$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa File: 28b78652-65be-3a04-bece-bb5ab7563b1e.roa (raw, json) Hash identifier: s2EE2iAlJfqrON7FzT/lIvoUaGaUvfqsWTKqPSiDriE= Subject key identifier: D5:ED:11:04:D3:08:64:6D:99:68:0E:43:BE:A1:E8:16:A6:06:14:8F Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D107A896A071ABD70E2DF1400 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa Signing time: Thu 05 Mar 2026 05:41:24 +0000 ROA not before: Thu 05 Mar 2026 05:41:24 +0000 ROA not after: Wed 03 Jun 2026 04:41:24 +0000 asID: 55256 IP address blocks: 158.95.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:7a:89:6a:07:1a:bd:70:e2:df:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Mar 5 05:41:24 2026 GMT Not After : Jun 3 04:41:24 2026 GMT Subject: CN=1d0bb646-f8ec-4462-b603-b1d54490519a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:96:07:57:ca:2b:2a:1e:17:f7:a0:25:e5: 5f:49:88:4b:07:a6:1f:50:47:31:55:34:78:0a:83: d5:c1:ac:c2:3c:c3:5a:0c:fc:f4:66:11:78:ce:f6: d7:91:4d:6c:3c:b2:48:c1:14:28:4b:55:25:01:74: 1d:6e:79:58:aa:34:60:ae:ab:39:4d:18:6d:01:53: 2e:46:58:49:3c:a1:e1:f1:39:6f:ea:87:af:b5:6a: 6b:75:3a:7c:37:a8:33:e8:c1:ac:c9:2d:b3:20:5e: d9:6d:74:1e:5f:10:cb:e2:cd:43:c7:79:ff:53:6a: a4:31:98:3d:18:f1:c9:b4:d0:7a:05:98:ce:da:8a: 93:4f:54:ec:69:4b:1a:6e:34:dc:6c:2c:07:24:48: ab:6b:3e:44:ad:77:c6:c8:47:b7:d8:e3:63:d6:7c: 5f:5f:00:ce:4f:cf:0e:f0:c1:eb:0a:0d:f2:ac:83: dc:ef:0a:84:f1:05:74:28:a0:ce:54:8e:70:d0:1b: 8c:96:cf:92:e0:3b:da:ec:a5:5c:fb:d3:54:c5:91: 20:8b:0a:8f:e5:d9:6a:16:18:01:f2:c7:bc:ac:63: 07:e2:0c:c3:1e:37:2d:96:a0:cb:01:f4:00:b0:a4: 1a:8d:c8:6e:a3:6a:a6:ae:6e:4a:3a:ce:7b:bf:b5: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:ED:11:04:D3:08:64:6D:99:68:0E:43:BE:A1:E8:16:A6:06:14:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9e:45:08:55:8a:af:28:d6:d1:41:42:2a:40:45:2d:36:02: 4d:85:a5:fc:5d:74:1e:e3:71:43:be:ea:55:e9:42:8c:65:a4: 01:e5:e7:fb:52:d0:04:b0:44:f2:ac:31:0b:a5:3a:b1:68:d9: 67:35:7f:c9:cf:ee:6e:12:7b:28:ac:cb:14:84:4f:fd:7d:3d: 1c:69:28:f2:c1:ae:9d:56:23:47:30:c5:5d:72:3b:84:7c:1d: 7f:51:92:b2:67:dc:5b:4e:1b:66:4c:36:00:3a:30:e6:3c:46: 42:43:ca:8d:31:78:58:0a:67:71:61:f1:ea:99:35:1f:85:c5: 75:9e:66:cc:c5:ac:b0:e5:1b:f2:72:48:11:01:62:3e:7e:55: 87:ef:fe:5e:5b:d0:18:7d:fd:de:ae:31:f9:fb:0a:7a:38:34: 18:22:c8:e1:9e:a1:ff:5c:d5:a3:98:c2:af:f3:73:6e:40:25: 27:0a:be:b5:de:e7:2c:14:67:aa:16:15:58:d9:e8:8a:ee:d0: 21:b8:3e:fb:24:6a:c3:aa:4c:97:41:c8:96:ba:09:9f:ba:ef: f6:e9:70:a6:ce:87:b3:93:18:9a:5f:72:d7:08:a4:d9:f1:e6: f9:6b:91:88:23:99:55:4d:3f:53:57:62:be:a7:4f:54:31:d8: 66:90:f0:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QeolqBxq9cOLfFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDMwNTA1NDEyNFoXDTI2MDYwMzA0NDEyNFowLzEtMCsGA1UEAxMk MWQwYmI2NDYtZjhlYy00NDYyLWI2MDMtYjFkNTQ0OTA1MTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosGWB1fKKyoeF/egJeVfSYhLB6YfUEcxVTR4 CoPVwazCPMNaDPz0ZhF4zvbXkU1sPLJIwRQoS1UlAXQdbnlYqjRgrqs5TRhtAVMu RlhJPKHh8Tlv6oevtWprdTp8N6gz6MGsyS2zIF7ZbXQeXxDL4s1Dx3n/U2qkMZg9 GPHJtNB6BZjO2oqTT1TsaUsabjTcbCwHJEiraz5ErXfGyEe32ONj1nxfXwDOT88O 8MHrCg3yrIPc7wqE8QV0KKDOVI5w0BuMls+S4Dva7KVc+9NUxZEgiwqP5dlqFhgB 8se8rGMH4gzDHjctlqDLAfQAsKQajchuo2qmrm5KOs57v7VysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXtEQTTCGRtmWgOQ76h6BamBhSPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMjhiNzg2NTItNjViZS0z YTA0LWJlY2UtYmI1YWI3NTYzYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKeRQhViq8o1tFBQipARS02Ak2FpfxddB7jcUO+6lXpQoxlpAHl5/tS 0ASwRPKsMQulOrFo2Wc1f8nP7m4SeyisyxSET/19PRxpKPLBrp1WI0cwxV1yO4R8 HX9RkrJn3FtOG2ZMNgA6MOY8RkJDyo0xeFgKZ3Fh8eqZNR+FxXWeZszFrLDlG/Jy SBEBYj5+VYfv/l5b0Bh9/d6uMfn7Cno4NBgiyOGeof9c1aOYwq/zc25AJScKvrXe 5ywUZ6oWFVjZ6Iru0CG4PvskasOqTJdByJa6CZ+67/bpcKbOh7OTGJpfctcIpNnx 5vlrkYgjmVVNP1NXYr6nT1Qx2GaQ8Fo= -----END CERTIFICATE-----Generated at Thu Mar 26 09:27:10 2026 by rpki-client