$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f28f1df8-6d71-3736-bd2c-46a833ad4a9e.roa File: f28f1df8-6d71-3736-bd2c-46a833ad4a9e.roa (raw, json) Hash identifier: ayOIGnIMq101tHI5XNMHVjdYF+WpcF0TMhYK4gUDXTU= Subject key identifier: 37:BB:1B:A2:8B:2E:D6:7A:EA:A3:D1:B0:C7:56:23:F8:C8:86:41:4F Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D0ECE5FC9FABBCA6CD5307500 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f28f1df8-6d71-3736-bd2c-46a833ad4a9e.roa Signing time: Wed 04 Mar 2026 15:18:43 +0000 ROA not before: Wed 04 Mar 2026 15:18:43 +0000 ROA not after: Tue 02 Jun 2026 14:18:43 +0000 asID: 55256 IP address blocks: 158.95.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:ce:5f:c9:fa:bb:ca:6c:d5:30:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Mar 4 15:18:43 2026 GMT Not After : Jun 2 14:18:43 2026 GMT Subject: CN=5e584e49-3cc0-4f9a-99f8-93bc3075db0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:6b:10:8b:21:fa:dd:28:c5:2a:2c:ec:6a: 54:86:95:41:aa:91:e6:1c:78:c8:1f:fa:9c:32:20: 3d:bb:72:c4:bf:03:3a:bb:cf:db:4c:c7:bd:3d:80: ee:2a:89:68:33:c1:9d:75:e4:92:a9:0e:91:22:ee: df:05:94:32:7e:34:b1:de:f7:79:2c:0f:11:e8:8b: ad:89:0c:dc:4f:e0:6b:de:30:51:e3:5d:38:2f:60: cf:27:c8:3a:3c:55:fb:cd:bb:7c:24:c8:d6:15:3c: 6a:29:92:42:70:bc:26:b1:02:37:96:8b:97:f1:97: 6c:50:15:1c:44:c4:68:ee:f4:f7:a1:9e:94:1b:40: 84:84:dc:f6:49:13:ef:3b:3c:2e:5b:a7:fa:0f:cc: e4:31:9f:28:2d:94:e5:d8:24:5e:af:4b:8b:7b:0c: d5:e8:8c:c5:b5:fb:cc:66:aa:ac:93:7a:24:90:83: 3c:97:38:83:9c:8d:f8:60:3d:61:cb:10:14:18:25: 7d:cb:16:c4:be:9b:38:9e:f6:be:4f:56:1f:c1:4f: 71:27:88:f0:18:1c:41:a6:d9:a5:d6:94:9a:a4:e6: 34:7d:75:fb:db:e7:d0:df:ca:26:9e:02:ed:b4:35: 5b:52:e5:06:b5:85:1f:0e:6d:f2:1f:2d:81:73:b8: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BB:1B:A2:8B:2E:D6:7A:EA:A3:D1:B0:C7:56:23:F8:C8:86:41:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f28f1df8-6d71-3736-bd2c-46a833ad4a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a4:8b:c5:41:c3:15:e2:85:41:8a:5d:91:29:8d:19:87:67: c7:1e:6a:7d:1b:09:c1:1c:1a:7d:77:9e:bd:d6:a6:41:61:6b: 01:84:08:2f:6f:73:8b:ca:c7:e0:32:67:33:3d:70:8a:11:9e: de:fe:e0:f7:24:37:5a:c2:da:82:b0:39:30:31:c8:3b:6c:65: 4a:94:c2:82:6c:81:b2:52:6b:98:f4:f8:63:d1:a1:01:1c:37: 67:20:96:66:cb:dc:88:43:43:a8:0a:ac:11:2e:c7:8d:b0:24: 3a:7b:a6:fb:ac:ad:4c:8c:33:77:fd:c0:39:8e:cd:f6:0e:c7: 0e:a3:c6:5c:a5:3a:b4:5e:a6:c0:03:68:2b:62:dd:06:02:91: 65:b0:79:e4:05:6e:d2:d1:ca:7e:d5:e9:c0:81:ae:48:d5:8a: 2c:b1:ac:84:ef:0d:a6:9a:dd:34:4c:fc:4d:55:a3:3f:47:33: 24:ee:3e:9b:4d:a7:86:c8:7c:25:cf:db:de:7f:d4:7b:f3:7d: a8:5c:d0:83:20:9d:e5:60:3d:23:c4:d9:bc:92:0f:69:e3:9f: 7b:85:47:41:14:a1:97:e2:94:45:b4:2e:0c:fa:de:00:d0:d1: 0b:7c:ac:e9:96:cb:48:07:9a:58:20:61:85:59:40:31:6b:be: 85:55:33:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Ozl/J+rvKbNUwdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDMwNDE1MTg0M1oXDTI2MDYwMjE0MTg0M1owLzEtMCsGA1UEAxMk NWU1ODRlNDktM2NjMC00ZjlhLTk5ZjgtOTNiYzMwNzVkYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6BrEIsh+t0oxSos7GpUhpVBqpHmHHjIH/qc MiA9u3LEvwM6u8/bTMe9PYDuKoloM8GddeSSqQ6RIu7fBZQyfjSx3vd5LA8R6Iut iQzcT+Br3jBR4104L2DPJ8g6PFX7zbt8JMjWFTxqKZJCcLwmsQI3louX8ZdsUBUc RMRo7vT3oZ6UG0CEhNz2SRPvOzwuW6f6D8zkMZ8oLZTl2CRer0uLewzV6IzFtfvM Zqqsk3okkIM8lziDnI34YD1hyxAUGCV9yxbEvps4nva+T1YfwU9xJ4jwGBxBptml 1pSapOY0fXX72+fQ38omngLttDVbUuUGtYUfDm3yHy2Bc7gOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe7G6KLLtZ66qPRsMdWI/jIhkFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZjI4ZjFkZjgtNmQ3MS0z NzM2LWJkMmMtNDZhODMzYWQ0YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOki8VBwxXihUGKXZEpjRmHZ8cean0bCcEcGn13nr3WpkFhawGECC9v c4vKx+AyZzM9cIoRnt7+4PckN1rC2oKwOTAxyDtsZUqUwoJsgbJSa5j0+GPRoQEc N2cglmbL3IhDQ6gKrBEux42wJDp7pvusrUyMM3f9wDmOzfYOxw6jxlylOrRepsAD aCti3QYCkWWweeQFbtLRyn7V6cCBrkjViiyxrITvDaaa3TRM/E1Voz9HMyTuPptN p4bIfCXP295/1Hvzfahc0IMgneVgPSPE2bySD2njn3uFR0EUoZfilEW0Lgz63gDQ 0Qt8rOmWy0gHmlggYYVZQDFrvoVVM8k= -----END CERTIFICATE-----Generated at Thu Mar 26 09:27:01 2026 by rpki-client