$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa File: b90f7135-7157-3fbc-bd15-33834ca90b1f.roa (raw, json) Hash identifier: DSwfZgso0WyXMOiTyeFsj+KpA/4a6rg1VoPgCesr+N8= Subject key identifier: 66:CF:07:56:0F:45:12:E2:96:D5:9F:67:0D:BE:D9:3B:A4:BB:88:1A Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D0ECBF05C277F85FC6F38A5C0 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa Signing time: Wed 04 Mar 2026 15:13:48 +0000 ROA not before: Wed 04 Mar 2026 15:13:48 +0000 ROA not after: Tue 02 Jun 2026 14:13:48 +0000 asID: 55256 IP address blocks: 158.95.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:cb:f0:5c:27:7f:85:fc:6f:38:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Mar 4 15:13:48 2026 GMT Not After : Jun 2 14:13:48 2026 GMT Subject: CN=76c4e5ef-8450-404e-a404-ed2550154f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:d9:89:81:0c:12:7c:cf:83:ab:d3:56:f7: 0b:93:ca:25:95:04:7e:6c:0e:0b:8e:55:11:8b:6a: 20:dc:23:7f:b3:1d:00:ca:73:3d:fe:17:8a:6d:dc: b6:ce:26:03:6a:45:17:97:90:6d:f5:7f:82:a3:9d: a4:19:40:f8:9f:d1:77:54:be:47:88:c6:2a:de:aa: 65:c8:7f:f0:54:a4:6d:b1:b4:83:67:67:7e:ca:e5: 2c:6f:f9:9f:51:1b:a6:f7:22:8b:93:9f:73:11:06: a3:fb:dc:04:5b:1e:c4:a6:cf:cd:85:94:0f:e9:99: 9b:a7:33:7e:86:98:af:34:7d:ac:f6:e6:71:4d:fa: 59:e3:da:21:13:0f:e7:9a:96:b6:45:84:f7:2d:af: 6a:60:b0:c1:4c:5c:03:18:57:ef:14:ad:10:79:a4: 2f:ba:86:d4:ec:81:de:2e:dd:5f:ca:f6:a7:03:40: 4c:00:0b:4a:ee:59:50:2e:0f:ef:fa:5e:80:70:5d: fa:d2:b1:63:6c:7f:37:45:a1:77:47:ed:06:6b:52: 44:42:5c:22:12:2c:d7:52:03:01:ca:90:57:15:ef: 98:64:60:4d:7c:ad:d7:58:34:0d:23:16:2d:99:07: d1:9e:9e:e8:4d:86:fb:53:b9:16:17:50:c6:ff:fe: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CF:07:56:0F:45:12:E2:96:D5:9F:67:0D:BE:D9:3B:A4:BB:88:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:37:69:12:4c:70:61:9c:53:0a:24:58:08:10:09:01:99:41: 4a:25:bd:53:16:7e:0f:2b:d8:f9:2e:c0:1d:0f:cc:c4:e9:e0: b1:e4:c3:13:96:39:33:3a:15:f4:f4:cb:ca:44:7c:77:97:c6: 96:85:2c:1e:b6:c8:a3:b9:bd:1f:48:20:ee:bf:ce:fe:4c:6f: 14:03:78:d4:ed:03:d4:0e:02:2a:9b:dd:73:f5:83:33:33:a6: 19:2e:dd:10:b0:e3:ea:73:62:57:75:2f:25:d2:a4:ef:36:98: 30:e9:7a:a9:27:a3:02:b1:be:a8:c4:6a:c2:aa:a3:c1:16:45: 1c:e6:b9:a1:59:4a:fa:b8:e9:f2:10:06:10:33:f3:87:d0:07: bd:3e:78:7b:1b:ed:d7:45:6e:ad:7c:32:e4:db:9c:b7:75:7c: 97:69:e0:0e:ee:43:1f:32:30:3b:45:1b:06:4b:c2:20:05:33: 71:28:69:0a:d5:33:c9:fe:93:a6:f0:16:65:34:24:21:59:e3: f6:3f:38:4d:6d:0a:cb:c9:cb:6b:71:11:29:fb:40:72:e9:2c: 61:8f:28:5a:7d:c7:fd:a6:f9:9f:22:67:14:b7:f2:51:59:e4: b0:49:1a:4b:fc:89:4f:d7:7d:7e:f1:7a:17:97:98:2e:e3:e7: 0b:5d:7e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Oy/BcJ3+F/G84pcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDMwNDE1MTM0OFoXDTI2MDYwMjE0MTM0OFowLzEtMCsGA1UEAxMk NzZjNGU1ZWYtODQ1MC00MDRlLWE0MDQtZWQyNTUwMTU0ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujbZiYEMEnzPg6vTVvcLk8ollQR+bA4LjlUR i2og3CN/sx0AynM9/heKbdy2ziYDakUXl5Bt9X+Co52kGUD4n9F3VL5HiMYq3qpl yH/wVKRtsbSDZ2d+yuUsb/mfURum9yKLk59zEQaj+9wEWx7Eps/NhZQP6ZmbpzN+ hpivNH2s9uZxTfpZ49ohEw/nmpa2RYT3La9qYLDBTFwDGFfvFK0QeaQvuobU7IHe Lt1fyvanA0BMAAtK7llQLg/v+l6AcF360rFjbH83RaF3R+0Ga1JEQlwiEizXUgMB ypBXFe+YZGBNfK3XWDQNIxYtmQfRnp7oTYb7U7kWF1DG//7SgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbPB1YPRRLiltWfZw2+2Tuku4gaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYjkwZjcxMzUtNzE1Ny0z ZmJjLWJkMTUtMzM4MzRjYTkwYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs3aRJMcGGcUwokWAgQCQGZQUolvVMWfg8r2PkuwB0PzMTp4LHkwxOW OTM6FfT0y8pEfHeXxpaFLB62yKO5vR9IIO6/zv5MbxQDeNTtA9QOAiqb3XP1gzMz phku3RCw4+pzYld1LyXSpO82mDDpeqknowKxvqjEasKqo8EWRRzmuaFZSvq46fIQ BhAz84fQB70+eHsb7ddFbq18MuTbnLd1fJdp4A7uQx8yMDtFGwZLwiAFM3EoaQrV M8n+k6bwFmU0JCFZ4/Y/OE1tCsvJy2txESn7QHLpLGGPKFp9x/2m+Z8iZxS38lFZ 5LBJGkv8iU/XfX7xeheXmC7j5wtdfpE= -----END CERTIFICATE-----Generated at Thu Mar 26 06:48:21 2026 by rpki-client