$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ffaa25ad-b7a2-3847-b743-86fe47ea6a8d.roa File: ffaa25ad-b7a2-3847-b743-86fe47ea6a8d.roa (raw, json) Hash identifier: awtDYqukDhxWKpAZNct1P3m+0RPzxCcSqTYK2uIDhPY= Subject key identifier: AF:07:C5:A0:3D:AE:B5:8D:FC:88:7F:22:08:E6:80:67:3E:AF:49:D8 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584F331D1F28EE95FCBD21D51200 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ffaa25ad-b7a2-3847-b743-86fe47ea6a8d.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 55256 IP address blocks: 158.95.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1f:28:ee:95:fc:bd:21:d5:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=71ecbf74-4e59-4968-925b-9ab5c0dbe1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:10:be:6d:17:ea:b7:c3:6d:57:b4:35:5e: 3e:ac:2f:07:e8:26:70:9d:a7:aa:4c:06:ed:d9:c2: 13:80:66:78:ef:00:60:d9:d6:a8:79:e2:0b:16:62: 8c:2b:df:db:4e:45:f2:5e:8b:5a:45:c0:32:22:bd: 4c:6c:1e:72:eb:3b:29:b8:a1:79:dd:65:14:7a:ff: ef:ef:c0:d2:a1:16:aa:5b:3d:88:5f:04:f3:b4:25: 14:dc:b0:bb:83:5b:bc:4a:f5:1c:f9:59:56:d0:c4: 6b:9f:72:46:8e:52:81:03:5f:9b:c9:af:38:ed:55: 87:c2:1c:04:1b:2e:20:65:09:af:7f:4d:e4:56:71: 4c:79:ba:58:75:ea:b3:5a:30:cd:14:f4:41:6d:c9: ec:40:57:09:6f:4c:79:10:c0:d8:3a:22:5c:36:cf: 78:2d:a2:65:48:72:b0:3b:5a:78:7f:74:30:b7:23: 84:b6:f8:80:4a:16:42:14:f6:cb:16:c4:74:f1:05: b6:e6:5c:10:99:38:83:c6:57:c0:b6:d9:53:77:cf: c9:c3:34:41:ba:ed:5d:92:fb:dc:f5:96:bf:a8:9d: 93:c3:48:98:d4:9a:49:63:9a:22:3f:f9:c7:53:56: d4:d2:4a:b9:95:1f:9b:19:64:41:ba:23:33:4b:78: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:07:C5:A0:3D:AE:B5:8D:FC:88:7F:22:08:E6:80:67:3E:AF:49:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ffaa25ad-b7a2-3847-b743-86fe47ea6a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5d:4b:e9:68:fc:c4:09:35:d0:4e:40:86:4b:ef:dc:db:58: 40:c6:20:3f:6d:49:1b:4b:a2:d2:c5:c5:23:e7:64:3f:19:ca: ff:32:b6:3a:8e:ee:ae:30:e0:93:be:92:41:97:2f:87:63:5c: 2d:51:51:32:49:53:58:bd:49:c6:bd:25:ce:4c:b8:98:e6:9f: 8e:30:5f:84:38:ad:64:e1:50:54:7b:16:e9:90:6c:64:b9:a5: 0c:8d:f9:7f:38:fb:80:f0:20:0f:1a:9f:0f:c6:e8:70:35:11: 70:d6:4b:18:78:82:20:5d:85:05:92:7c:7b:ed:41:ec:b5:0c: 1e:e4:df:3a:81:36:7a:c4:8b:4c:9a:2a:06:74:ac:23:6d:20: 47:19:84:12:ab:e7:d2:7f:6e:9a:87:04:29:20:8d:df:3e:3c: 67:35:37:9e:a0:ac:00:eb:7e:de:bc:68:53:ae:c0:ee:6b:d3: 57:26:d3:ba:47:89:4a:f4:fd:d6:43:d1:65:0e:77:54:5c:bc: 9b:4a:84:9f:ee:42:d9:78:b6:bc:1c:c3:e5:74:86:56:8a:fe: bd:a0:b1:dc:08:28:34:de:54:37:ad:ba:45:96:08:59:b6:65: af:24:1f:c1:2f:00:5d:7f:12:65:8e:52:2d:d7:5d:a2:5a:31: fc:7e:87:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHR8o7pX8vSHVEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NzFlY2JmNzQtNGU1OS00OTY4LTkyNWItOWFiNWMwZGJlMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC4Qvm0X6rfDbVe0NV4+rC8H6CZwnaeqTAbt 2cITgGZ47wBg2daoeeILFmKMK9/bTkXyXotaRcAyIr1MbB5y6zspuKF53WUUev/v 78DSoRaqWz2IXwTztCUU3LC7g1u8SvUc+VlW0MRrn3JGjlKBA1+bya847VWHwhwE Gy4gZQmvf03kVnFMebpYdeqzWjDNFPRBbcnsQFcJb0x5EMDYOiJcNs94LaJlSHKw O1p4f3QwtyOEtviAShZCFPbLFsR08QW25lwQmTiDxlfAttlTd8/JwzRBuu1dkvvc 9Za/qJ2Tw0iY1JpJY5oiP/nHU1bU0kq5lR+bGWRBuiMzS3grKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8HxaA9rrWN/Ih/IgjmgGc+r0nYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZmZhYTI1YWQtYjdhMi0z ODQ3LWI3NDMtODZmZTQ3ZWE2YThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJdS+lo/MQJNdBOQIZL79zbWEDGID9tSRtLotLFxSPnZD8Zyv8ytjqO 7q4w4JO+kkGXL4djXC1RUTJJU1i9Sca9Jc5MuJjmn44wX4Q4rWThUFR7FumQbGS5 pQyN+X84+4DwIA8anw/G6HA1EXDWSxh4giBdhQWSfHvtQey1DB7k3zqBNnrEi0ya KgZ0rCNtIEcZhBKr59J/bpqHBCkgjd8+PGc1N56grADrft68aFOuwO5r01cm07pH iUr0/dZD0WUOd1RcvJtKhJ/uQtl4trwcw+V0hlaK/r2gsdwIKDTeVDetukWWCFm2 Za8kH8EvAF1/EmWOUi3XXaJaMfx+h2Y= -----END CERTIFICATE-----Generated at Tue Sep 22 00:18:04 2026 by rpki-client