$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa File: b90f7135-7157-3fbc-bd15-33834ca90b1f.roa (raw, json) Hash identifier: i/xZQ2i/6QQ6tdwzBIhY0//R/wkqUiZfwp6F7An8JhE= Subject key identifier: 36:BC:64:9B:CC:03:F1:DE:F1:54:D7:31:EC:BA:6F:B9:46:6C:57:58 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EA7946771207EBE920BBEAF68 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 55256 IP address blocks: 158.95.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:67:71:20:7e:be:92:0b:be:af:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=48a41e76-fdac-4241-a6fc-b2d4170ccf46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:23:50:01:9f:3d:db:24:78:ae:60:8c:49: 4c:3f:ac:8a:27:80:9f:20:10:12:5a:12:55:fa:61: af:1e:0d:f7:b0:f0:65:87:b2:59:42:18:d4:57:82: b0:4b:12:9e:41:cf:57:8e:67:0f:a4:05:eb:ed:f3: fa:c5:47:ef:62:97:53:f3:56:3c:62:f5:5c:df:c1: 8c:07:cc:cd:b5:ca:c1:e8:ba:96:59:20:9c:c7:77: b3:02:d9:e7:d5:13:23:d6:c4:1c:78:15:99:45:e9: 1c:dd:62:ed:6b:32:87:c4:a2:43:b3:76:1b:59:be: 6b:e6:7d:d6:f4:22:f9:7b:f1:2b:b1:4c:dc:d3:a2: cf:b8:3a:da:bc:41:28:46:04:dd:c7:23:ca:45:8c: eb:03:10:51:fe:5a:47:85:95:b7:3d:62:5c:59:5a: d8:84:5e:f2:6a:d2:7c:56:91:94:84:5c:4b:02:74: 0c:5a:b0:a2:0b:63:a3:90:97:50:8a:47:d6:f0:ad: 20:7f:25:55:e4:b3:bc:82:3e:88:48:b1:22:82:b4: a2:ed:3f:41:91:f0:49:2b:3b:bb:a8:79:33:3e:94: 09:9f:82:5a:c9:cd:f7:e8:95:33:09:b6:96:04:c3: e6:2e:ce:43:55:ed:00:3e:15:7a:da:5c:2f:28:28: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BC:64:9B:CC:03:F1:DE:F1:54:D7:31:EC:BA:6F:B9:46:6C:57:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:49:42:1d:7e:ba:35:40:51:07:1f:32:87:de:0b:f2:c7:99: a1:8c:16:8b:34:0e:8f:ae:32:3e:b3:3f:10:8e:87:01:2a:d6: bd:f7:97:94:34:2b:bd:f1:56:27:cd:f0:26:74:bb:ec:b5:6f: ac:16:e7:b9:9c:f7:6d:3e:13:4f:c2:f6:47:1b:c4:e8:94:e7: f2:71:42:44:a6:77:e0:5c:ac:f8:00:74:27:f1:8e:92:4d:ac: e5:2f:af:68:d5:fe:9e:94:eb:82:17:ea:c2:07:3d:1f:0f:b6: be:26:73:61:08:e6:57:d8:6e:e2:d8:b7:0c:36:91:13:ce:0f: f9:b6:fb:08:02:ad:59:b3:6f:23:e3:db:69:95:69:bd:fc:b5: 0b:13:b1:9c:6b:26:36:ca:3b:33:ad:87:8e:83:38:a1:34:12: d7:8d:8a:a2:8f:44:fc:6f:b6:82:89:14:f4:cc:0c:26:f9:2b: 4c:e5:08:f1:3a:80:b9:99:cd:e9:00:de:33:9e:0a:e7:78:48: 1a:e4:0b:02:bd:a2:2e:a7:46:05:c4:53:98:60:19:c1:f6:e7: fc:c7:47:c6:82:30:61:ba:62:ee:47:b2:fe:ec:3d:8d:25:62: d2:5a:b9:6c:27:b0:ec:1c:cb:30:e1:42:6d:21:4f:88:84:5a: a9:76:a1:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlGdxIH6+kgu+r2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDhhNDFlNzYtZmRhYy00MjQxLWE2ZmMtYjJkNDE3MGNjZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufQjUAGfPdskeK5gjElMP6yKJ4CfIBASWhJV +mGvHg33sPBlh7JZQhjUV4KwSxKeQc9XjmcPpAXr7fP6xUfvYpdT81Y8YvVc38GM B8zNtcrB6LqWWSCcx3ezAtnn1RMj1sQceBWZRekc3WLtazKHxKJDs3YbWb5r5n3W 9CL5e/ErsUzc06LPuDravEEoRgTdxyPKRYzrAxBR/lpHhZW3PWJcWVrYhF7yatJ8 VpGUhFxLAnQMWrCiC2OjkJdQikfW8K0gfyVV5LO8gj6ISLEigrSi7T9BkfBJKzu7 qHkzPpQJn4Jayc336JUzCbaWBMPmLs5DVe0APhV62lwvKCi5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa8ZJvMA/He8VTXMey6b7lGbFdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYjkwZjcxMzUtNzE1Ny0z ZmJjLWJkMTUtMzM4MzRjYTkwYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1JQh1+ujVAUQcfMofeC/LHmaGMFos0Do+uMj6zPxCOhwEq1r33l5Q0 K73xVifN8CZ0u+y1b6wW57mc920+E0/C9kcbxOiU5/JxQkSmd+BcrPgAdCfxjpJN rOUvr2jV/p6U64IX6sIHPR8Ptr4mc2EI5lfYbuLYtww2kRPOD/m2+wgCrVmzbyPj 22mVab38tQsTsZxrJjbKOzOth46DOKE0EteNiqKPRPxvtoKJFPTMDCb5K0zlCPE6 gLmZzekA3jOeCud4SBrkCwK9oi6nRgXEU5hgGcH25/zHR8aCMGG6Yu5Hsv7sPY0l YtJauWwnsOwcyzDhQm0hT4iEWql2od0= -----END CERTIFICATE-----Generated at Wed Jul 29 07:04:15 2026 by rpki-client