$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/bcfc8966-bbf3-3b7d-a639-6b0ab4db9a4f.roa File: bcfc8966-bbf3-3b7d-a639-6b0ab4db9a4f.roa (raw, json) Hash identifier: fzdkf3xwUn5IzFEKv0sa2WhzpCM0a1E8vvxnur5RNuI= Subject key identifier: 9D:08:D9:D2:7F:5E:4E:E4:EC:94:67:67:21:63:C5:71:5C:92:70:5E Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD9A79B0E7B51ED92F4865C0 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/bcfc8966-bbf3-3b7d-a639-6b0ab4db9a4f.roa Signing time: Wed 29 Oct 2025 02:53:48 +0000 ROA not before: Wed 29 Oct 2025 02:53:48 +0000 ROA not after: Tue 27 Jan 2026 03:53:48 +0000 asID: 55256 IP address blocks: 158.95.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:9a:79:b0:e7:b5:1e:d9:2f:48:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:53:48 2025 GMT Not After : Jan 27 03:53:48 2026 GMT Subject: CN=fffebed6-d424-4870-b487-aa5670422e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:56:6a:9e:f0:ab:9c:cf:b0:2a:ad:4d:14: 74:5e:f1:fb:21:ec:36:a3:c0:5b:06:59:25:ae:2a: 6f:18:ed:03:7f:e4:e6:18:cf:db:6c:b4:f7:cb:79: 07:f4:3e:c7:7e:94:7c:ce:8a:15:46:a3:5a:e9:38: c4:55:81:65:ec:2d:91:69:7b:02:f8:23:1d:88:7e: 2b:88:ce:d0:72:66:da:db:b0:29:7f:8c:e0:5b:d4: fb:7a:0b:c2:49:fa:45:2b:8d:3c:d2:10:ea:b8:59: f4:e3:f9:d0:d0:10:ed:fb:b6:c4:38:61:f8:ce:ce: 9b:6c:3b:48:66:42:df:1b:ab:7e:17:2e:aa:74:b6: 84:41:b5:f7:38:b8:d8:e4:a8:ce:9f:2e:7e:94:21: 93:65:7d:cb:54:a6:29:35:cb:4a:99:26:28:15:f9: 96:0a:e4:af:be:27:aa:08:db:55:d4:c7:ac:05:22: d7:8e:ff:70:9f:d2:f8:18:b7:89:32:f8:40:ae:43: 47:b5:ac:12:6a:fe:cf:ce:e0:e6:a1:a6:4b:a0:87: c9:9d:7d:e9:05:7b:81:96:f1:80:ef:2c:d4:4e:4c: d0:34:c8:8b:95:41:23:e3:01:b4:6b:9b:9a:f3:bf: c4:15:48:db:f7:67:19:04:4f:27:7b:15:b6:34:f7: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:08:D9:D2:7F:5E:4E:E4:EC:94:67:67:21:63:C5:71:5C:92:70:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/bcfc8966-bbf3-3b7d-a639-6b0ab4db9a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:aa:0b:6b:9d:bb:bc:9b:49:c4:cb:ce:99:0d:e9:62:72:2a: bd:24:0b:b4:18:f0:3f:50:4b:3a:9d:8d:8b:a5:c8:09:6b:96: c8:7f:96:35:83:5d:90:3b:97:5a:88:2d:15:74:4b:36:8a:d3: 04:a8:74:e5:4f:8b:c7:9e:66:fe:ee:44:b4:ab:c1:b5:d9:96: 94:61:c6:f9:2d:98:8c:6d:a3:08:98:ca:41:46:ab:6d:e4:5d: a6:d6:b5:0f:da:4d:46:4b:e8:4e:1a:9c:14:2d:b2:30:17:57: db:66:d9:c4:84:1e:2b:1f:3e:a2:f1:57:cd:cd:8f:f9:75:f2: c1:bc:02:f7:c7:23:a7:c3:6b:ce:1d:1f:17:45:f7:78:3a:05: 47:3f:9f:d2:e9:01:b9:1c:3f:66:e8:f7:1d:6e:c4:80:8a:ea: ba:2b:81:c5:07:63:6f:4e:53:21:1e:65:2a:f2:ac:3e:c5:e8: 64:6f:a7:00:1c:39:9a:58:a5:01:16:05:a8:3b:3f:01:17:83: d8:ff:36:83:38:78:ad:66:08:da:12:5c:55:88:4e:18:d7:6c: bc:9a:0c:89:25:b0:ce:5d:e4:72:b5:0e:6a:ca:00:4d:d0:d2: fb:73:db:36:11:07:9e:37:c5:0a:a9:41:7b:1f:bc:10:63:12: d5:be:0e:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutmnmw57Ue2S9IZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyNTM0OFoXDTI2MDEyNzAzNTM0OFowLzEtMCsGA1UEAxMk ZmZmZWJlZDYtZDQyNC00ODcwLWI0ODctYWE1NjcwNDIyZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDtWap7wq5zPsCqtTRR0XvH7Iew2o8BbBlkl ripvGO0Df+TmGM/bbLT3y3kH9D7HfpR8zooVRqNa6TjEVYFl7C2RaXsC+CMdiH4r iM7Qcmba27Apf4zgW9T7egvCSfpFK4080hDquFn04/nQ0BDt+7bEOGH4zs6bbDtI ZkLfG6t+Fy6qdLaEQbX3OLjY5KjOny5+lCGTZX3LVKYpNctKmSYoFfmWCuSvvieq CNtV1MesBSLXjv9wn9L4GLeJMvhArkNHtawSav7PzuDmoaZLoIfJnX3pBXuBlvGA 7yzUTkzQNMiLlUEj4wG0a5ua87/EFUjb92cZBE8nexW2NPd9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0I2dJ/Xk7k7JRnZyFjxXFcknBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYmNmYzg5NjYtYmJmMy0z YjdkLWE2MzktNmIwYWI0ZGI5YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiqC2udu7ybScTLzpkN6WJyKr0kC7QY8D9QSzqdjYulyAlrlsh/ljWD XZA7l1qILRV0SzaK0wSodOVPi8eeZv7uRLSrwbXZlpRhxvktmIxtowiYykFGq23k XabWtQ/aTUZL6E4anBQtsjAXV9tm2cSEHisfPqLxV83Nj/l18sG8AvfHI6fDa84d HxdF93g6BUc/n9LpAbkcP2bo9x1uxICK6rorgcUHY29OUyEeZSryrD7F6GRvpwAc OZpYpQEWBag7PwEXg9j/NoM4eK1mCNoSXFWIThjXbLyaDIklsM5d5HK1DmrKAE3Q 0vtz2zYRB543xQqpQXsfvBBjEtW+Dq8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:07 2025 by rpki-client