$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/554b6640-b0e1-3a1b-90bb-f88e9d9c17cc.roa File: 554b6640-b0e1-3a1b-90bb-f88e9d9c17cc.roa (raw, json) Hash identifier: yIH77fgsv1FFW55ajArX4ewwIxcF5uf0gcQ7PSpe8ho= Subject key identifier: B1:8C:F0:3A:72:A1:11:EB:9C:C7:64:F9:32:33:8D:33:0A:B6:FE:80 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584B83FE996D6A05D8D7F20DDA80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/554b6640-b0e1-3a1b-90bb-f88e9d9c17cc.roa Signing time: Tue 14 Oct 2025 05:11:35 +0000 ROA not before: Tue 14 Oct 2025 05:11:35 +0000 ROA not after: Mon 12 Jan 2026 06:11:35 +0000 asID: 55256 IP address blocks: 158.95.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:fe:99:6d:6a:05:d8:d7:f2:0d:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 14 05:11:35 2025 GMT Not After : Jan 12 06:11:35 2026 GMT Subject: CN=11291d87-99f4-4caf-b27a-878c54e88736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:6f:f2:e0:e9:8b:48:b1:a6:44:fe:05:7a: 89:64:7c:0e:4c:ec:85:bd:8b:c4:28:75:54:17:91: 88:93:bd:c6:67:79:a6:e2:3f:81:59:89:d5:a7:be: 79:d6:af:9d:52:40:f1:03:fd:ae:29:90:44:0e:66: cf:28:e0:f0:0c:41:3a:7b:8a:e4:b6:1d:5b:61:f2: 40:fe:28:67:d9:08:68:85:db:15:0c:ab:b3:c3:d4: 56:ef:cc:f8:4b:06:a7:0e:ed:60:df:1b:e6:df:d7: b5:52:83:8a:c1:3e:d9:21:35:db:0d:04:ce:25:af: 6d:9a:a3:d8:9c:9b:3d:03:cf:1a:1f:f9:64:f8:1a: 66:04:32:f7:44:ee:a5:7e:12:6e:38:e4:c4:1d:a4: be:26:9d:8e:3c:38:47:ac:dd:b1:cd:5e:6b:b6:ff: a8:6d:ef:c3:2e:10:69:99:d7:db:5c:06:fb:bf:17: 1b:65:c1:f9:00:f9:4c:67:fb:30:5c:17:07:41:84: 10:20:70:9a:51:af:68:7f:49:dc:89:b2:65:33:d1: 4a:3b:b9:e8:1e:04:e0:ae:3e:b7:8e:24:fa:2b:83: 5b:66:56:2e:7a:c3:20:55:97:ca:64:22:f8:d4:76: 79:d9:52:e6:26:6a:b8:df:51:96:49:8c:9d:b5:bf: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8C:F0:3A:72:A1:11:EB:9C:C7:64:F9:32:33:8D:33:0A:B6:FE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/554b6640-b0e1-3a1b-90bb-f88e9d9c17cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c3:c6:34:da:12:6d:a5:97:d6:39:75:67:90:30:61:eb:26: e8:33:d1:52:1f:fa:ef:5c:ed:c8:79:0b:f2:ca:40:5d:91:e5: 93:50:1e:ad:e7:9b:46:bf:2f:18:56:b3:b9:fb:9d:c4:47:c1: d7:8a:2e:67:c6:b1:a6:4c:ac:b5:08:94:0d:d4:e5:7f:dd:2b: 1c:3d:ee:64:74:e1:e8:b3:5e:51:f2:27:dd:29:5b:a9:52:fd: 54:00:49:e1:2c:b2:82:f2:c7:86:d5:f1:77:f3:cf:13:ff:74: ec:7f:a1:57:e4:c7:d0:52:84:1f:fc:d0:ab:5b:24:2c:e3:4b: 46:0f:6c:cb:24:b1:e9:7e:cf:a7:91:37:71:16:6a:05:62:4a: c2:e1:70:95:45:e8:44:01:75:95:fc:e5:d9:8f:17:fb:70:c5: 77:ed:ec:21:69:5a:8c:e4:ec:de:1e:7f:a6:15:dc:ab:14:87: 3b:8d:34:13:bc:fb:bd:15:f9:03:f5:32:9a:72:93:cf:c6:0d: ff:84:57:e6:fd:be:c8:8a:b9:8b:84:29:97:fa:b7:42:08:2a: c9:2e:19:d3:b7:47:c5:05:8a:8c:da:19:1a:40:a6:b7:c7:34: 8c:d0:51:ee:77:bb:2b:b4:7e:df:8a:db:f2:8c:8d:e8:86:5a: 35:d0:ed:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuD/pltagXY1/IN2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAxNDA1MTEzNVoXDTI2MDExMjA2MTEzNVowLzEtMCsGA1UEAxMk MTEyOTFkODctOTlmNC00Y2FmLWIyN2EtODc4YzU0ZTg4NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDdv8uDpi0ixpkT+BXqJZHwOTOyFvYvEKHVU F5GIk73GZ3mm4j+BWYnVp7551q+dUkDxA/2uKZBEDmbPKODwDEE6e4rkth1bYfJA /ihn2QhohdsVDKuzw9RW78z4SwanDu1g3xvm39e1UoOKwT7ZITXbDQTOJa9tmqPY nJs9A88aH/lk+BpmBDL3RO6lfhJuOOTEHaS+Jp2OPDhHrN2xzV5rtv+obe/DLhBp mdfbXAb7vxcbZcH5APlMZ/swXBcHQYQQIHCaUa9of0ncibJlM9FKO7noHgTgrj63 jiT6K4NbZlYuesMgVZfKZCL41HZ52VLmJmq431GWSYydtb++9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGM8DpyoRHrnMdk+TIzjTMKtv6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvNTU0YjY2NDAtYjBlMS0z YTFiLTkwYmItZjg4ZTlkOWMxN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfDxjTaEm2ll9Y5dWeQMGHrJugz0VIf+u9c7ch5C/LKQF2R5ZNQHq3n m0a/LxhWs7n7ncRHwdeKLmfGsaZMrLUIlA3U5X/dKxw97mR04eizXlHyJ90pW6lS /VQASeEssoLyx4bV8XfzzxP/dOx/oVfkx9BShB/80KtbJCzjS0YPbMsksel+z6eR N3EWagViSsLhcJVF6EQBdZX85dmPF/twxXft7CFpWozk7N4ef6YV3KsUhzuNNBO8 +70V+QP1Mppyk8/GDf+EV+b9vsiKuYuEKZf6t0IIKskuGdO3R8UFiozaGRpAprfH NIzQUe53uyu0ft+K2/KMjeiGWjXQ7SQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:43 2025 by rpki-client