$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa File: afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa (raw, json) Hash identifier: nUDcEQgG/Xmb0Lxp0GIeBNd2XR2o8ChxDFFCSPcXwUg= Subject key identifier: 22:2B:FD:51:51:43:D6:77:B2:16:39:B4:B4:8E:6E:B1:95:3E:03:C2 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584B8C436C9CF1C3F8B3C5C88D80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa Signing time: Fri 17 Oct 2025 04:16:43 +0000 ROA not before: Fri 17 Oct 2025 04:16:43 +0000 ROA not after: Thu 15 Jan 2026 05:16:43 +0000 asID: 55256 IP address blocks: 158.95.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:43:6c:9c:f1:c3:f8:b3:c5:c8:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 17 04:16:43 2025 GMT Not After : Jan 15 05:16:43 2026 GMT Subject: CN=b18fc3e4-9133-458c-80c2-995b9b107d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:16:52:d7:96:39:f7:49:bc:2f:4b:ef:69: 75:49:a5:95:37:01:71:ca:56:e4:53:fd:fc:fa:40: 67:25:11:14:db:26:12:a5:4d:0c:cc:97:e7:f5:1d: 6e:fd:71:ca:c2:8e:5c:72:f1:5f:1b:43:83:d0:e9: 8c:75:4e:81:62:7f:e3:fd:06:77:88:75:53:4d:d6: d4:9c:de:ef:df:07:80:2a:f6:3a:85:ac:ce:cc:2e: 90:4f:9b:50:e3:ac:2b:22:16:95:20:72:ce:1b:15: 8c:59:c2:31:cf:c9:75:06:27:9a:20:13:91:8b:50: ad:f6:41:05:b3:eb:6f:b1:8c:76:49:fb:f5:3b:72: 0e:c3:47:54:8d:ec:72:9f:cc:1d:79:6f:15:f2:e7: 12:62:3e:44:c1:b6:05:15:4b:c2:40:ad:1b:d2:10: 52:71:6c:2a:ed:3a:23:90:b9:45:89:b1:85:a9:40: 51:74:33:01:ab:48:98:78:3b:2d:51:6f:f8:ef:58: 3f:52:58:77:ec:72:23:11:94:a0:ae:91:69:00:32: 50:c1:86:fe:d7:84:20:0b:10:c2:ca:f3:be:91:06: 41:97:b4:17:3b:5b:91:b3:cb:29:40:4b:f7:27:d3: 70:4e:1f:5f:39:26:02:f9:fc:ef:49:c5:1c:77:01: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2B:FD:51:51:43:D6:77:B2:16:39:B4:B4:8E:6E:B1:95:3E:03:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0f:9a:2a:4e:13:c3:ab:32:83:b7:03:31:94:6a:d5:94:08: 55:3a:75:9c:47:85:37:db:e6:50:43:6d:8f:2b:ee:bb:56:31: 33:cb:f8:93:44:f9:e4:5e:e9:74:14:6b:97:f2:ba:42:06:fe: 65:8f:48:8c:01:e1:df:ed:4f:cc:28:76:06:a0:3a:71:96:00: 16:0d:3b:9e:c9:32:0b:fb:0e:04:bc:eb:54:1d:6f:ed:f2:2b: 9d:0a:ce:f9:dd:48:a3:25:70:b4:cd:17:fa:16:6e:f0:1b:d5: 16:e6:d8:c1:66:4d:12:fe:74:2a:a8:2a:d0:11:34:d1:38:da: e9:14:21:37:1c:4f:33:c8:1b:a8:b8:2c:ae:69:86:94:dc:7f: d4:89:24:4f:eb:74:e4:d5:ca:e5:d4:9e:a0:9a:c8:40:82:c3: e8:33:c2:ef:02:9a:73:d1:d7:15:0d:0e:02:3a:01:41:18:1e: 25:f0:3a:bf:15:53:16:ed:fe:06:84:9a:34:b3:a0:6e:37:ef: df:8d:65:a3:f9:13:ef:67:2f:7c:7d:e1:d1:fd:22:0b:68:13: 60:0d:2b:57:18:9f:19:80:8c:d6:4c:a2:e8:5c:5a:47:c1:04: 19:73:ab:57:e7:14:27:ba:73:df:fe:d2:29:37:97:43:68:ea: ee:e0:66:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuMQ2yc8cP4s8XIjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAxNzA0MTY0M1oXDTI2MDExNTA1MTY0M1owLzEtMCsGA1UEAxMk YjE4ZmMzZTQtOTEzMy00NThjLTgwYzItOTk1YjliMTA3ZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2AWUteWOfdJvC9L72l1SaWVNwFxylbkU/38 +kBnJREU2yYSpU0MzJfn9R1u/XHKwo5ccvFfG0OD0OmMdU6BYn/j/QZ3iHVTTdbU nN7v3weAKvY6hazOzC6QT5tQ46wrIhaVIHLOGxWMWcIxz8l1BieaIBORi1Ct9kEF s+tvsYx2Sfv1O3IOw0dUjexyn8wdeW8V8ucSYj5EwbYFFUvCQK0b0hBScWwq7Toj kLlFibGFqUBRdDMBq0iYeDstUW/471g/Ulh37HIjEZSgrpFpADJQwYb+14QgCxDC yvO+kQZBl7QXO1uRs8spQEv3J9NwTh9fOSYC+fzvScUcdwFkZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIr/VFRQ9Z3shY5tLSObrGVPgPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYWZhOWU0ZjAtOGEyZi0z OWJmLWI1YjAtZDA5MzM3MWJkMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAPmipOE8OrMoO3AzGUatWUCFU6dZxHhTfb5lBDbY8r7rtWMTPL+JNE +eRe6XQUa5fyukIG/mWPSIwB4d/tT8wodgagOnGWABYNO57JMgv7DgS861Qdb+3y K50KzvndSKMlcLTNF/oWbvAb1Rbm2MFmTRL+dCqoKtARNNE42ukUITccTzPIG6i4 LK5phpTcf9SJJE/rdOTVyuXUnqCayECCw+gzwu8CmnPR1xUNDgI6AUEYHiXwOr8V Uxbt/gaEmjSzoG4379+NZaP5E+9nL3x94dH9IgtoE2ANK1cYnxmAjNZMouhcWkfB BBlzq1fnFCe6c9/+0ik3l0No6u7gZsU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:29:14 2025 by rpki-client