$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d77e2b87-86ab-3be8-9fcf-110e16befa6e.roa File: d77e2b87-86ab-3be8-9fcf-110e16befa6e.roa (raw, json) Hash identifier: ePnn/QFytk32cUe83X2eRXkhlfer/yJu7CLPRb0RSDc= Subject key identifier: 55:7C:F4:06:77:EA:21:F8:36:93:D8:9A:31:73:55:5F:51:D2:F9:08 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD94CD43B9D574C330676FA8 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d77e2b87-86ab-3be8-9fcf-110e16befa6e.roa Signing time: Wed 29 Oct 2025 02:42:22 +0000 ROA not before: Wed 29 Oct 2025 02:42:22 +0000 ROA not after: Tue 27 Jan 2026 03:42:22 +0000 asID: 55256 IP address blocks: 158.95.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:94:cd:43:b9:d5:74:c3:30:67:6f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:42:22 2025 GMT Not After : Jan 27 03:42:22 2026 GMT Subject: CN=8b9a5668-e113-44b5-8174-29ae5a09b35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:cc:16:34:32:70:12:c4:3c:3f:47:2a:07: 00:3c:16:c6:ff:ee:09:c2:d6:4c:bf:ac:e9:6f:a7: 8f:d1:30:88:b1:8d:cf:83:6a:f4:52:34:f7:c8:2d: ac:51:8a:19:fb:e2:fa:af:01:ef:af:2e:fa:5e:33: 01:88:61:77:63:e0:97:2f:2e:02:d6:fa:2b:3e:99: 8c:3d:bc:74:80:81:f3:c6:20:40:50:b5:28:38:d0: 8f:1e:96:f3:2e:9c:83:e6:4d:00:82:c4:ce:a0:6b: 66:7d:a7:40:98:a7:74:c3:79:94:0b:4f:3b:c4:44: 9d:71:76:14:30:0e:f5:0a:27:df:52:2f:72:40:a6: 63:ab:74:fd:d5:60:84:1d:44:6e:b1:b9:f3:23:5e: 40:ce:89:fb:fc:31:c3:a4:d3:ae:71:01:4b:03:5f: 8d:b4:11:c9:9b:1a:73:5d:e0:40:ca:a2:4d:5b:c5: 9b:ab:32:23:0d:6b:7f:39:6a:b6:48:80:7c:83:f5: c9:4d:d1:a6:8f:cd:3d:ca:52:c0:00:77:18:ac:f1: 10:f0:3e:0a:ba:de:49:ba:37:fc:61:60:b5:28:5a: 40:f3:59:df:75:d8:ad:b8:08:10:1b:35:1f:5a:a2: 57:44:85:d8:57:b1:d2:2c:9e:15:a2:b1:22:87:de: ab:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:F4:06:77:EA:21:F8:36:93:D8:9A:31:73:55:5F:51:D2:F9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d77e2b87-86ab-3be8-9fcf-110e16befa6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:61:67:5a:b5:ad:ae:ad:09:f1:fc:71:dd:41:2c:08:17:59: 80:64:da:30:a4:79:7b:69:95:21:52:ef:e6:06:ba:76:66:1e: f2:d9:7c:53:e1:39:2d:82:ca:48:3f:86:f5:60:e1:9d:20:f8: 83:94:72:13:36:94:08:e9:61:ba:fd:09:ed:2e:8d:13:f9:66: a3:92:b6:01:c4:55:61:6c:7e:a6:fd:51:b8:08:9c:68:45:cd: 52:15:6a:42:7b:f5:25:4c:97:8b:d7:a3:53:7f:22:20:27:f0: 03:7c:47:b1:7f:2d:9b:bd:25:c9:01:a6:2f:94:0c:d2:a4:08: ab:93:e1:7e:49:00:78:7f:d6:46:4f:8a:fd:52:69:cd:ff:7d: fb:71:64:b4:f2:8f:16:f7:ca:24:56:9e:93:50:47:51:5c:e6: 3b:05:8e:f7:b9:05:1b:a2:b4:6a:bc:43:07:54:da:bb:87:b4: 3b:11:f5:e7:e2:a0:91:c0:e5:84:d6:97:89:84:ec:08:67:f9: 8c:00:d6:fc:7c:89:5d:e0:a5:23:b5:89:54:f9:05:27:4e:64: 77:58:b5:3e:f9:e6:ee:aa:d6:00:ef:f3:bc:ee:be:d9:ef:7e: 91:d8:87:fb:df:c3:7e:ec:34:a0:25:cb:0e:ac:74:b6:69:f0: 96:c0:16:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutlM1DudV0wzBnb6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyNDIyMloXDTI2MDEyNzAzNDIyMlowLzEtMCsGA1UEAxMk OGI5YTU2NjgtZTExMy00NGI1LTgxNzQtMjlhZTVhMDliMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmTMFjQycBLEPD9HKgcAPBbG/+4JwtZMv6zp b6eP0TCIsY3Pg2r0UjT3yC2sUYoZ++L6rwHvry76XjMBiGF3Y+CXLy4C1vorPpmM Pbx0gIHzxiBAULUoONCPHpbzLpyD5k0AgsTOoGtmfadAmKd0w3mUC087xESdcXYU MA71CiffUi9yQKZjq3T91WCEHURusbnzI15Azon7/DHDpNOucQFLA1+NtBHJmxpz XeBAyqJNW8WbqzIjDWt/OWq2SIB8g/XJTdGmj809ylLAAHcYrPEQ8D4Kut5Jujf8 YWC1KFpA81nfddituAgQGzUfWqJXRIXYV7HSLJ4VorEih96rkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV89AZ36iH4NpPYmjFzVV9R0vkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZDc3ZTJiODctODZhYi0z YmU4LTlmY2YtMTEwZTE2YmVmYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNhZ1q1ra6tCfH8cd1BLAgXWYBk2jCkeXtplSFS7+YGunZmHvLZfFPh OS2Cykg/hvVg4Z0g+IOUchM2lAjpYbr9Ce0ujRP5ZqOStgHEVWFsfqb9UbgInGhF zVIVakJ79SVMl4vXo1N/IiAn8AN8R7F/LZu9JckBpi+UDNKkCKuT4X5JAHh/1kZP iv1Sac3/fftxZLTyjxb3yiRWnpNQR1Fc5jsFjve5BRuitGq8QwdU2ruHtDsR9efi oJHA5YTWl4mE7Ahn+YwA1vx8iV3gpSO1iVT5BSdOZHdYtT755u6q1gDv87zuvtnv fpHYh/vfw37sNKAlyw6sdLZp8JbAFgE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:52:13 2025 by rpki-client