQZ rT8aD5jK42azjd9YSuNWZiNaT2+WaYfeli08tscE2aRBY3TjrKOhRqnK1FEGP5+f cb+bqycB3LqeWuqkM3VBm4pTvb/iK+A= -----END CERTIFICATE-----Generated at Tue Sep 22 14:25:24 2026 by rpki-client