$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ce75c7c2-9aa2-35e9-a613-74ba917d8e5b.roa File: ce75c7c2-9aa2-35e9-a613-74ba917d8e5b.roa (raw, json) Hash identifier: j2xEwoiKr3a4y+22nfPMsq9w/nMvMm0OOF6mmTmNCyo= Subject key identifier: EE:0A:7C:E1:F9:44:00:7D:1F:E2:33:5F:15:4B:90:EA:E4:56:14:0C Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584F3FAD28C6507039835ABCE400 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ce75c7c2-9aa2-35e9-a613-74ba917d8e5b.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 55256 IP address blocks: 158.95.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:28:c6:50:70:39:83:5a:bc:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=69756b62-7274-4804-a201-87d564502ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:94:a9:2e:ae:a4:46:03:03:0f:6d:eb:41: 64:1e:0f:89:dc:48:19:56:f0:40:80:49:67:e8:9b: 65:23:3e:16:5d:a0:e2:ae:9a:e3:aa:47:21:53:15: 2c:64:04:ba:67:20:27:73:6b:7c:64:64:e0:12:2b: dd:14:a4:a7:aa:b4:ff:da:58:05:68:31:aa:6a:8e: 0d:3c:99:45:48:8e:a1:18:87:39:f3:55:5f:a7:8b: 5f:f2:99:cc:25:57:e5:1b:a7:f3:94:f5:19:44:ed: 5f:76:47:f9:75:56:52:9e:80:c6:c5:78:55:43:68: 2b:a6:00:f3:11:27:fd:2d:1f:a2:8d:d3:7f:bb:35: fb:e9:ee:06:3f:0e:87:83:76:65:5d:26:96:f9:dc: a8:a1:8e:3c:eb:f9:26:1d:1d:2c:af:d9:69:3f:ad: c5:52:27:eb:b2:32:4c:06:8e:37:c0:30:17:84:3d: 1a:66:9e:49:51:14:d9:67:23:af:32:3e:15:92:72: 25:41:81:33:66:b6:a2:01:e2:64:9e:53:9c:b5:35: 77:9d:06:e8:d7:51:1c:48:79:65:a0:8f:91:25:e7: f7:1a:e9:b4:ae:bf:32:a7:ba:9d:b2:f5:f5:a4:b7: 3a:ca:50:7d:f8:09:cb:0c:b5:1b:8e:bd:8d:69:02: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:7C:E1:F9:44:00:7D:1F:E2:33:5F:15:4B:90:EA:E4:56:14:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ce75c7c2-9aa2-35e9-a613-74ba917d8e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:59:73:97:59:e5:22:64:37:78:f0:5c:37:47:6d:6e:47:bd: fc:e8:6b:00:92:b0:8a:5d:66:b3:d9:93:56:51:fd:20:0d:fe: c3:ed:31:4b:b8:42:bc:1c:58:22:1c:ef:e9:5e:04:12:06:6c: 14:45:07:2d:93:3c:f0:14:c3:41:54:a6:4f:dd:3f:82:dc:fe: 12:12:9c:53:8b:44:71:c6:ff:c8:ba:75:1b:ab:b8:9a:b3:2f: 27:d6:29:01:6f:a4:88:3f:4d:fe:59:08:d4:05:4a:d3:25:be: f1:98:85:d5:5d:94:f5:d7:28:11:6d:f6:0b:46:0b:6d:ae:2b: e8:a7:1f:7c:37:40:b0:4b:20:55:8b:c3:b4:a6:34:f0:d1:c1: 11:ee:d1:ca:02:9b:fd:80:2e:e4:6b:64:40:ef:56:b8:16:2a: 11:59:23:51:e5:e3:11:34:76:de:20:fc:36:44:41:c1:cf:80: d4:f0:c0:9c:4a:f3:32:57:e5:e9:9a:9d:50:c6:1b:b4:21:43: fd:a0:61:b2:56:5b:57:85:c9:f2:ce:d0:58:41:90:44:b2:ed: 2a:01:6f:b9:48:00:f6:d8:e6:b4:03:0d:20:46:e0:c7:e1:a1: ec:c3:57:57:3b:c1:2c:b0:9c:2e:86:88:11:12:b6:b6:24:60: cf:7f:f1:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSjGUHA5g1q85AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk Njk3NTZiNjItNzI3NC00ODA0LWEyMDEtODdkNTY0NTAyYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/SUqS6upEYDAw9t60FkHg+J3EgZVvBAgEln 6JtlIz4WXaDirprjqkchUxUsZAS6ZyAnc2t8ZGTgEivdFKSnqrT/2lgFaDGqao4N PJlFSI6hGIc581Vfp4tf8pnMJVflG6fzlPUZRO1fdkf5dVZSnoDGxXhVQ2grpgDz ESf9LR+ijdN/uzX76e4GPw6Hg3ZlXSaW+dyooY486/kmHR0sr9lpP63FUifrsjJM Bo43wDAXhD0aZp5JURTZZyOvMj4VknIlQYEzZraiAeJknlOctTV3nQbo11EcSHll oI+RJef3Gum0rr8yp7qdsvX1pLc6ylB9+AnLDLUbjr2NaQLl2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4KfOH5RAB9H+IzXxVLkOrkVhQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvY2U3NWM3YzItOWFhMi0z NWU5LWE2MTMtNzRiYTkxN2Q4ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChZc5dZ5SJkN3jwXDdHbW5HvfzoawCSsIpdZrPZk1ZR/SAN/sPtMUu4 QrwcWCIc7+leBBIGbBRFBy2TPPAUw0FUpk/dP4Lc/hISnFOLRHHG/8i6dRuruJqz LyfWKQFvpIg/Tf5ZCNQFStMlvvGYhdVdlPXXKBFt9gtGC22uK+inH3w3QLBLIFWL w7SmNPDRwRHu0coCm/2ALuRrZEDvVrgWKhFZI1Hl4xE0dt4g/DZEQcHPgNTwwJxK 8zJX5emanVDGG7QhQ/2gYbJWW1eFyfLO0FhBkESy7SoBb7lIAPbY5rQDDSBG4Mfh oezDV1c7wSywnC6GiBEStrYkYM9/8ZA= -----END CERTIFICATE-----Generated at Tue Sep 22 15:58:40 2026 by rpki-client