$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/debdf6c7-81b5-37a8-9d67-848a65563f4a.roa File: debdf6c7-81b5-37a8-9d67-848a65563f4a.roa (raw, json) Hash identifier: jWnPFi4PKhqZBXmdHtVL4Q7QcaBK02w3ld8Us52cjW4= Subject key identifier: EE:AD:35:BC:BD:50:31:B5:8D:21:2A:28:A6:57:A6:6F:67:AD:19:78 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EF1820419F83095B630314EB4 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/debdf6c7-81b5-37a8-9d67-848a65563f4a.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 55256 IP address blocks: 158.95.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:04:19:f8:30:95:b6:30:31:4e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=4927208f-4e60-45b7-a0c6-33c8cf709911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:be:e0:d0:87:e1:4a:05:57:b2:36:70:d0: 6b:23:5a:2a:7d:00:7a:76:46:88:ac:14:46:3d:70: b0:80:53:c9:0a:1a:81:84:c4:5e:13:2e:8b:29:4c: 74:1a:0e:d2:b0:e1:e7:72:0f:8b:e6:9d:c5:9c:b8: 27:86:a6:31:17:82:20:3d:b5:84:ac:b7:a7:ac:90: 7d:3f:63:9e:4d:7f:ea:44:9f:6a:65:70:f6:63:1a: 49:d5:98:57:da:f8:51:72:ca:5d:c0:bb:1f:7f:a1: 9d:d5:8e:00:92:33:16:19:01:34:87:ad:20:45:47: 48:b9:63:8a:6a:a1:ec:ec:c0:2c:3b:92:55:a7:38: 45:a0:5f:f1:4c:70:bc:bf:f8:c5:09:50:69:50:39: 1a:94:62:c5:5e:65:d6:a0:7d:32:be:31:35:29:5d: a8:97:4d:4d:38:36:fb:15:ce:1c:7a:09:22:dc:28: d7:17:76:05:81:da:8e:d0:9d:88:22:2c:25:7a:ce: 72:be:d7:11:ab:19:7a:59:88:7e:ca:91:14:f0:cd: 2b:87:fe:da:c7:ca:7a:52:5c:b3:b8:1e:c0:6d:af: e7:01:d9:5f:e7:53:37:d2:c5:be:62:ef:a0:38:17: 82:fd:5e:5f:80:9b:08:4e:0c:08:d9:13:2b:56:14: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AD:35:BC:BD:50:31:B5:8D:21:2A:28:A6:57:A6:6F:67:AD:19:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/debdf6c7-81b5-37a8-9d67-848a65563f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:06:f5:fa:60:04:a0:8c:73:ff:0d:aa:3a:5b:48:33:ab:20: c1:ce:d6:43:8d:1b:1f:6a:c3:55:c8:30:e1:12:6b:0b:75:2a: e9:3e:5e:0f:87:7f:6e:b4:04:05:e2:ec:63:f0:d6:ad:a9:68: 8d:98:46:9b:31:53:dc:39:1d:79:b2:7b:50:a1:4e:4a:ba:ef: d8:10:55:16:cf:79:b8:ec:fe:94:7a:87:c5:0d:03:af:e8:e8: 7d:68:c9:45:19:cd:2a:41:19:9d:4c:15:d3:a2:83:c0:e2:43: 1c:73:e1:67:5a:81:70:fc:ef:af:e7:60:6b:52:0b:45:ef:f5: a8:0f:b2:fb:cd:70:c9:bd:4f:4e:85:f0:d3:e9:3e:d5:1f:06: 49:57:2a:95:e1:fb:3a:e9:b4:9e:a6:94:e1:d2:28:f0:31:fd: b6:3c:57:29:38:3d:10:25:8c:03:4f:6e:45:92:0e:75:89:5c: e0:c9:d5:b6:40:28:ef:c3:f3:2e:b6:23:44:f2:4f:43:bd:da: 7a:d4:c9:f5:21:4b:d4:42:9b:6c:15:bf:fb:e7:bf:92:fe:86: 0d:3c:e4:18:bc:f2:98:ad:ca:a9:28:2b:bb:34:dc:ea:8a:7c: a4:43:e1:2d:11:99:d6:ae:29:c3:af:9e:9d:fd:bf:8b:78:eb: ef:15:a3:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggQZ+DCVtjAxTrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NDkyNzIwOGYtNGU2MC00NWI3LWEwYzYtMzNjOGNmNzA5OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWq+4NCH4UoFV7I2cNBrI1oqfQB6dkaIrBRG PXCwgFPJChqBhMReEy6LKUx0Gg7SsOHncg+L5p3FnLgnhqYxF4IgPbWErLenrJB9 P2OeTX/qRJ9qZXD2YxpJ1ZhX2vhRcspdwLsff6Gd1Y4AkjMWGQE0h60gRUdIuWOK aqHs7MAsO5JVpzhFoF/xTHC8v/jFCVBpUDkalGLFXmXWoH0yvjE1KV2ol01NODb7 Fc4cegki3CjXF3YFgdqO0J2IIiwles5yvtcRqxl6WYh+ypEU8M0rh/7ax8p6Ulyz uB7Aba/nAdlf51M30sW+Yu+gOBeC/V5fgJsITgwI2RMrVhTUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6tNby9UDG1jSEqKKZXpm9nrRl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZGViZGY2YzctODFiNS0z N2E4LTlkNjctODQ4YTY1NTYzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYG9fpgBKCMc/8NqjpbSDOrIMHO1kONGx9qw1XIMOESawt1Kuk+Xg+H f260BAXi7GPw1q2paI2YRpsxU9w5HXmye1ChTkq679gQVRbPebjs/pR6h8UNA6/o 6H1oyUUZzSpBGZ1MFdOig8DiQxxz4WdagXD876/nYGtSC0Xv9agPsvvNcMm9T06F 8NPpPtUfBklXKpXh+zrptJ6mlOHSKPAx/bY8Vyk4PRAljANPbkWSDnWJXODJ1bZA KO/D8y62I0TyT0O92nrUyfUhS9RCm2wVv/vnv5L+hg085Bi88pityqkoK7s03OqK fKRD4S0RmdauKcOvnp39v4t46+8Vo3A= -----END CERTIFICATE-----Generated at Tue Sep 22 15:08:54 2026 by rpki-client