$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa File: d177a416-7a94-37d4-ba55-539cc57aa5b5.roa (raw, json) Hash identifier: 5I0kbjR3/MdvLXnJqpYOgY7dMC9G9p661mkgxaQy3Vg= Subject key identifier: D7:E5:D6:98:23:84:DB:3B:84:56:AD:B4:A6:1C:C5:22:AB:60:4E:F0 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584B9BF97E8FF49DDCA87DAE3280 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa Signing time: Wed 22 Oct 2025 19:20:42 +0000 ROA not before: Wed 22 Oct 2025 19:20:42 +0000 ROA not after: Tue 20 Jan 2026 20:20:42 +0000 asID: 55256 IP address blocks: 158.95.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:f9:7e:8f:f4:9d:dc:a8:7d:ae:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 22 19:20:42 2025 GMT Not After : Jan 20 20:20:42 2026 GMT Subject: CN=a3fb2ecf-6285-46f4-88ae-ba9fe31e2ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:79:f5:02:39:51:20:46:67:da:ac:61:18:fb: a2:ae:66:6b:00:3b:a9:e3:2c:6b:e2:8b:de:24:37: 9b:01:0b:19:26:0d:59:9e:17:4a:33:8c:ac:f7:05: 4e:cf:ae:72:72:46:85:d6:0e:f5:f6:08:c6:b5:9a: 10:2c:76:2d:98:d7:35:af:06:bb:fc:86:d3:8d:bd: 9a:01:6a:e6:6e:78:e4:58:f0:fd:6a:6d:15:65:59: a3:e2:24:76:ef:bd:32:bd:a7:7b:c3:b9:f8:d6:78: 2f:68:21:b6:ce:c8:7e:b2:6d:fb:8f:d4:3a:bf:bb: 75:46:e1:a0:a0:18:64:df:16:22:3a:8e:61:06:c3: 71:02:13:6c:c6:1a:6f:a1:47:67:34:27:71:6d:22: 0c:72:d1:26:2a:ab:50:88:b1:96:1f:84:4c:c3:e1: 7f:20:39:11:ba:c7:18:25:c9:0e:36:90:ef:ac:55: 1e:ba:f0:83:40:76:2c:be:33:ed:38:93:9c:bf:dd: a4:4c:b7:49:7d:02:55:7d:04:3a:8b:a1:af:5e:17: 0e:f3:1a:64:a4:c6:3f:90:58:68:87:e4:6e:d6:9f: cb:98:51:93:3d:04:6e:cb:67:48:8f:eb:63:84:5d: c7:3a:e6:61:78:90:15:aa:c8:dd:ee:a1:44:cd:bb: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E5:D6:98:23:84:DB:3B:84:56:AD:B4:A6:1C:C5:22:AB:60:4E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:15:0f:0c:44:f9:6a:5f:1a:71:e1:41:47:bf:0e:63:3d:f0: a3:42:89:69:91:35:d8:48:65:fe:58:ac:80:c5:99:dd:b9:f3: 92:79:80:eb:2d:17:2c:4b:ea:f6:33:ed:d0:b4:e4:08:3d:a1: 28:1a:39:4e:0c:10:40:a3:c6:1b:d1:6f:15:56:a5:a9:b8:62: 2a:5c:1b:e1:81:66:91:b0:3d:68:4c:9d:e6:92:be:2e:df:48: ee:4d:b2:51:25:40:ee:01:f3:33:e2:51:44:2e:b0:fe:9d:63: a9:b0:4a:c2:17:01:42:19:f2:98:a4:30:9f:d6:55:6e:93:f6: ad:08:e0:4a:95:ff:eb:5d:ab:4c:28:3b:c4:b2:22:26:ba:8f: 99:6e:2d:e0:fa:68:dc:1d:69:32:aa:83:5c:ae:76:8f:fd:08: 3a:85:ab:6a:7a:8c:d1:0c:85:58:2d:8b:79:d5:1a:dd:bd:d7: 58:87:f1:44:0a:16:31:9e:b5:9a:cf:48:ce:c5:64:8c:14:50: 16:2c:32:ca:b2:85:ce:47:2b:9b:65:12:d4:02:01:ce:45:7b: 34:96:45:70:50:3c:da:39:b1:53:f2:8a:c8:0c:e6:22:f7:f0: 40:c1:49:d7:2e:79:45:fb:75:ea:02:85:c2:94:af:01:ed:3e: ba:e2:22:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEub+X6P9J3cqH2uMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyMjE5MjA0MloXDTI2MDEyMDIwMjA0MlowLzEtMCsGA1UEAxMk YTNmYjJlY2YtNjI4NS00NmY0LTg4YWUtYmE5ZmUzMWUyZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXn1AjlRIEZn2qxhGPuirmZrADup4yxr4ove JDebAQsZJg1ZnhdKM4ys9wVOz65yckaF1g719gjGtZoQLHYtmNc1rwa7/IbTjb2a AWrmbnjkWPD9am0VZVmj4iR2770yvad7w7n41ngvaCG2zsh+sm37j9Q6v7t1RuGg oBhk3xYiOo5hBsNxAhNsxhpvoUdnNCdxbSIMctEmKqtQiLGWH4RMw+F/IDkRuscY JckONpDvrFUeuvCDQHYsvjPtOJOcv92kTLdJfQJVfQQ6i6GvXhcO8xpkpMY/kFho h+Ru1p/LmFGTPQRuy2dIj+tjhF3HOuZheJAVqsjd7qFEzbuemwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfl1pgjhNs7hFattKYcxSKrYE7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZDE3N2E0MTYtN2E5NC0z N2Q0LWJhNTUtNTM5Y2M1N2FhNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYVDwxE+WpfGnHhQUe/DmM98KNCiWmRNdhIZf5YrIDFmd2585J5gOst FyxL6vYz7dC05Ag9oSgaOU4MEECjxhvRbxVWpam4YipcG+GBZpGwPWhMneaSvi7f SO5NslElQO4B8zPiUUQusP6dY6mwSsIXAUIZ8pikMJ/WVW6T9q0I4EqV/+tdq0wo O8SyIia6j5luLeD6aNwdaTKqg1yudo/9CDqFq2p6jNEMhVgti3nVGt2911iH8UQK FjGetZrPSM7FZIwUUBYsMsqyhc5HK5tlEtQCAc5FezSWRXBQPNo5sVPyisgM5iL3 8EDBSdcueUX7deoChcKUrwHtPrriIrE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:25:07 2025 by rpki-client