$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/cd794d81-886f-3da5-a4dc-0c0909057b69.roa File: cd794d81-886f-3da5-a4dc-0c0909057b69.roa (raw, json) Hash identifier: waL1jYR9PajHMzpFgNN7VLsUB+ZdpiUTIvL8ccy2NTA= Subject key identifier: C8:08:F4:8A:8F:4A:FA:A5:E4:C7:57:4D:60:74:BD:D8:E2:AE:29:72 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D6EDA8F6BD71B4090802D48C0 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/cd794d81-886f-3da5-a4dc-0c0909057b69.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 55256 IP address blocks: 158.95.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8f:6b:d7:1b:40:90:80:2d:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=ddc04eed-5e05-4cbb-865b-8e9505147575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:d6:6e:2e:ce:73:31:81:c6:62:a0:f9:07: b1:9b:c5:c0:3f:97:ea:68:52:83:82:02:1d:8d:10: fa:c2:b2:5e:13:bd:88:51:cf:b9:63:ac:e9:fc:a6: 57:b8:73:42:6c:55:da:96:02:f5:b5:27:71:0a:2a: 86:cb:49:a2:f4:34:20:38:34:52:fa:f5:b3:d7:ad: 17:f5:f8:5a:43:b6:8c:0d:4b:34:3d:e0:d1:dd:33: b5:89:70:a0:bc:18:36:fb:c7:2d:40:5b:12:d3:cc: 20:0f:88:1e:ef:52:6b:8a:04:04:fe:c1:db:23:54: 84:00:52:28:b2:f6:dd:2c:3d:34:2b:57:3d:15:c3: 42:8e:86:0c:4c:e0:7f:a4:2d:ce:04:d7:33:42:e8: f6:a6:e2:f6:ab:d9:ae:d2:eb:3c:f6:d5:6f:0b:b4: 19:54:51:ba:c2:0b:45:ed:ba:3b:7f:7c:f5:69:ef: 2e:2f:89:29:5a:16:f2:fe:bc:dd:4f:85:f7:03:5b: c0:dd:5c:22:e2:a4:88:4c:97:d8:95:b0:02:cb:c4: fb:2b:77:d0:98:f9:a2:e5:2a:8f:68:aa:ae:00:5a: 3a:eb:c7:1f:66:53:fa:b7:cb:31:e3:8d:9d:c0:d1: 6d:b1:0e:35:9e:58:47:1a:36:83:03:10:9d:f2:b2: db:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:08:F4:8A:8F:4A:FA:A5:E4:C7:57:4D:60:74:BD:D8:E2:AE:29:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/cd794d81-886f-3da5-a4dc-0c0909057b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:32:df:64:30:9a:ee:51:4e:f6:87:69:12:89:d7:c1:b8:d5: 93:03:8b:33:ba:d3:0d:a5:a6:ef:56:9b:eb:82:34:8f:c1:7b: b9:c7:69:78:86:f1:38:32:e5:8a:54:63:c0:b5:a0:da:5b:1d: 7d:94:3a:df:7e:a1:bf:ad:56:b2:50:db:98:d2:60:5f:d5:97: 17:83:49:60:5d:3b:96:8f:59:95:a1:00:6f:8b:98:6e:b9:3b: 69:8a:c9:25:7e:49:45:76:b1:cd:b1:ac:32:67:6d:87:07:fc: f5:44:2b:34:ae:4b:51:c7:d8:39:c6:1d:79:63:ca:32:f2:09: 81:45:18:fa:fe:da:f8:c6:57:b1:4c:76:df:ba:1c:5f:de:72: 41:09:02:ca:f4:60:d8:6b:db:be:84:e3:08:20:3c:10:43:9e: e9:d6:e1:8f:80:16:af:0b:fb:21:09:0b:1e:d7:93:f1:5e:bc: 52:d1:e7:3e:04:3f:39:57:77:f6:2f:cb:57:d9:e3:98:25:5f: 4a:26:4d:10:a0:3b:94:68:a4:db:46:f3:af:cf:53:a9:63:15: 3e:2c:da:ce:24:16:54:92:34:ac:57:32:d2:48:67:91:4c:d6: 0a:c5:d1:5d:ac:e6:85:c6:7c:b4:85:32:42:24:35:ec:75:47: b3:ef:e1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2o9r1xtAkIAtSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk ZGRjMDRlZWQtNWUwNS00Y2JiLTg2NWItOGU5NTA1MTQ3NTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd/Wbi7OczGBxmKg+Qexm8XAP5fqaFKDggId jRD6wrJeE72IUc+5Y6zp/KZXuHNCbFXalgL1tSdxCiqGy0mi9DQgODRS+vWz160X 9fhaQ7aMDUs0PeDR3TO1iXCgvBg2+8ctQFsS08wgD4ge71JrigQE/sHbI1SEAFIo svbdLD00K1c9FcNCjoYMTOB/pC3OBNczQuj2puL2q9mu0us89tVvC7QZVFG6wgtF 7bo7f3z1ae8uL4kpWhby/rzdT4X3A1vA3Vwi4qSITJfYlbACy8T7K3fQmPmi5SqP aKquAFo668cfZlP6t8sx442dwNFtsQ41nlhHGjaDAxCd8rLbPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgI9IqPSvql5MdXTWB0vdjirilyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvY2Q3OTRkODEtODg2Zi0z ZGE1LWE0ZGMtMGMwOTA5MDU3YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEy32Qwmu5RTvaHaRKJ18G41ZMDizO60w2lpu9Wm+uCNI/Be7nHaXiG 8Tgy5YpUY8C1oNpbHX2UOt9+ob+tVrJQ25jSYF/VlxeDSWBdO5aPWZWhAG+LmG65 O2mKySV+SUV2sc2xrDJnbYcH/PVEKzSuS1HH2DnGHXljyjLyCYFFGPr+2vjGV7FM dt+6HF/eckEJAsr0YNhr276E4wggPBBDnunW4Y+AFq8L+yEJCx7Xk/FevFLR5z4E PzlXd/Yvy1fZ45glX0omTRCgO5RopNtG86/PU6ljFT4s2s4kFlSSNKxXMtJIZ5FM 1grF0V2s5oXGfLSFMkIkNex1R7Pv4WA= -----END CERTIFICATE-----Generated at Sun Apr 19 10:16:50 2026 by rpki-client