$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa File: 3831ba34-dfac-3ed1-9620-7655233ff882.roa (raw, json) Hash identifier: Cr3pYTnKpVEibcu/sg2h0apLDxHSuld//AhxIx/YSes= Subject key identifier: C3:52:CB:69:45:79:9C:8A:90:31:2A:A2:31:75:AE:CA:B8:0F:61:55 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D0ECFDBB3CA00D4D832667D00 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa Signing time: Wed 04 Mar 2026 15:21:42 +0000 ROA not before: Wed 04 Mar 2026 15:21:42 +0000 ROA not after: Tue 02 Jun 2026 14:21:42 +0000 asID: 55256 IP address blocks: 158.95.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:cf:db:b3:ca:00:d4:d8:32:66:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Mar 4 15:21:42 2026 GMT Not After : Jun 2 14:21:42 2026 GMT Subject: CN=80f519df-6edc-421c-a995-78ecfaca0a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:87:89:40:2c:9c:62:22:60:55:e9:53:93:21: cf:e2:2e:ef:5d:ea:cf:37:47:2d:e2:6d:c2:b0:0a: bb:3b:a0:cd:0c:47:b6:aa:40:97:3b:48:3a:a7:be: 5b:15:3e:3b:04:da:a6:22:62:e2:98:f6:7b:91:63: 1d:bb:37:4b:ae:8d:cb:f6:39:3e:67:c6:c1:3f:64: f7:fa:f5:7b:cf:02:80:94:c1:f7:a7:89:0c:37:22: 95:2c:51:55:76:a2:a0:aa:98:9e:0c:b0:79:0f:ac: 4e:33:dd:10:2e:20:0d:7f:60:cb:71:f1:9a:62:ff: 93:85:7e:96:3b:b0:db:f9:45:a7:ff:bd:98:54:46: 0d:0c:66:fc:4d:d1:19:32:48:6c:d5:34:54:4d:b6: 6a:27:48:e2:46:a0:21:05:15:39:6a:c2:ac:32:85: 0c:76:9c:df:ce:d9:3a:60:a1:8c:06:61:98:58:86: 83:07:5e:75:5a:da:70:a3:77:04:19:a4:3d:2d:57: 8f:15:ef:43:be:a9:14:58:42:99:1f:dc:97:05:7f: bf:f5:27:25:11:07:0c:1e:6d:60:1c:62:39:e3:3b: 56:df:c9:21:5e:8f:d6:1b:59:11:14:4d:94:05:d9: ff:84:5d:90:87:90:86:c2:61:fd:30:50:fd:48:59: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:52:CB:69:45:79:9C:8A:90:31:2A:A2:31:75:AE:CA:B8:0F:61:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e4:3c:d6:5d:31:46:ca:06:74:0e:5d:cf:ed:3f:dd:2c:06: 6d:7d:f9:e3:b1:35:b5:99:68:d5:a0:d8:84:90:3a:11:87:a0: b9:49:78:e7:6a:e3:00:7e:41:93:2a:3f:af:14:82:37:cc:f6: 9b:21:82:82:56:7d:78:c5:33:a3:c0:96:26:2e:3c:03:f6:4e: 07:1c:47:8a:e1:4f:ea:f4:c5:ad:2b:8b:12:7b:26:7d:99:e7: 1b:43:36:e7:59:f2:1a:89:52:a4:62:18:60:16:1e:ee:e4:86: eb:d0:36:83:54:b6:25:a8:69:7d:d1:77:2d:cc:e7:fe:be:c7: f9:ba:60:62:ff:fb:c4:ac:2c:6c:7a:9c:35:77:b4:0f:93:b7: cc:0f:1c:bb:9f:53:85:e5:82:4c:0c:2c:55:81:ed:70:f2:24: 98:42:b2:3d:0e:d3:a2:2b:b6:eb:70:4c:79:69:ce:f9:9f:74: a6:49:54:1e:2a:9e:94:7f:7a:06:2e:41:f8:ca:f9:b4:fc:43: 46:13:3d:c2:3c:a7:4c:75:84:fa:7e:c0:b7:66:d2:b4:95:90: cb:ab:c2:42:c2:d8:8f:82:00:55:47:79:17:76:09:73:28:16: ee:46:b8:e6:b6:17:1a:6c:69:80:f0:cf:42:ba:f1:1d:d2:6f: 87:2d:f2:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Oz9uzygDU2DJmfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDMwNDE1MjE0MloXDTI2MDYwMjE0MjE0MlowLzEtMCsGA1UEAxMk ODBmNTE5ZGYtNmVkYy00MjFjLWE5OTUtNzhlY2ZhY2EwYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4eJQCycYiJgVelTkyHP4i7vXerPN0ct4m3C sAq7O6DNDEe2qkCXO0g6p75bFT47BNqmImLimPZ7kWMduzdLro3L9jk+Z8bBP2T3 +vV7zwKAlMH3p4kMNyKVLFFVdqKgqpieDLB5D6xOM90QLiANf2DLcfGaYv+ThX6W O7Db+UWn/72YVEYNDGb8TdEZMkhs1TRUTbZqJ0jiRqAhBRU5asKsMoUMdpzfztk6 YKGMBmGYWIaDB151Wtpwo3cEGaQ9LVePFe9DvqkUWEKZH9yXBX+/9SclEQcMHm1g HGI54ztW38khXo/WG1kRFE2UBdn/hF2Qh5CGwmH9MFD9SFmeTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNSy2lFeZyKkDEqojF1rsq4D2FVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMzgzMWJhMzQtZGZhYy0z ZWQxLTk2MjAtNzY1NTIzM2ZmODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLkPNZdMUbKBnQOXc/tP90sBm19+eOxNbWZaNWg2ISQOhGHoLlJeOdq 4wB+QZMqP68UgjfM9pshgoJWfXjFM6PAliYuPAP2TgccR4rhT+r0xa0rixJ7Jn2Z 5xtDNudZ8hqJUqRiGGAWHu7khuvQNoNUtiWoaX3Rdy3M5/6+x/m6YGL/+8SsLGx6 nDV3tA+Tt8wPHLufU4XlgkwMLFWB7XDyJJhCsj0O06IrtutwTHlpzvmfdKZJVB4q npR/egYuQfjK+bT8Q0YTPcI8p0x1hPp+wLdm0rSVkMurwkLC2I+CAFVHeRd2CXMo Fu5GuOa2FxpsaYDwz0K68R3Sb4ct8rM= -----END CERTIFICATE-----Generated at Thu Mar 26 06:48:30 2026 by rpki-client