$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/74a6d7dd-c80d-3c4b-8350-eb9f1c09a8e7.roa File: 74a6d7dd-c80d-3c4b-8350-eb9f1c09a8e7.roa (raw, json) Hash identifier: pvzybmnKe4XKT5DRiFEKeb3181x54Xn/sdlbHlrEifU= Subject key identifier: 87:D6:58:CE:F4:E9:8C:E4:83:36:74:49:EC:92:72:1B:D8:7A:48:2D Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584F498A2EDC0736CA7F3869F462 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/74a6d7dd-c80d-3c4b-8350-eb9f1c09a8e7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 55256 IP address blocks: 158.95.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:2e:dc:07:36:ca:7f:38:69:f4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1a69146b-6db0-4143-8042-c90cc3bb36bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3b:b9:39:84:68:ae:f7:4c:6b:19:5f:32:b8: 26:d1:7a:c9:d3:08:de:fe:78:a1:2d:25:9b:a2:6c: 89:df:01:39:72:3b:d6:53:f5:83:67:0d:fc:46:08: d9:a4:4d:1e:7d:27:b9:a0:8f:6e:94:98:96:76:b8: f9:88:0c:57:95:76:5c:6e:f7:04:4c:9b:1c:22:13: 0c:98:a1:9e:ca:74:87:ee:2b:cb:c6:a9:22:bc:b3: 9f:12:3b:42:67:8a:b6:54:fc:1c:07:26:2e:9b:9b: 86:47:25:8f:67:23:88:8f:0e:24:24:71:7f:9a:8a: 9f:e7:ba:3e:03:1e:2f:15:5b:35:9f:6e:2b:7a:a2: 42:8e:d7:8a:bc:73:e0:94:23:3d:80:44:b1:d4:8e: c1:0c:51:2e:49:29:d6:40:aa:6d:04:bf:f2:b1:08: 54:f3:e7:0f:ce:d8:5f:33:64:d4:70:3c:61:eb:f4: 84:69:b3:f5:c1:c8:0e:fd:87:3d:c0:64:bc:12:08: ef:c5:66:70:7f:c4:dc:76:bb:1d:37:f1:9d:5d:e4: bf:66:ea:be:77:ac:1b:ad:50:67:c0:d8:e9:e3:9a: f8:6d:3d:57:9f:b1:f3:ef:35:6b:13:6f:10:a4:62: 2d:3e:0d:f4:1d:58:f9:1d:60:67:e7:46:34:6a:09: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D6:58:CE:F4:E9:8C:E4:83:36:74:49:EC:92:72:1B:D8:7A:48:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/74a6d7dd-c80d-3c4b-8350-eb9f1c09a8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:50:17:4e:1a:9d:61:21:f6:fe:8f:e7:39:66:d4:7f:49:16: 84:50:f6:46:db:80:7b:27:c1:44:98:fe:a4:d7:ee:35:70:84: 84:9a:bd:44:3d:c0:5e:6a:be:7f:9d:d1:7e:cf:26:93:31:ca: e3:62:9b:15:65:a6:c0:6c:e7:29:f6:97:32:45:7d:d4:2c:b6: 52:1a:7d:21:1c:02:66:14:e1:a2:c6:13:d2:fc:b9:40:e1:18: 89:41:e3:2e:fd:ba:f4:43:f1:d7:11:1d:ed:2a:24:8f:76:4e: f5:5c:5b:b6:ac:44:70:d5:20:f0:be:13:6e:c6:e5:b8:79:71: 76:6d:ff:e2:e8:aa:e4:2b:e3:de:9d:2d:cd:86:a2:2d:a0:d2: e7:4c:83:32:cf:f5:cb:6b:d9:97:72:4f:90:f2:e1:92:bd:ba: 3c:f7:a3:0d:df:8b:a8:d2:13:ae:6b:80:37:40:ed:13:0f:37: 08:5c:1b:29:e5:b3:56:3b:18:a6:2a:82:78:6f:67:eb:ab:9d: 08:b1:2c:d7:eb:33:7f:f8:79:e3:b1:a4:71:81:37:c4:92:3e: c6:f6:bd:db:42:6e:19:2a:56:96:db:72:6c:ef:31:67:f9:63: d6:89:d2:54:5b:95:0f:19:10:8e:b2:e1:eb:dc:9a:ec:64:fc: a8:9b:fe:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jii7cBzbKfzhp9GIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWE2OTE0NmItNmRiMC00MTQzLTgwNDItYzkwY2MzYmIzNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Du5OYRorvdMaxlfMrgm0XrJ0wje/nihLSWb omyJ3wE5cjvWU/WDZw38RgjZpE0efSe5oI9ulJiWdrj5iAxXlXZcbvcETJscIhMM mKGeynSH7ivLxqkivLOfEjtCZ4q2VPwcByYum5uGRyWPZyOIjw4kJHF/moqf57o+ Ax4vFVs1n24reqJCjteKvHPglCM9gESx1I7BDFEuSSnWQKptBL/ysQhU8+cPzthf M2TUcDxh6/SEabP1wcgO/Yc9wGS8EgjvxWZwf8TcdrsdN/GdXeS/Zuq+d6wbrVBn wNjp45r4bT1Xn7Hz7zVrE28QpGItPg30HVj5HWBn50Y0aglzlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfWWM706YzkgzZ0SeySchvYekgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvNzRhNmQ3ZGQtYzgwZC0z YzRiLTgzNTAtZWI5ZjFjMDlhOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlQF04anWEh9v6P5zlm1H9JFoRQ9kbbgHsnwUSY/qTX7jVwhISavUQ9 wF5qvn+d0X7PJpMxyuNimxVlpsBs5yn2lzJFfdQstlIafSEcAmYU4aLGE9L8uUDh GIlB4y79uvRD8dcRHe0qJI92TvVcW7asRHDVIPC+E27G5bh5cXZt/+LoquQr496d Lc2Goi2g0udMgzLP9ctr2ZdyT5Dy4ZK9ujz3ow3fi6jSE65rgDdA7RMPNwhcGynl s1Y7GKYqgnhvZ+urnQixLNfrM3/4eeOxpHGBN8SSPsb2vdtCbhkqVpbbcmzvMWf5 Y9aJ0lRblQ8ZEI6y4evcmuxk/Kib/s0= -----END CERTIFICATE-----Generated at Sat Sep 26 14:20:49 2026 by rpki-client