$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d5625bf1-dbd6-3528-bcfc-fcad9293277c.roa File: d5625bf1-dbd6-3528-bcfc-fcad9293277c.roa (raw, json) Hash identifier: tzCR7RNe5IjGx2TmTU6CWFhJ+CTsdKnKGwJCJfDMr8g= Subject key identifier: A8:8D:25:DB:C1:4A:83:A6:BA:0C:65:6E:38:69:1D:6C:D2:C0:5C:26 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584DBCD0AF7E1A415590CBAE6F80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d5625bf1-dbd6-3528-bcfc-fcad9293277c.roa Signing time: Tue 05 May 2026 23:14:01 +0000 ROA not before: Tue 05 May 2026 23:14:01 +0000 ROA not after: Mon 03 Aug 2026 23:14:01 +0000 asID: 55256 IP address blocks: 158.95.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bc:d0:af:7e:1a:41:55:90:cb:ae:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: May 5 23:14:01 2026 GMT Not After : Aug 3 23:14:01 2026 GMT Subject: CN=a45a2496-c1d0-48cf-9544-27a4bd86bcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:ea:6a:7a:2e:b1:13:6c:40:89:98:1b:22: 6a:91:92:7a:94:b7:a1:88:e0:e5:76:a5:da:3e:52: 69:f2:0a:e6:11:2f:c0:90:54:4c:1b:46:97:59:87: 9e:94:4d:c1:d9:20:91:14:f5:70:a2:b8:58:7c:bb: 7b:4e:5c:24:ee:2e:07:88:f6:f1:e9:13:10:cb:d5: e7:17:50:fc:50:d5:62:c6:1d:8b:ce:89:e5:3e:af: f6:3f:84:9a:f8:51:3e:40:8c:08:ea:15:e9:d4:b3: 86:05:60:a5:b9:cf:22:b9:fb:fa:88:c4:bb:2d:18: 7e:39:97:4d:fb:b4:8f:ac:c3:ca:a5:f3:27:1f:a4: e2:12:f0:7a:30:c3:cb:48:06:26:ed:bb:ac:7a:ef: fc:3c:31:3a:68:c5:9a:cc:ca:81:5c:17:af:3b:cc: a8:79:37:db:48:ab:04:b6:be:07:09:1a:f6:43:08: 0b:b9:f9:fe:26:5e:81:98:57:fe:5d:33:bc:ef:0f: 37:fe:30:50:05:9b:6c:8e:cf:d5:3d:1c:e5:61:51: bc:67:fa:87:24:94:91:71:f6:9a:cf:05:dd:27:10: 82:20:62:04:fd:ae:17:76:36:9e:27:c4:ec:8e:42: 41:5b:2d:2a:a8:30:8e:1f:b7:9d:37:b1:9b:a4:26: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8D:25:DB:C1:4A:83:A6:BA:0C:65:6E:38:69:1D:6C:D2:C0:5C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d5625bf1-dbd6-3528-bcfc-fcad9293277c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:cd:a1:b5:d7:93:7e:4d:d8:78:40:d7:e5:b0:94:85:4f:4f: 8b:b9:dd:3e:77:0a:ad:2d:1b:fd:70:77:df:47:9a:f4:1a:ad: 63:aa:29:43:4c:03:be:72:f4:0b:6a:cd:7c:ab:0a:a1:b8:59: cf:e8:8f:5a:d0:58:c6:2b:05:35:fd:1f:2f:1d:0a:3b:fc:29: d8:fe:d6:63:6b:b3:65:98:eb:fe:df:cc:ea:01:1c:4a:e1:a7: d2:e0:78:37:4a:e5:b3:0a:f2:15:29:e1:b9:7d:8b:c7:06:37: f5:32:09:5d:26:46:37:50:bb:91:78:3e:b6:4c:21:3a:75:18: 73:e9:b3:c9:59:40:9a:22:7e:15:cc:48:ae:a7:f6:36:7f:89: 6e:65:aa:53:9d:0c:84:66:07:70:05:86:07:0b:46:95:33:f0: 7c:b2:b5:1a:9d:cf:09:ef:db:04:ce:28:fe:01:49:d8:37:e9: 73:d5:1a:e2:f6:4e:80:f5:96:0a:d3:40:35:63:dd:50:0d:8a: f3:31:f3:38:52:9f:5c:5c:2f:5b:37:46:0d:82:a2:1a:64:95: 77:50:2d:17:c6:ec:4d:d4:4a:63:f9:58:b7:28:af:27:93:71: 2d:7d:b2:15:45:02:2e:b7:08:23:b8:6a:9d:a6:93:4d:b8:55: 04:92:a4:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE280K9+GkFVkMuub4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDUwNTIzMTQwMVoXDTI2MDgwMzIzMTQwMVowLzEtMCsGA1UEAxMk YTQ1YTI0OTYtYzFkMC00OGNmLTk1NDQtMjdhNGJkODZiY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlzqanousRNsQImYGyJqkZJ6lLehiODldqXa PlJp8grmES/AkFRMG0aXWYeelE3B2SCRFPVworhYfLt7Tlwk7i4HiPbx6RMQy9Xn F1D8UNVixh2LzonlPq/2P4Sa+FE+QIwI6hXp1LOGBWCluc8iufv6iMS7LRh+OZdN +7SPrMPKpfMnH6TiEvB6MMPLSAYm7buseu/8PDE6aMWazMqBXBevO8yoeTfbSKsE tr4HCRr2QwgLufn+Jl6BmFf+XTO87w83/jBQBZtsjs/VPRzlYVG8Z/qHJJSRcfaa zwXdJxCCIGIE/a4XdjaeJ8TsjkJBWy0qqDCOH7edN7GbpCZQCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiNJdvBSoOmugxlbjhpHWzSwFwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZDU2MjViZjEtZGJkNi0z NTI4LWJjZmMtZmNhZDkyOTMyNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrNobXXk35N2HhA1+WwlIVPT4u53T53Cq0tG/1wd99HmvQarWOqKUNM A75y9AtqzXyrCqG4Wc/oj1rQWMYrBTX9Hy8dCjv8Kdj+1mNrs2WY6/7fzOoBHErh p9LgeDdK5bMK8hUp4bl9i8cGN/UyCV0mRjdQu5F4PrZMITp1GHPps8lZQJoifhXM SK6n9jZ/iW5lqlOdDIRmB3AFhgcLRpUz8HyytRqdzwnv2wTOKP4BSdg36XPVGuL2 ToD1lgrTQDVj3VANivMx8zhSn1xcL1s3Rg2CohpklXdQLRfG7E3USmP5WLcoryeT cS19shVFAi63CCO4ap2mk024VQSSpNg= -----END CERTIFICATE-----Generated at Wed May 13 07:35:32 2026 by rpki-client