$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa File: d354875b-a314-3eb2-8777-47884d0ed9ad.roa (raw, json) Hash identifier: b80QIydtJSgF2SqtP/16khNDSeg9y8Pis14AaP5YS9U= Subject key identifier: BD:C5:32:0F:52:7F:11:DD:6D:8A:21:E7:11:A4:4C:1B:4E:0E:EF:17 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EF181FD06483C107B8E0F9B00 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 55256 IP address blocks: 158.95.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:81:fd:06:48:3c:10:7b:8e:0f:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=f3fd4e19-8ecd-4f14-8b02-d7dc914837ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a2:17:a0:a1:70:3b:28:c3:de:86:ec:fd:95: aa:6f:8d:05:40:f3:47:87:1a:59:4a:c8:26:78:6f: f5:c0:cd:a0:6c:b0:cb:eb:c5:87:e3:08:82:1b:5d: 0c:ea:0f:ec:80:fd:a1:34:c6:49:f3:e6:46:83:4a: 47:9a:56:a8:e2:96:39:d0:01:e2:c7:86:40:82:43: 76:5f:30:82:ec:18:b2:70:e2:c1:0c:fd:34:a8:1f: 4d:1a:67:b4:12:1d:19:d2:01:6c:6a:87:df:59:6a: 26:1b:3d:27:06:c5:ae:b3:ab:ce:7e:48:18:be:82: 7b:d6:90:da:b4:a8:11:ee:9d:70:9e:32:d9:51:24: 0c:00:4f:c0:78:b8:89:8c:73:c7:59:9b:dc:bf:c0: 61:27:68:e3:91:63:13:46:cd:f3:cc:c4:8c:58:17: b9:ff:ae:a0:9a:f1:4d:c0:3b:d1:bd:f8:1a:6b:77: 88:61:70:d6:22:0e:b8:da:5f:36:12:71:e0:62:96: 63:a3:41:3e:2f:e6:7e:44:6d:b1:25:66:70:4a:f5: 21:a6:f6:97:4d:3c:11:85:73:2f:f9:85:e1:aa:5b: bf:c3:36:17:de:f7:53:97:06:d7:df:83:2f:51:2a: fe:06:29:e6:94:49:88:12:e7:0c:d3:f0:da:34:99: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C5:32:0F:52:7F:11:DD:6D:8A:21:E7:11:A4:4C:1B:4E:0E:EF:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d354875b-a314-3eb2-8777-47884d0ed9ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:bf:ee:85:4a:91:e3:f6:18:e3:44:5c:2e:15:0b:13:62:e5: 91:96:6e:7e:b5:ed:b2:e2:fc:0b:f0:e6:95:a5:11:bd:66:08: b3:44:cc:e3:f0:c8:59:4a:57:bc:c5:84:26:75:f1:06:e7:0e: c5:eb:eb:06:c3:93:a6:5c:02:5e:6e:aa:11:bc:bf:64:ca:27: d9:ea:e1:1c:ec:77:a7:e7:30:26:76:75:33:ee:0e:99:12:fa: c3:bc:1f:8e:be:45:c2:6e:7e:4d:bb:1a:19:67:d4:38:63:77: 5b:b5:36:f2:65:00:3a:84:91:3d:c0:6a:1b:45:d9:9f:5d:50: 36:8f:70:05:91:bb:47:80:86:3e:be:6d:1a:d6:f2:b3:78:bc: 70:bb:f5:d0:2e:6f:30:78:09:cd:b7:82:a4:9a:af:fc:8f:a4: ac:ce:ae:29:4f:c4:07:2d:83:c7:7a:fe:25:27:2e:0f:21:86: 2c:b3:b2:f7:ae:ec:8a:9d:e4:48:be:c4:b7:bb:03:95:30:e5: c5:42:e0:61:74:81:88:d1:7e:73:ec:e0:d9:63:1c:f6:a2:02: 99:87:69:ad:dc:31:85:e1:87:28:24:80:42:8e:18:7e:7f:b8: c8:5b:09:91:db:8e:4f:23:c5:63:60:94:7f:86:ef:05:06:78: 3a:1c:3d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgf0GSDwQe44PmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZjNmZDRlMTktOGVjZC00ZjE0LThiMDItZDdkYzkxNDgzN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6IXoKFwOyjD3obs/ZWqb40FQPNHhxpZSsgm eG/1wM2gbLDL68WH4wiCG10M6g/sgP2hNMZJ8+ZGg0pHmlao4pY50AHix4ZAgkN2 XzCC7BiycOLBDP00qB9NGme0Eh0Z0gFsaoffWWomGz0nBsWus6vOfkgYvoJ71pDa tKgR7p1wnjLZUSQMAE/AeLiJjHPHWZvcv8BhJ2jjkWMTRs3zzMSMWBe5/66gmvFN wDvRvfgaa3eIYXDWIg642l82EnHgYpZjo0E+L+Z+RG2xJWZwSvUhpvaXTTwRhXMv +YXhqlu/wzYX3vdTlwbX34MvUSr+BinmlEmIEucM0/DaNJlhjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3FMg9SfxHdbYoh5xGkTBtODu8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZDM1NDg3NWItYTMxNC0z ZWIyLTg3NzctNDc4ODRkMGVkOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe/7oVKkeP2GONEXC4VCxNi5ZGWbn617bLi/Avw5pWlEb1mCLNEzOPw yFlKV7zFhCZ18QbnDsXr6wbDk6ZcAl5uqhG8v2TKJ9nq4Rzsd6fnMCZ2dTPuDpkS +sO8H46+RcJufk27Ghln1Dhjd1u1NvJlADqEkT3AahtF2Z9dUDaPcAWRu0eAhj6+ bRrW8rN4vHC79dAubzB4Cc23gqSar/yPpKzOrilPxActg8d6/iUnLg8hhiyzsveu 7Iqd5Ei+xLe7A5Uw5cVC4GF0gYjRfnPs4NljHPaiApmHaa3cMYXhhygkgEKOGH5/ uMhbCZHbjk8jxWNglH+G7wUGeDocPXw= -----END CERTIFICATE-----Generated at Tue Sep 22 03:18:19 2026 by rpki-client