$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d77e2b87-86ab-3be8-9fcf-110e16befa6e.roa File: d77e2b87-86ab-3be8-9fcf-110e16befa6e.roa (raw, json) Hash identifier: WnorS10G65MUhjkHuxkNRgmAzSy89b/FFCXifQDOKJs= Subject key identifier: CF:FE:B8:15:86:B2:85:E7:BE:91:83:CA:53:15:47:FC:11:8E:CA:1C Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D6EDA901C0B30C76BBB046280 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d77e2b87-86ab-3be8-9fcf-110e16befa6e.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 55256 IP address blocks: 158.95.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:90:1c:0b:30:c7:6b:bb:04:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=505e16d8-2983-4ad3-9ed1-085a40819dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:05:18:6c:4e:2b:1a:c3:cf:1a:49:32:19: ca:df:56:0e:c0:86:7b:fc:e4:e5:cf:c4:11:f9:75: ab:f9:1f:a0:68:5b:d7:73:f0:d7:62:55:a4:0c:95: 02:bf:91:81:bc:a7:93:bc:1e:79:71:b9:be:b1:af: 11:41:98:e5:61:5b:79:0a:7a:72:82:55:fa:61:ac: af:da:bf:e7:fb:83:32:41:02:d7:63:81:02:42:a0: fb:cc:08:06:e0:f2:38:ae:bc:8e:06:17:3a:8b:9e: 42:80:89:18:99:80:7c:18:9e:e1:ca:85:50:f5:a9: a9:98:7c:55:e6:e9:66:84:0c:94:5c:7f:4e:3f:15: 40:78:0c:4d:94:83:a3:eb:b6:95:97:38:57:3e:ca: f4:22:d0:03:3e:09:5d:af:6f:7c:45:22:58:81:11: a3:ba:a9:21:c2:38:6c:5c:85:55:15:db:6d:8b:e9: 67:a2:34:56:8b:ad:5a:a1:c0:09:32:e7:dc:2c:79: 60:c8:c5:0d:63:0c:3d:e5:63:81:ac:cc:3c:67:52: a9:21:d1:60:64:29:ec:fb:6d:ba:67:55:32:05:1d: f6:98:e0:d2:0c:53:f5:58:a5:61:70:21:85:05:ef: 0c:26:c2:28:ff:19:4e:bb:7a:30:ea:7f:7d:0b:f9: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FE:B8:15:86:B2:85:E7:BE:91:83:CA:53:15:47:FC:11:8E:CA:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d77e2b87-86ab-3be8-9fcf-110e16befa6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1d:e2:74:ee:b4:d5:11:91:6b:c4:1b:51:38:78:22:1a:1a: 5a:08:c6:64:fc:04:8c:0a:1b:a7:0f:33:62:aa:f8:8e:7c:f9: 68:97:ae:a7:14:f1:3e:7c:9d:78:c6:99:c1:bb:c2:e4:f8:3c: 94:e1:8e:dd:84:39:7f:ca:2b:fc:e6:d8:cc:d0:d1:cc:0c:80: c2:3e:d8:f5:10:53:b4:74:da:be:22:4b:31:7d:bc:c7:a4:83: c5:96:8b:bf:6b:c8:cc:e7:8f:18:b8:6c:81:86:a2:22:26:30: e7:3b:4e:8d:ae:a9:fc:1a:df:51:36:0f:18:41:1b:44:7e:56: 37:6f:1f:9a:8c:13:6d:61:f9:90:ba:4e:a4:53:83:0d:4a:c3: b5:3c:8a:2b:74:ad:b2:0d:91:b9:42:d9:bf:10:b9:f9:22:ee: 84:ec:61:f6:b2:7b:0e:76:74:b2:26:97:5e:fe:e3:e5:ea:2f: 78:a4:3a:69:b3:c8:73:24:bc:39:82:24:b7:33:05:ea:d9:75: a7:17:c6:2c:1a:32:e0:c0:e9:d4:68:88:49:c3:f5:ce:96:87: 80:05:71:73:03:a0:42:0e:43:24:05:3f:5c:14:d3:46:12:9c: 1c:66:d6:79:f2:f2:b3:60:d0:f9:3d:fa:62:b9:3f:70:c0:a1: 51:28:4b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2pAcCzDHa7sEYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk NTA1ZTE2ZDgtMjk4My00YWQzLTllZDEtMDg1YTQwODE5ZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZoFGGxOKxrDzxpJMhnK31YOwIZ7/OTlz8QR +XWr+R+gaFvXc/DXYlWkDJUCv5GBvKeTvB55cbm+sa8RQZjlYVt5CnpyglX6Yayv 2r/n+4MyQQLXY4ECQqD7zAgG4PI4rryOBhc6i55CgIkYmYB8GJ7hyoVQ9ampmHxV 5ulmhAyUXH9OPxVAeAxNlIOj67aVlzhXPsr0ItADPgldr298RSJYgRGjuqkhwjhs XIVVFdtti+lnojRWi61aocAJMufcLHlgyMUNYww95WOBrMw8Z1KpIdFgZCns+226 Z1UyBR32mODSDFP1WKVhcCGFBe8MJsIo/xlOu3ow6n99C/m4iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/+uBWGsoXnvpGDylMVR/wRjsocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZDc3ZTJiODctODZhYi0z YmU4LTlmY2YtMTEwZTE2YmVmYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcd4nTutNURkWvEG1E4eCIaGloIxmT8BIwKG6cPM2Kq+I58+WiXrqcU 8T58nXjGmcG7wuT4PJThjt2EOX/KK/zm2MzQ0cwMgMI+2PUQU7R02r4iSzF9vMek g8WWi79ryMznjxi4bIGGoiImMOc7To2uqfwa31E2DxhBG0R+VjdvH5qME21h+ZC6 TqRTgw1Kw7U8iit0rbINkblC2b8Qufki7oTsYfayew52dLIml17+4+XqL3ikOmmz yHMkvDmCJLczBerZdacXxiwaMuDA6dRoiEnD9c6Wh4AFcXMDoEIOQyQFP1wU00YS nBxm1nny8rNg0Pk9+mK5P3DAoVEoS0U= -----END CERTIFICATE-----Generated at Fri Apr 17 06:44:15 2026 by rpki-client