$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/49bf374d-e63e-39dd-a37a-5a618aeea825.roa File: 49bf374d-e63e-39dd-a37a-5a618aeea825.roa (raw, json) Hash identifier: Xf0fXieHrWFbCOyVx439ap+Xc+sOmEOgV2fKmFTlfMI= Subject key identifier: 88:12:5F:FE:19:3F:D0:37:AD:FC:44:3C:34:AC:95:8D:F9:73:59:17 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584B8C42FAFA2AA42F744AAACA80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/49bf374d-e63e-39dd-a37a-5a618aeea825.roa Signing time: Fri 17 Oct 2025 04:15:50 +0000 ROA not before: Fri 17 Oct 2025 04:15:50 +0000 ROA not after: Thu 15 Jan 2026 05:15:50 +0000 asID: 55256 IP address blocks: 158.95.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8c:42:fa:fa:2a:a4:2f:74:4a:aa:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 17 04:15:50 2025 GMT Not After : Jan 15 05:15:50 2026 GMT Subject: CN=6f8cf5f6-225b-41be-a110-c9f6a666577b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:60:b2:64:26:25:97:e5:9c:8b:87:e8:4d: 6e:26:97:f7:1d:f6:46:5d:96:43:44:82:2a:c7:06: 2d:46:db:5d:60:54:e7:5a:c5:ec:11:6a:60:dd:69: 3c:87:8f:71:3f:ef:dc:4c:42:58:80:db:11:8d:ea: 6d:b0:1f:d8:d0:94:e9:27:3c:87:86:10:e7:ec:b9: 52:92:9d:3c:94:ba:ac:94:c0:86:cb:c2:1b:d0:85: 41:72:b4:a0:4b:32:93:7e:90:12:4e:d8:33:82:75: 00:d0:7f:e5:2e:25:d3:26:d3:5b:26:09:e9:e5:81: 19:a3:b7:d7:93:3c:b7:8a:bc:54:46:00:b7:eb:b0: fa:5c:2b:98:0c:d3:63:4d:93:a5:15:80:d9:20:78: 21:89:be:ef:66:41:ee:ee:8b:27:35:dc:8b:7e:50: f7:e9:3f:a5:ee:46:68:d4:c7:1e:9c:64:e0:c5:20: 73:e8:b4:04:3b:bf:0a:1c:bb:16:f7:99:01:44:03: 24:a3:aa:d0:b4:ee:7a:ac:df:42:9c:a5:04:e1:01: 44:12:bb:16:a8:c2:f6:11:07:87:71:28:b6:90:5a: c3:36:cf:c5:54:61:fc:64:ad:bf:61:30:92:44:fd: 14:3b:3e:ce:97:72:67:24:15:41:76:e8:00:5e:54: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:12:5F:FE:19:3F:D0:37:AD:FC:44:3C:34:AC:95:8D:F9:73:59:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/49bf374d-e63e-39dd-a37a-5a618aeea825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c0:ca:b6:7c:69:82:f8:09:55:1c:16:75:69:1a:b3:b4:6f: e7:24:1e:a3:9f:c3:b9:3a:b0:c5:b5:d8:ac:10:48:9a:f8:97: 6b:fa:d2:72:0f:7f:b0:75:a2:a0:f5:0e:9a:13:e6:59:60:aa: 8a:f4:00:1c:15:91:11:72:a6:df:22:0f:c3:38:34:fb:77:e4: 6b:88:9a:19:6b:cf:b3:fb:2c:6d:18:6e:6c:73:c0:1e:2c:4a: 3a:11:bf:8c:28:10:cf:81:0f:6a:d1:77:c9:40:7e:3f:f0:25: 92:c1:60:4d:1b:00:68:9d:2f:2e:6f:a6:fa:65:03:23:67:05: 7a:e8:96:f5:af:4d:e3:86:e5:83:e4:36:98:bd:ba:88:87:fa: 6d:88:62:f0:10:45:57:9b:f1:ed:e6:d0:c1:80:2e:d6:1f:33: 85:f0:cc:0c:20:2c:5a:e9:ba:76:66:3a:8f:f2:26:5f:ec:57: 44:a5:a8:7c:7e:44:c9:02:9c:56:d9:d0:76:08:ab:eb:e1:e2: f6:bd:2f:cd:3c:3f:cb:56:25:54:ff:27:e9:ce:f3:da:2e:91: ed:ed:24:00:bc:84:10:a8:54:da:86:7e:10:63:dd:ae:31:c0: 13:d4:c2:48:87:8f:fb:70:2c:e3:9e:47:0a:62:af:e7:1d:0f: aa:a9:7d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuMQvr6KqQvdEqqyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAxNzA0MTU1MFoXDTI2MDExNTA1MTU1MFowLzEtMCsGA1UEAxMk NmY4Y2Y1ZjYtMjI1Yi00MWJlLWExMTAtYzlmNmE2NjY1NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5gsmQmJZflnIuH6E1uJpf3HfZGXZZDRIIq xwYtRttdYFTnWsXsEWpg3Wk8h49xP+/cTEJYgNsRjeptsB/Y0JTpJzyHhhDn7LlS kp08lLqslMCGy8Ib0IVBcrSgSzKTfpASTtgzgnUA0H/lLiXTJtNbJgnp5YEZo7fX kzy3irxURgC367D6XCuYDNNjTZOlFYDZIHghib7vZkHu7osnNdyLflD36T+l7kZo 1McenGTgxSBz6LQEO78KHLsW95kBRAMko6rQtO56rN9CnKUE4QFEErsWqML2EQeH cSi2kFrDNs/FVGH8ZK2/YTCSRP0UOz7Ol3JnJBVBdugAXlR8PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgSX/4ZP9A3rfxEPDSslY35c1kXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvNDliZjM3NGQtZTYzZS0z OWRkLWEzN2EtNWE2MThhZWVhODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDAyrZ8aYL4CVUcFnVpGrO0b+ckHqOfw7k6sMW12KwQSJr4l2v60nIP f7B1oqD1DpoT5llgqor0ABwVkRFypt8iD8M4NPt35GuImhlrz7P7LG0YbmxzwB4s SjoRv4woEM+BD2rRd8lAfj/wJZLBYE0bAGidLy5vpvplAyNnBXrolvWvTeOG5YPk Npi9uoiH+m2IYvAQRVeb8e3m0MGALtYfM4XwzAwgLFrpunZmOo/yJl/sV0SlqHx+ RMkCnFbZ0HYIq+vh4va9L808P8tWJVT/J+nO89ouke3tJAC8hBCoVNqGfhBj3a4x wBPUwkiHj/twLOOeRwpir+cdD6qpfQ0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:45 2025 by rpki-client