$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa File: d177a416-7a94-37d4-ba55-539cc57aa5b5.roa (raw, json) Hash identifier: g0qexJ2hhWbnB5krRCazOPOAast8JifuHXB/rsF42d0= Subject key identifier: 43:C8:8A:54:6D:37:86:A7:1C:C7:27:11:81:AD:9B:93:31:57:3D:D1 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EDF5C8D0CA309DD9784CB9C80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 55256 IP address blocks: 158.95.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:8d:0c:a3:09:dd:97:84:cb:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=3ec10ace-81e6-4c0e-b7e7-a4ee7fae2ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:34:e8:27:2e:ea:c0:58:38:b0:71:35:42: 67:5b:d4:46:2e:ef:c4:02:a8:9a:cc:50:99:1a:3e: b3:99:86:4b:47:2c:b6:64:d5:55:c1:b8:d3:b4:fa: e5:89:f3:c7:06:8d:8a:c5:15:3b:dc:3b:22:da:9f: 04:45:5f:f9:43:a3:e6:4b:9b:a9:94:de:10:75:8d: a5:3a:e4:fa:b1:df:2d:b4:0d:4d:48:cf:37:5e:fe: 57:32:de:60:e2:a3:fa:07:25:d3:52:38:96:bf:5c: 19:30:97:ba:58:b1:f9:92:27:e3:22:e2:55:53:bb: 09:a7:52:b8:70:a2:91:ab:df:11:cc:40:65:f6:ff: d1:ef:fb:a6:32:5f:e0:f8:2c:40:7b:a2:a1:bf:8a: 01:73:d1:19:44:9a:07:90:88:3b:35:7e:2a:56:2d: 3c:77:c8:9c:ec:99:ac:48:5b:53:86:a7:e2:24:38: 8e:2d:2f:ab:18:02:12:d0:f9:b8:bc:4d:98:69:e1: 25:cd:33:9f:a8:75:90:5a:89:63:d1:ca:2f:ab:fc: 94:f0:04:78:64:1e:6e:b3:14:58:80:3f:fa:6e:f3: bf:99:76:61:4d:5b:62:f2:3d:a8:65:fa:ff:0b:27: 49:6e:22:ed:a3:f9:39:f6:c5:c0:4c:13:ea:b0:81: b7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:8A:54:6D:37:86:A7:1C:C7:27:11:81:AD:9B:93:31:57:3D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:94:81:6e:63:40:ba:b6:52:ba:29:44:de:bb:99:1e:92:7d: aa:a6:0b:4e:a0:8e:b3:9b:a9:75:af:d2:93:da:97:36:c5:a7: f5:70:66:55:48:2c:6a:f8:86:b8:41:b2:f4:3a:ad:c2:23:22: 48:61:dd:65:fb:42:05:d4:f6:b3:26:c5:20:81:36:3c:5c:b3: 74:01:90:95:aa:6d:d9:13:24:04:ec:f6:65:3f:31:42:90:07: 72:8b:b8:61:bc:26:49:c7:63:82:ef:5d:20:42:49:2f:c4:9b: 4c:b8:9a:1f:54:a3:93:f3:a3:ea:39:eb:e4:90:59:81:dc:4d: 3c:f2:2a:98:51:7e:71:fc:1b:92:75:d5:cd:4d:2b:dd:93:07: 50:64:fe:0b:31:39:17:28:4e:0a:33:40:c0:b4:74:c3:0b:c7: 9b:23:af:dc:bb:22:0c:12:91:46:fe:47:53:9f:a4:c6:d5:9d: 0a:01:9f:06:4d:28:73:bb:b6:4d:f3:eb:60:37:7d:d6:59:9e: ec:2a:54:3b:67:53:a6:3b:9b:61:71:18:03:8e:2d:e8:51:c7: 0e:33:c8:a6:e8:45:80:ce:d5:82:0f:e8:26:0f:3c:3d:d6:36: 19:f0:7c:91:77:a8:9e:5c:ee:1a:e8:25:10:15:e5:76:78:b8: 3b:04:20:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7fXI0Mowndl4TLnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk M2VjMTBhY2UtODFlNi00YzBlLWI3ZTctYTRlZTdmYWUyZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W806Ccu6sBYOLBxNUJnW9RGLu/EAqiazFCZ Gj6zmYZLRyy2ZNVVwbjTtPrlifPHBo2KxRU73Dsi2p8ERV/5Q6PmS5uplN4QdY2l OuT6sd8ttA1NSM83Xv5XMt5g4qP6ByXTUjiWv1wZMJe6WLH5kifjIuJVU7sJp1K4 cKKRq98RzEBl9v/R7/umMl/g+CxAe6Khv4oBc9EZRJoHkIg7NX4qVi08d8ic7Jms SFtThqfiJDiOLS+rGAIS0Pm4vE2YaeElzTOfqHWQWolj0covq/yU8AR4ZB5usxRY gD/6bvO/mXZhTVti8j2oZfr/CydJbiLto/k59sXATBPqsIG3IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPIilRtN4anHMcnEYGtm5MxVz3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZDE3N2E0MTYtN2E5NC0z N2Q0LWJhNTUtNTM5Y2M1N2FhNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2UgW5jQLq2UropRN67mR6SfaqmC06gjrObqXWv0pPalzbFp/VwZlVI LGr4hrhBsvQ6rcIjIkhh3WX7QgXU9rMmxSCBNjxcs3QBkJWqbdkTJATs9mU/MUKQ B3KLuGG8JknHY4LvXSBCSS/Em0y4mh9Uo5Pzo+o56+SQWYHcTTzyKphRfnH8G5J1 1c1NK92TB1Bk/gsxORcoTgozQMC0dMMLx5sjr9y7IgwSkUb+R1OfpMbVnQoBnwZN KHO7tk3z62A3fdZZnuwqVDtnU6Y7m2FxGAOOLehRxw4zyKboRYDO1YIP6CYPPD3W NhnwfJF3qJ5c7hroJRAV5XZ4uDsEIBo= -----END CERTIFICATE-----Generated at Tue Sep 22 01:50:52 2026 by rpki-client